Port 1080 probes from AOL

One of my virtual web host servers have been getting
multiple probes to
TCP port 1080 (socks) every day for months from AOL IP
addresses.

Is AOL known to be doing something relatively innocuous on
that port?  I
ask because I have portsentry null routing IP addresses that
make probes
like this.

TIA,

James Smallacombe		      PlantageNet, Inc. CEO and Janitor
up3.am							    http://3.am
============================================================
=============

On 5/31/07, up3.am <up3.am> wrote:
>
>
> One of my virtual web host servers have been getting
multiple probes to
> TCP port 1080 (socks) every day for months from AOL IP
addresses.
>
> Is AOL known to be doing something relatively innocuous
on that port?  I
> ask because I have portsentry null routing IP addresses
that make probes
> like this.
>

If they're  [SOME HEX].ipt.aol.com rDNS'd IPs - those are
AOL dialups,
so probably compromised / virus infected nodes