| Ports Being Attacked Most |  |
|
Protocol/
Port | Registered Use/
Unregistered Use | Day's
Share |
|---|
tcp/445
 | Microsoft SMB/CIFS
Sasser/Agobot/GenericBot | 28.1% |
udp/1434
| ms-sql-m
SQL Slammer Worm | 20.3% |
tcp/139
| NETBIOS Session Service
NETBIOS Session Service | 17.2% |
tcp/1433
| Microsoft SQL
Spida Worm | 10.9% |
tcp/135
| DCE endpoint resolution
Msblast/Nachi? | 6.5% |
tcp/22
| Secure Shell
SSH Probe | 2.7% |
tcp/5900
|
VNC crack attempt? | 2.0% |
udp/135
| epmap
Possible Messenger SPAM attemp | 1.7% |
udp/137
| NETBIOS Name Service
W32.Opaserv Worm? | 1.6% |
tcp/1080
| SOCKS Proxy
SOCKS Proxy | 1.4% |
tcp/4899
|
RAdmin Probe | 1.4% |
tcp/80
| HTTP
Possible Nachi/CodeRed/Nimda | 1.2% |
tcp/7212
|
GhostSurf Open Proxy Probe | 0.6% |
tcp/8080
| RingZero
RingZero | 0.4% |
tcp/15118
|
Dipnet/Oddbob | 0.4% |
tcp/23
| Telnet
Telnet | 0.3% |
tcp/3128
|
RingZero Probe | 0.3% |
udp/1024
|
Research Pending | 0.3% |
udp/1025
| blackjack
Research Pending | 0.3% |
tcp/3127
|
MyDoom Backdoor | 0.2% |
