Port 1080 probes from AOL

Mailman List Mirror (Read Only)
1

One of my virtual web host servers have been getting multiple probes to
TCP port 1080 (socks) every day for months from AOL IP addresses.

Is AOL known to be doing something relatively innocuous on that port? I
ask because I have portsentry null routing IP addresses that make probes
like this.

TIA,

James Smallacombe PlantageNet, Inc. CEO and Janitor
up@3.am http://3.am

2

If they're [SOME HEX].ipt.aol.com rDNS'd IPs - those are AOL dialups,
so probably compromised / virus infected nodes