RE: Bombarded by a TCP NULL scan

  • From: "John T \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
  • To: "'[ExchangeList]'" <exchangelist@xxxxxxxxxxxxx>
  • Date: Thu, 12 Jan 2006 08:13:11 -0800

Block the IP at the firewall from any access.

John T
eServices For You


> -----Original Message-----
> From: Mike Dufoe [mailto:dufoem@xxxxxxxxxxx]
> Sent: Thursday, January 12, 2006 5:01 AM
> To: [ExchangeList]
> Subject: [exchangelist] Bombarded by a TCP NULL scan
> 
> http://www.MSExchange.org/
> 
> Good morning gang,
> 
> Our Firewall has been bombarded by a TCP Null scan from 63.66.130.3 which
belongs
> to mail.norriseal.com which is a MCI IP.  I've contacted MCI
(abuse-mail@xxxxxxx)
> several times on this and they haven't done a damn thing about it.  Any
suggestions
> what I should do next?
> 
> TIA,
> Mike
> 
> Mike Dufoe
> System Administrator
> ETI Canada Inc.
> Phone: (705) 472-1300 ext. 346
> Fax:      (705) 472-3416
> Email:  dufoem@xxxxxxxxxxx
> -----------------------------------------------------------------------
> Ó¿Õ Who's Watching Your Network? Ó¿Õ
> The information contained in this message may be confidential or protected
from use
> or disclosure by law. Any distribution, unauthorized use or copying is
strictly
> prohibited. If you have received this message in error please notify the
sender and
> delete the email.
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this MSExchange.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
> Report abuse to info@xxxxxxxxxxxxxx



Other related posts: