Re: Increase in squid scanning...

From: Baribault, Gary (garyat_private)
Date: Tue Mar 05 2002 - 10:08:15 PST

  • Next message: Ryan Hill: "RE: increase in ftp scanning"

    I have gotten a number of scans for 1080, 8080, 8000 in the last few days, 
    but not from those source addresses.
    
    Gary Baribault
    
    At 10:36 AM 3/5/2002 -0600, switched wrote:
    >Has anyone seen a large increase in squid/proxy scans lately?  I'm getting
    >these two IPs more than 3 or 4 times daily scanning me for squid/proxy at
    >the same exact time.  217.81.20.130 seems to be home.spykid.de (so says the
    >webpage on port 80) and I don't have any addtional information on
    >80.116.181.170 but both appear to be scanning the same networks everyday.
    >
    >
    >
    >
    >----------------------------------------------------------------------------
    >This list is provided by the SecurityFocus ARIS analyzer service.
    >For more information on this free incident handling, management
    >and tracking system please see: http://aris.securityfocus.com
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Tue Mar 05 2002 - 14:47:29 PST