14 May
2017
14 May
'17
10:27 p.m.
On Sun, May 14, 2017 at 1:29 PM, Brian Kantor Brian@ucsd.edu wrote:
Just some data points: in the last 16 hours, the firewall on amprgw has dropped over 43 million attempts to connect to the implicated ports: 623,664,16992,16993,16994,16995. We've also dropped about 2 billion attempts to connect to the other SMB ports: 111,135-139,445, etc.
It would be interesting to see this data graphed over time (in something like MRTG, Cacti, Prometheus, Grafana, etc.). It's hard to get a good impression of what is normal vs exceptional without time series comparison.
Tom KD7LXL