microsoft-ds, what is it and who is using it?

Hi,

running iftop command sometimes I can see lines like this:
> mydomain.org:microsoft-ds

=> rrcs-24-199-42-186.west.biz.rr.com:privatechat

0B 0B 0B

what the hell is microsoft-ds?

my nmap says that this are the opened port.

> Not shown: 988 closed ports

PORT STATE SERVICE

25/tcp open smtp

80/tcp open http

110/tcp open pop3

143/tcp open imap

199/tcp open smux

465/tcp open smtps

587/tcp open submission

993/tcp open imaps

995/tcp open pop3s

1080/tcp open socks

3306/tcp open mysql

8443/tcp open https-alt

4 Replies

That's port 445, Windows uses it for SMB (filesharing). Maybe you're using samba or something? Otherwise you should get that checked out ;)

@Nuvini:

That's port 445, Windows uses it for SMB (filesharing). Maybe you're using samba or something? Otherwise you should get that checked out ;)

samba is not installed on my linode.

what should I check out?

I'm quite worried about this.

> mydomain.org:microsoft-ds

=> rrcs-24-199-42-186.west.biz.rr.com:privatechat

0B 0B 0B
You are sending no data - this is probably someone trying to connect and your server is ignoring it.

@Stever:

> mydomain.org:microsoft-ds

=> rrcs-24-199-42-186.west.biz.rr.com:privatechat

0B 0B 0B
You are sending no data - this is probably someone trying to connect and your server is ignoring it.

I like this hypothesis.

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct