[81205] in North American Network Operators' Group
Re: port 25 connections up?
daemon@ATHENA.MIT.EDU (Jared Mauch)
Tue May 31 21:25:39 2005
Date: Tue, 31 May 2005 21:25:16 -0400
From: Jared Mauch <jared@puck.nether.net>
To: Jim Popovitch <jimpop@yahoo.com>
Cc: nanog@merit.edu
In-Reply-To: <1117588860.5638.33.camel@localhost>
Errors-To: owner-nanog@merit.edu
On Tue, May 31, 2005 at 09:21:00PM -0400, Jim Popovitch wrote:
>
> I've seen an almost astronomical increase in bogus smtp connections
> ("did not issue MAIL/EXPN/VRFY/ETRN during connection to") within the
> past 18 hours. Up to +1100 today vs the usual 4 or 5.
>
> Anyone else?
Overall i see a slight spike in the past 24 hours, looking
at a graphic of tcp/25 flows over the past 10 days.
(normally a peak of 1.2M or so, but a past 24 hour peak
closer to 1.3M flows/sec, so maybe a 6-7% increase or so from my
vantage point.. also comparing comparable days of the week).
- jared
--
Jared Mauch | pgp key available via finger from jared@puck.nether.net
clue++; | http://puck.nether.net/~jared/ My statements are only mine.
