[nsp-sec] Daily Reports Summary for week ending 2008-04-07

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 07 APR 2008.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Note: The somewhat significant decline in the Spam category is, alas,
not due to some herculean effort that has reduced the number of spamming
IPs on the 'net, it is due to an error in our processing that caused us
to lose a couple of days of data in that category (and only that
category) at the beginning of last week.  It was caught and corrected,
thanks to the sharp eyes of several of you, and we apologize for the
inconvenience.  You can expect a corresponding rise next week to bring
things back to normal levels.

Thank you for your continued support!

Regards,
Tim Wilde

- --
Tim Wilde, Manager of Development, Team Cymru
twilde at cymru.com | +1-312-924-4033 | http://www.team-cymru.org/

~                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report     UniqueIPs   Change  ASNs  bogon  no-routes   UniqueIPs  ASNs
- ------  -------------------------------------------- -----------------
Beagle        58,732  - 21.2%  2226      0        2        74,535  2763
Blaster       13,387  -  4.8%  1109     12       15        14,057  1141
Bots          53,477  -  4.6%  2142      0        0        56,073  2280
Bruteforce       489  - 13.3%   288      0        0           564   333
Dameware          19  -  9.5%    14      0        0            21    14
Ddosreport     1,388  + 25.5%   512      3       21         1,106   435
Defacement         0    NaN       0      0        0             0     0
Dipnet             6  - 62.5%     5      0        0            16    16
Flowbots       9,717  - 16.1%   951     24       24        11,576   873
Malwareurl    17,534  + 47.2%  1967      2       17        11,914  1587
Mydoom             6  - 76.9%     6      0        0            26    20
Nachi          9,218  -  1.2%   779     16       17         9,330   820
Phatbot        4,973  -  1.4%   631      0        0         5,046   651
Phishing       3,831  + 36.7%  1120      6        8         2,803   920
Proxy          6,071  + 14.0%  1056     17       70         5,326  1049
Routers        1,415  +457.1%   366      0        0           254   123
Scanners      35,755  -  1.4%  1690      8       13        36,248  1648
Sinit             20  + 25.0%    16      0        0            16    13
Slammer       12,529  + 10.4%   850      8       18        11,352   820
Spam       4,482,900  - 14.4%  9513      1      256     5,236,956  9655
Spreaders      2,383  +  6.9%   549      0        0         2,229   481
Stormworm    386,573  +  3.7%  5131      0       79       372,861  4845
Toxbot        34,232  -  2.4%   993      0        0        35,086  1077

TOTALS     4,970,279  - 12.6% 10877     93      526     5,687,901 10893
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH+i1RluRbRini9tgRAqUeAJ9Ysoy1Z/eAuSI7+n2QY6HPPDq2MgCcD5aL
uIKcbv3nARvSkSoHsgLf7XI=
=fltf
-----END PGP SIGNATURE-----