[nsp-sec] Daily Reports Summary for week ending 2009-01-05

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Welcome to 2009!  I hope we all made it safely, and had a fun and safe
new year's celebration.  You'll have to excuse me if I type 2008
accidentally a few times over the next few weeks, it always takes a
little while to retrain the ol' fingers. :)

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 05 JAN 2009.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- --
Tim Wilde, Senior Developer, Team Cymru, Inc.
twilde at cymru.com | +1-312-924-4033 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report     UniqueIPs   Change  ASNs  bogon  no-routes   UniqueIPs  ASNs
- ------  -------------------------------------------- -----------------
Beagle        13,597  - 22.6%   990      0        0        17,568  1078
Blaster          119  - 22.7%    66      0        0           154    91
Bots         704,182  +135.6%  4756      0       14       298,874  4294
Bruteforce       789  - 30.1%   428      0        0         1,128   560
Dameware          19  + 11.8%    14      0        0            17    12
Ddosreport       573  - 24.6%   281      1        1           760   330
Defacement         0    NaN       0      0        0             0     0
Dipnet            12  +  9.1%    11      0        0            11    11
Fastflux       4,400  + 14.4%   697      0        0         3,845   631
Flowbots       4,827  -  8.5%   517     20       20         5,275   741
Malwareurl     8,494  - 70.7%  1380      1        2        28,943  2733
Mydoom            11  - 21.4%    11      0        0            14    11
Nachi          5,854  -  0.2%   571      5        5         5,863   583
Phatbot        2,715  -  2.4%   482      0        0         2,783   466
Phishing       1,548  - 25.9%   566      3        3         2,089   712
Proxy          2,555  - 26.4%   639      2       28         3,471   686
Routers           76  - 15.6%    52      0        0            90    54
Scanners       3,939  + 16.4%   957      0        4         3,383   905
Sinit             15  - 11.8%    10      0        0            17    15
Slammer        3,841  -  7.8%   567      6       18         4,165   578
Spam       4,694,692  -  6.7%  9538      0      253     5,032,137  9738
Spreaders      2,244  - 16.9%   534      0        0         2,700   670
Stormworm     77,321  -  3.4%  2274      0        6        80,058  2361
Toxbot        16,005  -  2.0%   693      0        0        16,339   731

TOTALS     5,432,248  -  0.3% 10595     37      352     5,450,357 11019
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJYigsluRbRini9tgRAoUlAJ4kH8xkyBfAhENORSYP1ijZAF/j6wCfXp8/
XmpJMOnB56O88ZFa0tfNlMw=
=42AH
-----END PGP SIGNATURE-----