0

While I was monitoring my traffic today I noticed tunnels to many unknown IP addresses using the port 443.

These IPs do not come from one country... Some are from Germany, Russia, Spain, Ukraine, etc...

I'm using XAMPP, and running Apache on both 80 and 443 ports.

I have Kaspersky AV, and I'm not sure if this is some kind of trojan.

Fiddler Screenshot

DavidPostill
  • 162,382
Mohammed Radwan
  • 1

1 Answers1

0

The most likely explanation here is that you've enabled remote connections to your Fiddler and your computer/network isn't properly protected by a firewall. As a consequence, bad guys on the networks have noticed that you're running an open proxy and they're misusing that open-proxy to mask the source of their traffic.

You should untick the "Allow remote computers to connect" option in the Fiddler Options until you properly configure your network to not allow external traffic.

EricLaw
  • 447