mmproxy - Creative Linux routing to preserve client IP addresses in L7 proxies
Tags
country: Poland
attack-pattern: Data Direct Hardware - T1592.001 Ip Addresses - T1590.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Ssh - T1021.004 Tool - T1588.002 Connection Proxy - T1090 Sudo - T1169
Show in Graph
Common Information
Type Value
UUID add3cc81-b82b-4404-b60f-3ed654bb248b
Fingerprint 2681e81d4eb14c97
Analysis status DONE
Considered CTI value 0
Text language
Published April 17, 2018, 10:11 p.m.
Added to db Jan. 18, 2023, 8:21 p.m.
Last updated Nov. 17, 2024, 11:40 p.m.
Headline mmproxy - Creative Linux routing to preserve client IP addresses in L7 proxies
Title mmproxy - Creative Linux routing to preserve client IP addresses in L7 proxies
Detected Hints/Tags/Attributes 34/2/17
Source URLs
Redirection Url
Details Source https://blog.cloudflare.com/mmproxy-creative-way-of-preserving-client-ips-in-spectrum/
URL Provider
Details Provider Source level domain
Details cloudflare.com blog.cloudflare.com
Attributes
Details Type #Events CTI Value
Details Domain 51 
cloudflare.com
Details Domain 4128 
github.com
Details Domain 1 
ssh.example.org
Details File 1 
cloudflare-ip-ranges.txt
Details File 115 
auth.log
Details Github username 16 
cloudflare
Details IPv4 4 
192.0.2.123
Details IPv4 1 
104.16.112.25
Details IPv4 619 
0.0.0.0
Details IPv4 1441 
127.0.0.1
Details IPv4 17 
192.0.2.1
Details IPv4 1 
79.1.2.3
Details IPv4 1 
172.68.136.1
Details IPv4 295 
8.8.8.8
Details IPv6 1 
2400:cb00:2048:1::c629:d6a2
Details IPv6 72 
::1
Details Url 1 
https://github.com/cloudflare/mmproxy.git