[Dshield] unusual port 25 traffic

Jeff Kell jeff-kell at utc.edu
Fri Jan 27 05:31:34 GMT 2006


  Robert Ungemach asks:
>> Sent: Wednesday, January 25, 2006 4:09 PM
>> To: list at lists.dshield.org
>> Subject: [Dshield] unusual port 25 traffic
>>
>> Has anyone seen anything like this one.
>>
>> We are receiving large bursts of port 25 traffic to our smtp gateway
>> server. The connect on port 25 and burst a send/receive. Between 7-12 gig ofdata in both directions. The last record of throughput is about 35mbps in both directions. 
Someone harvesting e-mail addresses by dictionary attack to determine
valid addresses?

Jeff


More information about the list mailing list