reporting port scanning etc.

[Donkey]

Should you report to the relevant authorities when you get port scanned etc. I've just install zonealarm at work on my system and so far have had about 5 probes in 2 days. Shouold i bother actually reporting these, seems like they are all different people rather than one sustained attack.
Any ideas, i don't want to have to spend all my time emailing complaints abouts probings but i also don't want to just be a soft target.
Rod

[Cryptic]

Hi Rod, Man if you think zonealarm gives you some cause for concern and a half dozen scans. Try blackice on paraniod and spend some time catting in yahoo or many others. Anyway, If you have a static ip, you might want to watch for repeats. But alot of zonealarms reports are from site you have visited and finally disconnecting. I read that out of 100 reports filed against what appears to be scans are either ignored by isp's or at least you never hear. If you feel that someone is truly on your case, don't hesitate to act with all the info you have, and hope that you get some results. Hate to close negative so I know of an isp that at least used to work very diligently on all complaints. You might consider a dos app called nslook..or http://combat.uxn.com
there is an nslook there onsite.

[Cryptic]

Further to that. There are apps out there that randomly scan all day just looking for a port. At the end of the day any ports or response will be looked at. With zonealarm set properly, if you and I believe the hype. We are invisible.(stealth)

[Donkey]

I have got a static IP that is why i finally got round to installing zonealarm. Also went to GRC and tried the shields up port scanning and it could see me at all, everything in stealth. which was a bit better to know.
As for the web pages just finally disconnecting i don't think it was cos i've only been at sysopt today http://www.sysopt.com/forum/smile.gif and the scan came through a german ISP.
anyway i'll just sit tight and see if it happens again.
CHeers
Rod

[RobRich]

If your just receiving a few hit a day, then forget about it, and be glad your firewall was in place to handle the issues.

You could be like me, I use WinRoute Pro with full firewall and NAT filtering. I average SEVERAL hundred access attempts over the course of a day, and I have a dynamic IP! I admit most attempts are from Internet servers which I visit, but I also catch the occassional NMAP port scan or NetBIOS hack. In the NetBIOS case, I may be more inclined to alert the offending ISP, as I would consider this more of a deliberate hack intrusion attempt.

Robert Richmond