Hi,
What you see as 15 attempts is in fact 3 connect() attempts, on
different ports. Your firewall doesn't reject the requests, but just
block 'em, so the proxyscanner send several attempts. I'm sorry but
this is the standard behaviour of the posix/bsd connect() function.
It's not scanning alway
Here's what my firewall recorded tonight, all times are EST, -5 GMT. I had
been on IRC for about 2 hours when the scans were logged. 193.109.122.5 is
Undernet's proxy scanner which I thought was only supposed to check for
open ports when you connected to IRC, not after you've been connected for 2