icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

Socks 4 Proxy Detection

Info

Synopsis

The remote host is acting as a Socks version 4 proxy.

Description

The remote host is acting as a Socks version 4 proxy. This allows remote proxy clients to tunnel traffic through the host. This sort of behavior is somewhat commonplace on compromised hosts.

Solution

Ensure that the proxy is authorized with respect to corporate policies and guidelines.