[Dshield] port 445

BarkerJr barkerjr at barkerjr.net
Mon Mar 14 15:57:05 GMT 2005


Lauro, John wrote:
 > Hello,
 >
 > I am seeing a massive amount of traffic to port 445 that started a
 > little over 3 hours ago.  (about 1300 packets a second to our class
 > B).
 >
 > Just wondering if it's a new worm, or more likely I am being DDOS
 > attacked.
 >
 > I get a timeout when I try to pull up the stats for today on dshield
 > at:  http://isc.sans.org/port_report.php?date=2005-03-14


It loaded after a long time for me:

TargetPort  	Reports  	Sources  	Targets
445 		1271674 	62466 		97711

That's a lot of hits compared to the next one down:

20525 	 	174384 	 	39570 	 	2

Pardon my tabbing...



More information about the list mailing list