LEGACY: Proxy Report

LAST UPDATED: 2021-04-01

LEGACY REPORT

This report has not been used in several years and has been discontinued.

This report detects proxy servers, which are commonly used to make malicious activity seem anonymous.

A common use of drones is to turn them into proxy servers to add anonymity to other activity, such as more direct hacking, accessing forums, or even sending spam.

Fields

Date

Date of the IP being seen in UTC+0
Time

Time of the IP being seen in UTC+0
C&C

The Command and Control that created the proxy
C&C Port

IRC port of the C&C
C&C ASN

ASN where the C&C IP resides
C&C Geo

Country where the C&C IP resides
C&C DNS

Reverse DNS of the C&C IP
PXY

IP of the device set up as a proxy server
PXY ASN

ASN of the IP of the proxy server
PXY Geo

Country of the proxy server
PXY DNS

Reverse DNS of the IP of the proxy server
PXY Port

Port setup for proxy usage
Password

Password for the proxy server

Sample

"Date","Time","C&C","C&C Port","C&C ASN","C&C Geo","C&C DNS","PXY","PXY ASN","PXY Geo","PXY DNS","PXY Port","Password"
"2008-11-03","22:00:27","81.88.53.122",7000,39729,"IT","host-81-88-53-122.dedicatedservers.it","192.168.1.100","","-","",8001,""
"2008-11-03","22:00:27","81.88.53.122",7000,39729,"IT","host-81-88-53-122.dedicatedservers.it","190.72.240.6",8048,"VE","190-72-240-6.dyn.dsl.cantv.net",8001,""
"2008-11-03","22:00:27","81.88.53.122",7000,39729,"IT","host-81-88-53-122.dedicatedservers.it","201.51.32.9",7738,"BR","20151032009.user.veloxzone.com.br",8001,""

Our 128 Report Types

« Back to Network Reporting