IP Addresses of inbound connections in bitcoin full node (TOR) looking as a localhost (127.0.0.1)
Those are incoming connections coming through the proxy, which have no other possible identifier than coming from localhost (where the proxy daemon is running). The &quot;sending&quot; port number is effectively irrelevant for this situation. If you don't want incoming connections through the proxy, don't configure them to be allowed.