[nsp-sec] Daily Reports Summary for week ending 2008-06-09

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

I note that the Beagle category is showing up as a big fat zero this
week - this is not, in fact, due to the category being killed off, or
Beagle going away entirely, but due to a combination of one of our data
sources going (temporarily, we hope!) dark, and our mis-parsing of
another of them.  The mis-parsing has been corrected, so data from that
source will return tomorrow, and we hope to have the other source back
up and running soon as well.

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 09 JUN 2008.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- --
Tim Wilde, Manager of Development, Team Cymru
twilde at cymru.com | +1-312-924-4033 | http://www.team-cymru.org/

~                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report     UniqueIPs   Change  ASNs  bogon  no-routes   UniqueIPs  ASNs
- ------  -------------------------------------------- -----------------
Beagle             0  -100.0%     0      0        0        16,142  1316
Blaster        8,312  + 46.1%   896     17       19         5,690   761
Bots          49,148  - 11.5%  1774      0        2        55,563  2694
Bruteforce       483  + 11.0%   283      0        1           435   249
Dameware          24  + 14.3%    14      0        0            21    14
Ddosreport     1,223  -  0.6%   484      1        2         1,231   492
Defacement         0    NaN       0      0        0             0     0
Dipnet            20  + 81.8%    18      0        0            11     9
Flowbots      26,239  + 14.1%  1016     51       54        22,987   915
Malwareurl    19,612  -  6.8%  2285      3        4        21,050  2362
Mydoom            10  - 52.4%     9      0        0            21    17
Nachi          8,246  +  1.1%   779     15       16         8,156   734
Phatbot        6,872  +  4.3%   952      0        2         6,588   908
Phishing       3,083  +  8.6%   960      1        4         2,839   888
Proxy          3,636  -  0.5%   805     12       51         3,653   878
Routers          279  - 54.9%   134      0        0           619   235
Scanners      42,543  + 91.1%  1804     16       19        22,265  1582
Sinit             22  -  0.0%    18      0        0            22    16
Slammer       11,067  + 24.3%   784      6       17         8,901   771
Spam       5,827,589  +  2.0% 10063      0      667     5,711,142  9926
Spreaders      2,228  -  0.6%   569      0        0         2,241   592
Stormworm    562,069  + 43.8%  5649      3       87       390,894  4999
Toxbot        27,971  -  4.1%   921      0        3        29,158   962

TOTALS     6,340,844  +  3.3% 11256    123      933     6,139,297 11200
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFITTv3luRbRini9tgRAlFyAJ0QlHTvQgC9aG5URCsSaqPW3uMIDACggsq0
EIVWBVG8YCHf3VmKnUJXSUs=
=GVMA
-----END PGP SIGNATURE-----