[Dshield] Increase in port 25 traffic !

John D. lists at webcrunchers.com
Tue Aug 19 20:46:10 GMT 2003

Jonathan writes:

>Could the increase in port 25 probes be a result of the now patched systems 
>(discussed in another thread) no longer being available to spammers? Could 
>it be a recon scan in preparation for a scan for open relays? Maybe not, 
>but it's an idea. Are any mail server operators out there seeing an 
>increase in relay attempts to coincide with this?

I believe this is what it is.   it also could be the result of a very 
heavy effort on our part to get spammer's proxies and worm infested "zombie" boxes shut down.


More information about the list mailing list