spacefiddle's Journal: Slashdot portscan: let's see where this leads.

So this just happened:

03/12/2009 18:33:28.768 - Alert - Intrusion Prevention - Possible port scan detected - 216.34.181.45, 11980, WAN - [my_ip], 8000, WAN - TCP scanned port list, 1080, 3127, 3128, 3124, 2301

That's a public IP belonging to Slashdot. Wha?

Now i've been on /. from here before, and never seen this. I'm trying to think what i might have done differently, used a site feature i never have, etc. Nothing springs to mind. So, next step will be to look this up and see what i can find.

I don't expect anything malicious or odd, but i'm going to keep this as a "note to self" as i go along, and chronicle my paranoid research.

Standard Issue Proxy Check

[Qzukk]

It tries to fetch a file from itself through your open proxy, to see if you have an open proxy. Someone else posted something about it in the journals months ago.