[Dshield] port 445

Aaron Lewis aaron at adldatacomm.net
Wed Mar 16 11:33:41 GMT 2005

I have started seeing this also. Port 445 and 139 scans are very heavy. All
from the same class C for me

-----Original Message-----
From: list-bounces at lists.dshield.org
[mailto:list-bounces at lists.dshield.org]On Behalf Of Lauro, John
Sent: Monday, March 14, 2005 8:23 AM
To: General Discussion at DShield.org
Subject: [Dshield] port 445

I am seeing a massive amount of traffic to port 445 that started a
little over 3 hours ago.  (about 1300 packets a second to our class
Just wondering if it's a new worm, or more likely I am being DDOS
I get a timeout when I try to pull up the stats for today on dshield
at:  http://isc.sans.org/port_report.php?date=2005-03-14
Plus stats on the ticker seem a little off:

ISC Port Ticker

This ticker reflects trends using the last few submissions received.
Please treat with caution, as this trends may be quite volatile and it
is based on a small number of submissions (usually less than 10000). 

# of Reports:376143 
Last update: 334171902172 minutes ago. 

-------------- Sponsor Message ------------------------------------
Join us at SANSFIRE 2005 in Atlanta!
The Internet Storm Center Conference.
Details: http://www.sans.org/sansfire2005

send all posts to list at lists.dshield.org
To change your subscription options (or unsubscribe), see:

More information about the list mailing list