Threat Level: green Handler on Duty: Guy Bruneau

SANS ISC: InfoSec Handlers Diary Blog - Internet Storm Center Diary 2009-03-05 InfoSec Handlers Diary Blog


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

What's up with port 445?

Published: 2009-03-05
Last Updated: 2009-03-06 23:06:49 UTC
by Mark Hofman (Version: 1)
5 comment(s)

Looking at the DSHIELD data for the port 445 Shows an interesting little trend.   Reports showing 445 as the target port is down.  Something that is also observed by some readers in their various darknets. 

Ports showing 445 as the source however is way up.  If you are seeing this or have some packets, please send them through.  For the packets, I'm interested especially in the source port 445 traffic. 

Mark H

Update

Quite  number of people have reported a similar drop in their stats for 445 as the target port, but no real explanations just yet.  Likely to be confiker related, but that's speculation at the moment. 


 

Keywords: 445 tcp
5 comment(s)
Diary Archives