TrendLabs: Keeping a Hidden Identity: Mirai C&Cs in Tor Network

Figure 1. A sample of a Shodan scan search result showing socks proxies.

REF: https://blog.trendmicro.com/trendlabs-security-intelligence/keeping-a-hidden-identity-mirai-ccs-in-tor-network/