IPCola: A Tangled Mess
Dec. 3, 2025, 11:27 a.m.
Description
IPCola, a new proxy service, claims to have millions of active IPs sourced from IoT, Desktop, and Mobile devices. Investigation reveals connections to Gaganode, a decentralized bandwidth monetization service with features resembling a botnet. Gaganode's SDK includes remote code execution capabilities, posing significant security risks. The service is widely distributed through various applications, including Chinese TV boxes and free software. IPCola is linked to InstaIP and NuoChen Technology, suggesting a complex network of proxy providers. The investigation exposes the intricate relationships between proxy providers and SDKs, highlighting the methods used to acquire unique IP pools.
Tags
Date
- Created: Dec. 2, 2025, 9:13 p.m.
- Published: Dec. 2, 2025, 9:13 p.m.
- Modified: Dec. 3, 2025, 11:27 a.m.