[Dshield] What's up with 445/TCP?

Jon Kibler Jon.Kibler at aset.com
Thu Jun 4 23:51:08 GMT 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

What's up with 445/TCP? Is this still all Conficker noise?

After a rather sharp drop off in early March, the trends are back up to
record heights. I have appended some example data to show the trend I am
seeing.

Jon
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-813-2924	(NEW!)
s: 843-564-4224
http://www.linkedin.com/in/jonrkibler

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253




Port 445/TCP Data
========"Jun 3, 2009",8143
"Jun 2, 2009",8012
"Jun 1, 2009",8356
"May 31, 2009",7282
"May 30, 2009",7991
"May 29, 2009",7948
"May 28, 2009",7674
"May 27, 2009",7685
"May 26, 2009",7855
"May 25, 2009",6768
"May 24, 2009",7216
"May 23, 2009",7254
"May 22, 2009",7518
"May 21, 2009",7387
"May 20, 2009",7111
"May 19, 2009",7328
"May 18, 2009",6870
"May 17, 2009",7095
"May 16, 2009",7227
"May 15, 2009",6624
"May 14, 2009",6925
"May 13, 2009",7258
"May 12, 2009",6801
"May 11, 2009",6720
"May 10, 2009",6157
"May 9, 2009",6800
"May 8, 2009",6929
"May 7, 2009",6730
"May 6, 2009",7191
"May 5, 2009",6679
"May 4, 2009",6407
"May 3, 2009",6389
"May 2, 2009",6326
"May 1, 2009",6283
"Apr 30, 2009",6070
"Apr 29, 2009",5278
"Apr 28, 2009",6299
"Apr 27, 2009",6590
"Apr 26, 2009",6302
"Apr 25, 2009",6124
"Apr 25, 2009",6219
"Apr 23, 2009",6109
"Apr 22, 2009",6038
"Apr 21, 2009",5835
"Apr 20, 2009",5694
"Apr 19, 2009",5294
"Apr 18, 2009",5554
"Apr 17, 2009",5289
"Apr 16, 2009",5368
"Apr 15, 2009",4732
"Apr 14, 2009",5137
"Apr 13, 2009",4904
"Apr 13, 2009",4831
"Apr 11, 2009",5203
"Apr 10, 2009",4766
"Apr 9, 2009",4442
"Apr 8, 2009",4832
"Apr 7, 2009",4918
"Apr 6, 2009",5296
"Apr 5, 2009",5221
"Apr 4, 2009",5236
"Apr 3, 2009",5115
"Apr 3, 2009",5125
"Apr 1, 2009",4496
"Mar 31, 2009",4934
"Mar 30, 2009",4635
"Mar 29, 2009",4507
"Mar 28, 2009",4702
"Mar 27, 2009",4406
"Mar 26, 2009",4255
"Mar 25, 2009",4121
"Mar 24, 2009",4101
"Mar 24, 2009",4105
"Mar 22, 2009",4026
"Mar 21, 2009",3846
"Mar 20, 2009",3369
"Mar 19, 2009",3342
"Mar 18, 2009",3093
"Mar 17, 2009",2975
"Mar 16, 2009",4471
"Mar 15, 2009",4806
"Mar 14, 2009",5134
"Mar 13, 2009",5450
"Mar 12, 2009",5190
"Mar 11, 2009",5086
"Mar 10, 2009",5326
"Mar 9, 2009",5135
"Mar 8, 2009",4881
"Mar 7, 2009",5445
"Mar 6, 2009",5445
"Mar 5, 2009",5397
"Mar 4, 2009",7061
"Mar 3, 2009",7000
"Mar 2, 2009",7008
"Mar 1, 2009",6965
"Feb 28, 2009",6893
"Feb 27, 2009",6899
"Feb 26, 2009",6678
"Feb 25, 2009",6548
"Feb 24, 2009",6391
"Feb 23, 2009",6662
"Feb 22, 2009",6620
"Feb 21, 2009",6682
"Feb 20, 2009",6320
"Feb 19, 2009",6146
"Feb 18, 2009",5917
"Feb 17, 2009",5838
"Feb 16, 2009",5756
"Feb 15, 2009",5609
"Feb 14, 2009",5956
"Feb 13, 2009",5584
"Feb 12, 2009",5654
"Feb 11, 2009",5554
"Feb 10, 2009",5857
"Feb 9, 2009",5366
"Feb 8, 2009",5753
"Feb 7, 2009",5475
"Feb 6, 2009",5589
"Feb 5, 2009",5608
"Feb 4, 2009",5557
"Feb 3, 2009",5607
"Feb 2, 2009",5538
"Feb 1, 2009",5378
"Jan 31, 2009",4876
"Jan 30, 2009",4665
"Jan 29, 2009",4884
"Jan 28, 2009",4785
"Jan 27, 2009",4944
"Jan 26, 2009",4747
"Jan 25, 2009",4494
"Jan 24, 2009",4839
"Jan 23, 2009",4718
"Jan 22, 2009",4341
"Jan 21, 2009",4439
"Jan 20, 2009",4404
"Jan 19, 2009",4504
"Jan 18, 2009",4453
"Jan 17, 2009",4197
"Jan 16, 2009",4153
"Jan 15, 2009",4058
"Jan 14, 2009",4200
"Jan 13, 2009",4273
"Jan 12, 2009",4106
"Jan 11, 2009",4277
"Jan 10, 2009",4340
"Jan 9, 2009",4058
"Jan 8, 2009",3878
"Jan 7, 2009",4209
"Jan 6, 2009",3884
"Jan 5, 2009",3831
"Jan 4, 2009",3314
"Jan 3, 2009",3567
"Jan 2, 2009",3142
"Jan 1, 2009",3082
"Dec 31, 2008",2620
"Dec 30, 2008",2480
"Dec 29, 2008",1963
"Dec 28, 2008",1489
"Dec 27, 2008",1546
"Dec 26, 2008",1553
"Dec 25, 2008",1415
"Dec 24, 2008",1526
"Dec 23, 2008",1602
"Dec 22, 2008",1661
"Dec 21, 2008",1666
"Dec 20, 2008",1592
"Dec 19, 2008",1573
"Dec 18, 2008",1550
"Dec 17, 2008",1608
"Dec 16, 2008",1570
"Dec 15, 2008",1471
"Dec 14, 2008",1492
"Dec 13, 2008",1530
"Dec 12, 2008",1502
"Dec 11, 2008",1451
"Dec 10, 2008",1477
"Dec 9, 2008",1315
"Dec 8, 2008",1404
"Dec 6, 2008",1441

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkooXdMACgkQUVxQRc85QlM/rgCfbNVfgNJcb73u90T9N4cSrmXq
6UcAnRNdxcWOIKV9Etdgppx6sDctFvJe
=Not3
-----END PGP SIGNATURE-----




=========================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the Dshield mailing list