SANS: What's a super.proxy.scanner and why is it in my logs?

One of our readers has come across an interesting phenomenon in his proxy logs that we're hoping someone can shed some light on.

Imagine reviewing your webserver or proxy logs and seeing requests for a website completely unrelated to your organization, but an IP address in your address block appears in the hostname. So here is an example URL that might show up in your logs:

SANS - Internet Storm Center - Cooperative Cyber Threat Monitor And Alert System

Linked by shanmuga Wednesday, 3rd May 2006 12:12AM