Looking at the DSHIELD data for the port 445 Shows an interesting little trend. Reports showing 445 as the target port is down. Something that is also observed by some readers in their various darknets.InfoSec Handlers Diary Blog - What's up with port 445?
Ports showing 445 as the source however is way up. If you are seeing this or have some packets, please send them through. For the packets, I'm interested especially in the source port 445 traffic.
Quite number of people have reported a similar drop in their stats for 445 as the target port, but no real explanations just yet. Likely to be confiker related, but that's speculation at the moment.InfoSec Handlers Diary Blog - What's up with port 445?