Aloha Ben, (I'm replying to you as well as the list because I just received this.)
Was it a targeted or complete scan? I usually send the documentation off to the ISP or IP registrant much as I would an attempted relayer or spammer. I wouldn't expect a quick follow-up though :) -----Original Message----- From: Ben Schorr [mailto:[EMAIL PROTECTED]] Sent: Monday, February 25, 2002 2:36 PM To: '[EMAIL PROTECTED]' Subject: Port scan reporting? Our ISA server reported a number of attempted port scans of our server over the weekend; no biggie, but the log files indicate the IP address they supposedly came from. Is there any agency I should be reporting these to or is there any value in trying to report them to the ISP? What's the "best practice" in this case, do I just ignore them? Mahalo! -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com <http://www.hawaiilawyer.com>