• masterofn001
      link
      fedilink
      2
      edit-2
      11 hours ago

      That’s probably a VNC/local server listener.

      tor listens for socks on 9050 by default. tor uses 5400 as the default DNS port.