Synopsis
The remote host is acting as a Socks version 4 proxy.
Description
The remote host is acting as a Socks version 4 proxy. This allows remote proxy clients to tunnel traffic through the host. This sort of behavior is somewhat commonplace on compromised hosts.
Solution
Ensure that the proxy is authorized with respect to corporate policies and guidelines.