• masterofn001
      link
      fedilink
      4
      edit-2
      17 hours ago

      That’s probably a VNC/local server listener.

      tor listens for socks on 9050 by default. tor uses 5400 as the default DNS port.