Re: Scans to ports 1090 and 1080

[Vern Paxson <vern () ee lbl gov>]

> Has anyone heard of vulnerabilities on ports 1080 or 1090?  These look
> like straight scans otherwise.

1080 is SOCKS.  They're looking for a server through which they can launder
their traffic.  We get these *all* the time.

1090 is RealPlayer proxy.  We've been scanned for it, too, though not
nearly as often.

                Vern