Port 9050 (Tor SOCKS proxy)
Default local SOCKS port of the Tor client (relays use 9001).
- Transport
- TCP
- Internet exposure
- Never expose
Should not be reachable from the internet.
Security notes
- Tor on a corporate host can hide command and control or data theft.
When it shows up in your logs
A host listening on 9050, or connecting to known Tor relays, should be explained.
Related ports
- 9001
- 1080 SOCKS proxy