Tor's default SocksPort — the local SOCKS5 endpoint applications use to route through Tor.
The tor daemon listens on 9050 by default for connections from SOCKS-speaking applications, which is how curl, SSH, and everything else gets onto the Tor network. It is a per-machine local service: seeing it means the tor daemon is installed and running, not that the host is a relay. Tor Browser bundles its own tor on 9150 instead, so 9050 usually means a system tor package. IANA registers 9050/tcp to something unrelated (versiera).
Do not expose
An externally reachable SocksPort is an open proxy — strangers relay traffic through your Tor client and your IP; keep it on 127.0.0.1.
$ curl -s --socks5-hostname 127.0.0.1:9050 https://check.torproject.org/api/ipSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.