port 25 connections up?
Jared Mauch
jared at puck.nether.net
Wed Jun 1 01:25:16 UTC 2005
On Tue, May 31, 2005 at 09:21:00PM -0400, Jim Popovitch wrote:
>
> I've seen an almost astronomical increase in bogus smtp connections
> ("did not issue MAIL/EXPN/VRFY/ETRN during connection to") within the
> past 18 hours. Up to +1100 today vs the usual 4 or 5.
>
> Anyone else?
Overall i see a slight spike in the past 24 hours, looking
at a graphic of tcp/25 flows over the past 10 days.
(normally a peak of 1.2M or so, but a past 24 hour peak
closer to 1.3M flows/sec, so maybe a 6-7% increase or so from my
vantage point.. also comparing comparable days of the week).
- jared
--
Jared Mauch | pgp key available via finger from jared at puck.nether.net
clue++; | http://puck.nether.net/~jared/ My statements are only mine.
More information about the NANOG
mailing list