port 25 connections up?

I've seen an almost astronomical increase in bogus smtp connections
("did not issue MAIL/EXPN/VRFY/ETRN during connection to") within the
past 18 hours. Up to +1100 today vs the usual 4 or 5.

Anyone else?

-Jim P.

Overall i see a slight spike in the past 24 hours, looking
at a graphic of tcp/25 flows over the past 10 days.

  (normally a peak of 1.2M or so, but a past 24 hour peak
closer to 1.3M flows/sec, so maybe a 6-7% increase or so from my
vantage point.. also comparing comparable days of the week).

  - jared

http://isc.sans.org/port_details.php?port=25

Stef
Network Fortius, LLC