My server is sending DDOS attacks via MSQL to my workstation?

MichaelD

Lifer
Jan 16, 2001
31,529
3
76
This has been going on only for about a week now. Attacks are sporadic. One or two a day, then nothing for a day or so. :confused:

Symantec Client Firewall reports that my server (IP xxx.xxx.xxx.xxx and it names my server by hostname)

Attempted Intrusion "MSSQL_Null_Packet_DoS" against your machine was detected and blocked.
Intruder: (serverhostname)(192.168.0.xxx)(445).
Risk Level: Low.
Protocol: TCP.
Attacked IP: (client hostname)(192.168.0.xxx)

Server is running W2K3 Ent
All hosts are running WinXP Pro

My virus defs are up to date. Scans show nothing.

I'm not running a Webserver or anything.
What's going on here?




 

MichaelD

Lifer
Jan 16, 2001
31,529
3
76
What concerns me is that this is a new problem; never happened before. I've had the same Server/Client setup for about...6 months now.
 

n0cmonkey

Elite Member
Jun 10, 2001
42,936
1
0
Spyware? Port 445 is one of the ports used for Microsoft networking over TCP, I think...