So this just happened:
03/12/2009 18:33:28.768 - Alert - Intrusion Prevention - Possible port scan detected - 18.104.22.168, 11980, WAN - [my_ip], 8000, WAN - TCP scanned port list, 1080, 3127, 3128, 3124, 2301
That's a public IP belonging to Slashdot. Wha?
Now i've been on
I don't expect anything malicious or odd, but i'm going to keep this as a "note to self" as i go along, and chronicle my paranoid research.