14 May
2017
14 May
'17
5:27 p.m.
On Sun, May 14, 2017 at 1:29 PM, Brian Kantor <Brian(a)ucsd.edu> wrote:
Just some data points: in the last 16 hours, the
firewall on amprgw has
dropped over 43 million attempts to connect to the implicated ports:
623,664,16992,16993,16994,16995. We've also dropped about 2 billion
attempts to connect to the other SMB ports: 111,135-139,445, etc.
It would be interesting to see this data graphed over time (in
something like MRTG, Cacti, Prometheus, Grafana, etc.). It's hard to
get a good impression of what is normal vs exceptional without time
series comparison.
Tom KD7LXL