Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Re: Source port 445,80
Sep 07 2007 07:24AM
scott (redhowlingwolves bellsouth net)
-----BEGIN PGP SIGNED MESSAGE-----
I would suggest trying to isolate the box that is sending these
scans.It has characteristics of a worm,obviously.
The switch or router that is seeing this traffic would be where I
would start looking.
If you can find what part of the network it origin...
[ more ]
Copyright 2010, SecurityFocus