Hi,
Many of you may know this site .. I didn't find out about it until today ... cool security site showing crack attempt/worm/virii trends using samples from a wide variety of servers from around the world .. + they have a nicely done query tool .. if you are seeing a lot of activity around a specific port in your firewall logs etc ... this will tell you a fair amount about what the port is commonly used for and what attacks are being run against it currently .. neat stuff!
E.g.
http://isc.incidents.org/port_details.html?port=445
Or a favorite among script kiddies (at least on my server):
http://isc.incidents.org/port_details.html?port=1080
Main website: isc.incidents.org
Anyone know of other websites like this?