Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Socks 5 Proxy Detection

Info

Synopsis

The remote host is acting as a Socks version 5 proxy.

Description

The remote host is acting as a Socks version 5 proxy. This allows remote proxy clients to tunnel traffic through the host. This sort of behavior is somewhat commonplace on compromised hosts.

Solution

Ensure that the proxy is authorized with respect to corporate policies and guidelines.