port 445

[Dustin Decker]

On Sun, 10 Aug 2003, Kurt wrote:

> while chekcing my logs, i see that im getting hit on
> 445 ALOT. these are all coming from different ip's
> though. i've done a little research, this is
> apparently a DoS attack? or is it maybe someone
> scaning for this microsoft ds? they seem to be at
> intervals anywhere from 3 to 20 minutes apart. they
> are all blocked, but i was curious. is there some worm
> going around or something?

that's the most recent (and highly publicised) Windows vulnerability.  
Lots of folks looking for it.
D.

-- 
o-----------------------------------o
| Dustin Decker - CNA, MCP          |
| dustin at dustindecker.com       o-------------------------------------o
| Network Engineer              | "Where there is much light there is |
| Preferred Physicians Group    |  also much shadow."                 |
o-------------------------------|  -- Goethe                          |
                                o-------------------------------------o