Port 1080 (SOCKS proxy)
Generic proxy protocol.
- Transport
- TCP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Open SOCKS proxies are abused to hide attackers' origin.
- Malware and tunnelling tools often set up SOCKS proxies for pivoting.
When it shows up in your logs
A SOCKS listener on a workstation is unusual and may be attacker tooling.