[Dshield] amihacked.com now without portscan
stephane.nasdrovisky at paradigmo.com
Thu Mar 3 16:01:25 GMT 2005
> I don't think the compaint was from someone who didn't like the page.
> Most likely, they just forgot that they visited the portscan page.
I once was about to complain about such a scan. Further analysis of my
proxy logs showed me that 'I' requested the scan. In my case, 'I' was
another sec guy.
Looking only at my firewall log showed me the scan, not the browsed urls.
More information about the list