{
  "port": 9050,
  "protocol": "tcp",
  "service": "Tor SOCKS proxy",
  "oneLiner": "Tor's default SocksPort — the local SOCKS5 endpoint applications use to route through Tor.",
  "whatItIs": "The tor daemon listens on 9050 by default for connections from SOCKS-speaking applications, which is how curl, SSH, and everything else gets onto the Tor network. It is a per-machine local service: seeing it means the tor daemon is installed and running, not that the host is a relay. Tor Browser bundles its own tor on 9150 instead, so 9050 usually means a system tor package. IANA registers 9050/tcp to something unrelated (versiera).",
  "exposure": {
    "verdict": "never",
    "note": "An externally reachable SocksPort is an open proxy — strangers relay traffic through your Tor client and your IP; keep it on 127.0.0.1."
  },
  "checkCommand": "curl -s --socks5-hostname 127.0.0.1:9050 https://check.torproject.org/api/ip",
  "links": [
    {
      "title": "tor(1) manual — SocksPort (default 9050)",
      "url": "https://manpages.debian.org/unstable/tor/tor.1.en.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 9050",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9050",
      "kind": "iana"
    }
  ],
  "ianaName": "versiera"
}