RE: [MLUG - DISCUSSION] port 445

["Brent Deterding" <EMAIL:PROTECTED>]

Sasser - it hit Saturday afternoon in earnest (at least for our clients). Early
warning stopped it pretty well at first - now we see it trickle in VPNs and
whatnot. 

http://www.lurhq.com/press_sasser.html

For the good stuff:
http://www.lurhq.com/sasser.html

> -----Original Message-----
> From: EMAIL:PROTECTED 
> [mailto:EMAIL:PROTECTED] On Behalf Of Mike Miller
> Sent: Monday, May 03, 2004 12:10 AM
> To: MLUG discussion
> Subject: [MLUG - DISCUSSION] port 445
> 
> Why am I suddenly seeing many port 445 (TCP) attempts on my 
> Solaris box?
> I assume something is scanning for Windows machines.  The 
> table below shows numbers of attempts on every day that 
> showed any attempts since 1/1/2004.  Note the sudden increase 
> the last two days.
> 
> Mike
> 
> 
> freq  date
> ---- ------
>    2 Jan 16
>    1 Jan 25
>    1 Jan 29
>    8 Feb  1
>    3 Feb  2
>    3 Feb  3
>    6 Feb  4
>    3 Feb  7
>    4 Feb  9
>    6 Feb 12
>    1 Feb 14
>    3 Feb 15
>    3 Feb 16
>    1 Feb 17
>    3 Feb 18
>    3 Feb 20
>    1 Feb 22
>    3 Feb 23
>    3 Feb 24
>    3 Feb 25
>    3 Feb 28
>    3 Mar  2
>    1 Mar 30
>    1 Apr  5
>    1 Apr 12
>    1 Apr 20
>    2 Apr 22
>    1 Apr 29
>    1 Apr 30
>   84 May  1
>   53 May  2
> _______________________________________________
> discussion mailing list
> EMAIL:PROTECTED
> http://mlug.missouri.edu/mailman/listinfo/discussion
> 

_______________________________________________
discussion mailing list
EMAIL:PROTECTED
http://mlug.missouri.edu/mailman/listinfo/discussion