Been getting a ton of what I assume to be proxy scans in the logs:

404 - www.intute.us/cgi-bin/1st.cgi

Anyone else? Ditto or Insight? Haven't been able to dig up to much on this so i've just been blacklisting the originating IP's (haven't had any complaints yet).

Yes, I have been seeing this also. I tracked one of the IPs to China, I assume they are all similar.

I've had several from china & a few bouncing through the Midwestern United States (Most of which are registered to Chinese corporations). More of an annoyance really; I've had a few hammer pretty hard with no serious side effects (thus far) other than bloated logs. Just thought I'd ask to see if anyone has a slick solution or additional info about the nature of this beast.

I have to think every Internet-facing webserver on the planet is receiving requests like this. I've seen our server logs and these knuckleheads are trying every known (and obscure) server management links to see if they're open.
Blocking the IPs becomes tedious and probably wasteful as they're making these requests from the thousands of open proxies.

Thanks for the replies:

Figured as much, just amazed by the lack of google fodder. I've only been blocking the repeat & frequent hammerers (you'd think they'd move on to greener pastures), the small game I've left to graze in the desert.