Aloha Ben,

(I'm replying to you as well as the list because I just received this.)

Was it a targeted or complete scan? 

I usually send the documentation off to the ISP or IP registrant much as I would
an attempted relayer or spammer.  

I wouldn't expect a quick follow-up though  :)



-----Original Message-----
From: Ben Schorr [mailto:[EMAIL PROTECTED]]
Sent: Monday, February 25, 2002 2:36 PM
To: '[EMAIL PROTECTED]'
Subject: Port scan reporting?


Our ISA server reported a number of attempted port scans of our server over
the weekend; no biggie, but the log files indicate the IP address they
supposedly came from.  Is there any agency I should be reporting these to or
is there any value in trying to report them to the ISP?

What's the "best practice" in this case, do I just ignore them?

Mahalo!

-Ben-
Ben M. Schorr, MVP-Outlook, CNA, MCPx3
Director of Information Services
Damon Key Leong Kupchak Hastert
http://www.hawaiilawyer.com <http://www.hawaiilawyer.com> 

Reply via email to