Port scan reporting?

From: Ben Schorr (bms@hawaiilawyer.com)
Date: 02/25/02 

From: Ben Schorr <bms@hawaiilawyer.com>
To: "'security-basics@securityfocus.com'" <security-basics@securityfocus.com>
Date: Mon, 25 Feb 2002 10:35:45 -1000

Our ISA server reported a number of attempted port scans of our server over
the weekend; no biggie, but the log files indicate the IP address they
supposedly came from. Is there any agency I should be reporting these to or
is there any value in trying to report them to the ISP?

What's the "best practice" in this case, do I just ignore them?

Mahalo!

-Ben-
Ben M. Schorr, MVP-Outlook, CNA, MCPx3
Director of Information Services
Damon Key Leong Kupchak Hastert
http://www.hawaiilawyer.com <http://www.hawaiilawyer.com>

Relevant Pages

  • Re: Port scan reporting?
    ... Subject: Port scan reporting? ... no biggie, but the log files indicate the IP address they ... more than one time or the host issues more complex actions it is ...
    (Security-Basics)
  • Re: [opensuse] /var/log/zypp-refresh.log Size on 11.0? ( 275 Megabytes -- WTF? )
    ... Carlos E. R. wrote: ... There are some utilities for reporting to suse that make tar copies ... of log files to attach to a report, which I think may not work if you ...
    (SuSE)
  • Re: Port scan reporting?
    ... > Our ISA server reported a number of attempted port scans of our server ... no biggie, but the log files indicate the IP address ... Is there any agency I should be reporting ...
    (Security-Basics)
  • Re: [opensuse] /var/log/zypp-refresh.log Size on 11.0? ( 275 Megabytes -- WTF? )
    ... There are some utilities for reporting to suse that make tar copies of log files to attach to a report, which I think may not work if you change the default directories. ...
    (SuSE)
  • Re: Sharepoint Usage
    ... I'll admit that I ... WebObs can provide you with all the information you'd get from the IIS ... log files, without the overhead of enabling log files. ... As well WebObs performs SharePoint Portal seach engine reporting. ...
    (microsoft.public.windows.server.sbs)