I noticed in my logs 2 weeks ago regular probe from a subnet in the Amazone cloud only scanning for TCP/8080 capture by the iptables of my DShield sensor. The scanning started on the 15 Aug – 4 Oct 2024 where the sensor recorded 1046 individual IPs from this network.
This article has been indexed from SANS Internet Storm Center, InfoCON: green