Got an email this morning that our webserver was used to probe someone's ftp site. I'm not sure whether I believe it or not though. The last line in his email was:

"If you are unsure of how you can prevent this sort of thing or have other questions about security, please feel free to reply to this email and inquire, I do this for a living."

Uh-huh.

You'd think that someone that does this for a living woulda sent a log of the probe. I've checked our logs and didnt see a thing.

I'd like to see the dates in this log. I'm willing to bet that it was during the time that our line went down after wtc.