I think someone is scaning me
 

Hi all

I think someone is scaning my box, here is part f my incoming log, I need a 2nd oppion:
80.64.207.8 1080
80.64.207.8 3030
80.64.207.8 6588
80.64.207.8 3128
80.64.207.8 8080
80.64.207.8 23
80.64.207.8 1080
80.64.207.8 3030
80.64.207.8 6588
80.64.207.8 3128
80.64.207.8 8080
80.64.207.8 23
In goes on like that for a page and a half, it seems that they are only scaning 6 ports: alt. http, ssh, 1080, 3030, 6588, and 3228. Why would they only scan 6 ports and not scan for ftp and what is 1080, 3030, 6588, and 3228?

Thank you

-Joey

Somebody probably is scanning you. I've got about a half dozen computers on my ISP's network that always look at my computer to see whether or not I'm running an insecure IIS server. I've reported it several times and my ISP (road runner) has yet to pull the plug on them.

So, in short, scanning happens and there's no way around it. Why they haven't scanned for FTP depends on exactly what diabolical deeds they are planning. I would encourage you to traceroute the IPs and send a complaint to abuse@their.isp

Thank you

how to check somebody was scanning u?

veiwing my incoming logs

Re: Scanning
 

In goes on like that for a page and a half, it seems that they are only scaning 6 ports: alt. http, ssh, 1080, 3030, 6588, and 3228. Why would they only scan 6 ports and not scan for ftp and what is 1080, 3030, 6588, and 3128?

I do not know all the ports you list OTMH, but 3128 is Squid proxy, that 3128 scan is looking for a open proxy.

1080 is SOCKS, 3030 lists as Arepa Cas.(dunno either), 3028 is LiebDevMgmt_DM., 6588 is unassigned. Perhaps someone is trying to use your machine as a proxy so they will be untracable to their intended victim. Just a guess. Report the meanines!