A SOCKS proxy — a generic TCP/UDP relay that will forward traffic anywhere on behalf of whoever can reach it.
SOCKS is a circuit-level proxy: a client connects, negotiates an authentication method, then asks the proxy to open a connection to some other host and port, after which bytes pass through untouched. SOCKS5 is RFC 1928, with username/password authentication in RFC 1929 and GSSAPI in RFC 1961; "no authentication required" is a legal method and a common default. You will find it in front of Dante, 3proxy, or microsocks, on a corporate egress gateway, or as the local end of an ssh -D dynamic forward. It is also one of the most scanned ports on the internet, because an open relay is directly useful to an attacker for spam, credential stuffing, and hiding the origin of other traffic.
Do not expose
An internet-facing SOCKS proxy without authentication is an open relay and will be found and abused within hours. If it must be remote, require credentials, restrict source addresses, and prefer an SSH dynamic forward or a VPN over an exposed listener.
$ curl -sS -m 8 --socks5-hostname TARGET:1080 https://example.com/ -o /dev/null -w '%{http_code}\n'Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.