Security Incidents mailing list archives
Re: Increase in squid scanning...
From: "Baribault, Gary" <gary () baribault net>
Date: Tue, 05 Mar 2002 13:08:15 -0500
I have gotten a number of scans for 1080, 8080, 8000 in the last few days, but not from those source addresses.
Gary Baribault At 10:36 AM 3/5/2002 -0600, switched wrote:
Has anyone seen a large increase in squid/proxy scans lately? I'm getting these two IPs more than 3 or 4 times daily scanning me for squid/proxy at the same exact time. 217.81.20.130 seems to be home.spykid.de (so says the webpage on port 80) and I don't have any addtional information on 80.116.181.170 but both appear to be scanning the same networks everyday. ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service.For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
Current thread:
- Increase in squid scanning... switched (Mar 05)
- Re: Increase in squid scanning... Baribault, Gary (Mar 05)
- Re: Increase in squid scanning... David Jacoby (Mar 11)