[nsp-sec] Bracing For Impact... MS08-067 - Should Be TCP 139/445

[White, Gerard]

Yes, I fat-fingered that... My apologies... That's what I get for
rushing...

GW

> -----Original Message-----
> From: Rob Thomas [mailto:robt at cymru.com]
> Sent: Thursday, October 23, 2008 7:03 PM
> To: White, Gerard
> Cc: NSP nsp-security
> Subject: Re: [nsp-sec] Bracing For Impact... MS08-067
> 
> Hey, Gerard.
> 
> We'll definitely keep a watch on our Darknets and miscreant chatter
for
> talk of MS08-067.  Here is what we've seen in our Darknets for 2008
for
> TCP 135 and TCP 445.  Should that be TCP 139, though?
> 
> 
> TCP 135
> 
> YYYYMM  Count
> 200808  5288459
> 200809  5158321
> 200810  4670678
> 
> Here is what we've seen on a daily basis for the past five days.
> 
> YYYYMMDD  Count
> 20081018  200435
> 20081019  144964
> 20081020  195914
> 20081021  210451
> 20081022  158742
> 
> 
> TCP 445
> 
> YYYYMM  Count
> 200808  1277640
> 200809  1228697
> 200810  1000661
> 
> Here is what we've seen on a daily basis for the past five days.
> 
> YYYYMMDD  Count
> 20081018  43172
> 20081019  40714
> 20081020  47118
> 20081021  47273
> 20081022  51517
> 
> 
> Thanks,
> Rob.
> --
> Rob Thomas
> Team Cymru
> http://www.team-cymru.org/
> cmn_err(CEO_PANIC, "Out of coffee!");