my IDS (psad) detects some strange packets on 1080 port and here is the description

SCAN SOCKS Proxy attempt

What is the socks proxy?

any idea?

It could be that someone is scanning for a misconfigured proxy. A misconfigured proxy will let you pass right throught it if I recall. I think this was how Adrian Lamo (the homeless white hat hacker) would penetrate most the organizations he got into.

SOCKS Proxy is an alternative to squid. Your error message could easily say
SCAN Squid Proxy attempt. If you are not running a proxy then you don't have too much to worry about from that specific threat. Just keep monitoring like you're doing. If you are running a proxy then you should probably make sure it is configured correctly because someone is knocking on your door.

Thanks for your help benjithegreat98.

I don't run any proxy, and the specific port is currently closed by my firewall.