...i remember we were kinda wondering the same thing back then,as there was no special reason per se:
we were hunting/tracking down sql injected sites,"exchanger" samples and such stuff,
ie.nothing really extra-ordinary,just the stuff that was spreading around at that period...