http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci911816,00.html

this is where I read about stumbler.

The fact that the port scanning seems random and the scans appear to come from ever changing places (spoofed most likely) makes it difficult to narrow down.