Active Reconnaissance

Active reconnaissance is based on making actual contact with a target. This contact can be a phone call or a visit to a company. Alternatively, it can be a direct connection to a target system. Examples of active recon include:

• Connecting to one of the company servers such as HTTP, FTP, and SMTP

• Calling the company in an attempt to get information, also known as social engineering

• Entering company premises pretending to be a repairman