Re: Handling Scans.

["Booke, Raymond" <Raymond.Booke () AVNET COM>]

In my situation, it all depends on the scan itself.  If it is just a scan of
one box, I don't worry much, if its a major scan, I'll block that ip at the
firewall.  If that IP or IP range tries to go any further than scanning,
then I will contact the ISP.

Raymond Booke MCSE CCNA NET+ A+
Global Data Security Group
Perimeter Security Analyst
Avnet INC
Raymond.Booke () avnet com

-----Original Message-----
From: Reeves, Mike [mailto:MReeves () SYNCHRONY NET]
Sent: Monday, February 12, 2001 9:28 AM
To: INCIDENTS () SECURITYFOCUS COM
Subject: Handling Scans.


I was trying to get some community type feedback on what people usually do
in handling scans of thier networks. At home I usually look back at the
person scanning me. I get scanned about 5 times a day. Should I take the
time to contact the admin or should I just let it go? What do most people
do?

Mike K. Reeves
Networking Services Engineer,
Synchrony Communications, Inc.
MCSE Microsoft Certified System Eliminator
"Geek by nature... Linux By Choice..."