Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: Proxy list for ingress blocking - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Proxy list for ingress blocking
Hello,

I am trying to find a reasonable list of well-known proxy providers in order to drop traffic originating from these ip addresses. I know the lists exists in certain paid IDS solutions, but I figured a csv list has to exists. The list obviously does not have to be all-encompassing because it is impossible to map out every proxy service world-wide.

I currently use the free rules from Emerging Threats, http://rules.emergingthreats.net/blockrules/. I found a few sites that will allow you to download a csv like incloak.com, hidemyass.com and proxy-list.org, but these are paid. I figured at least someone else has already found a free list somewhere.

Any thoughts? Thanks.
Anonymous

I have been looking for any lists like this, and so far I haven't found anything comprehensive. Some of the proxy providers try to stay anonymous on purpose and make it particularly difficult to find their IP addresses. We do have tor exit nodes, but they are pretty easy to find. For example see isc.sans.edu/… (and the data can also be retrieved in different formats via our API isc.sans.edu/api ) Johannes

2866 Posts
ISC Handler
I suppose you could go to a free proxy list like http://proxylist.hidemyass.com/ and scrape that data over a period of time... Now that I think about it I may do this myself and publish the list. red0green

4 Posts

Sign Up for Free or Log In to start participating in the conversation!