Increase in squid scanning...

From: switched (security-mail@q-east.net)
Date: 03/05/02 

From: "switched" <security-mail@q-east.net>
To: <incidents@securityfocus.com>
Date: Tue, 5 Mar 2002 10:36:26 -0600

Has anyone seen a large increase in squid/proxy scans lately? I'm getting
these two IPs more than 3 or 4 times daily scanning me for squid/proxy at
the same exact time. 217.81.20.130 seems to be home.spykid.de (so says the
webpage on port 80) and I don't have any addtional information on
80.116.181.170 but both appear to be scanning the same networks everyday.

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management
and tracking system please see: http://aris.securityfocus.com

Quantcast