RE: Scans from proxyprotector.com

From: Mark Ng (laptopalias1-mark_at_informationintelligence.net)
Date: 05/17/03

  • Next message: Bojan Zdrnja: "RE: tcp/1274 scans"
    To: "Chris Boyd" <cboyd@gizmopartners.com>, <incidents@securityfocus.com>
    Date: Sat, 17 May 2003 11:31:12 +0100
    
    

    Hi,

    After reading their site (www.proxyprotector.com) , it appears that this is
    to do with connections to IRC servers, They don't claim to be scanning the
    whole Internet - are these scans against hosts that you use IRC from ?

    Regards,

    Mark Ng
    Director,
    Information Intelligence Ltd. (www.informationintelligence.net)

    -----Original Message-----
    From: Chris Boyd [mailto:cboyd@gizmopartners.com]
    Sent: 17 May 2003 00:31
    To: incidents@securityfocus.com
    Subject: Scans from proxyprotector.com

    I'm seeing many proxy scans from 64.201.104.2,
    for.information.see.proxyprotector.com. I did not request the scans,
    and the link on his page is broken. All emails to common addresses at
    the domain are bouncing user unknown. Is this dude legit, or just
    pretending to be trying to help prevent proxy abuse?

    --Chris

    ----------------------------------------------------------------------------
    *** Wireless LAN Policies for Security & Management - NEW White Paper ***
    Just like wired networks, wireless LANs require network security policies
    that are enforced to protect WLANs from known vulnerabilities and threats.
    Learn to design, implement and enforce WLAN security policies to lockdown enterprise WLANs.

    To get your FREE white paper visit us at:
    http://www.securityfocus.com/AirDefense-incidents
    ----------------------------------------------------------------------------


  • Next message: Bojan Zdrnja: "RE: tcp/1274 scans"