**Source:** coord:instr:socks5-proxy

**Time:** 2026-05-30T15:14:11

---

SOCKS5 proxy on port 1080 was exposed to 0.0.0.0 with NO AUTH.

Two active external connections were found (193.124.20.246, 193.32.209.248).

iptables DROP rule applied and persisted (netfilter-persistent).

If you need the SOCKS5 tunnel re-established, use:

ssh -R 127.0.0.1:1080:localhost:1080 ... (bind localhost only)

Do NOT use -R 0.0.0.0:1080:... — GatewayPorts is default (no) on sshd_config.

The alt SSH port 2223 is still open for your connection.