RE: Are they back? (was Re: Scans from proxyprotector.com)

It may or may not be the same people - as someone said before, the most likely reason for these scans is proxies to send spam from. I hardly would imagine that there are only one group of people performing this type of scanning.

I see this type of scanning in fairly large numbers, even on my /26 at home - some of my clients networks are seeing even more. The main reason proxyprotector.com was fairly interesting was because of the volume (they were hitting networks 6 or 7 times in a day, which seems rather pointless), and because of the claimed legitimacy.

>
> And now, I'm seeing this in the snort summaries....

Regards,

Mark Ng (www.informationintelligence.net)