Myxa VPN SOCKS5 proxy redirect on port 1082

Kaung Khant Ko@kaungkhantko

•updated Aug 13, 2026•0•0•4

This rule detects outgoing TCP traffic to port 1082 that initiates or utilizes a SOCKS5 proxy connection, specifically identifying patterns associated with the Myxa VPN tool. The detection monitors for the specific SOCKS5 handshake byte and identifies known hardcoded IP addresses associated with this tool's proxy infrastructure.