[nsp-sec] Daily Reports Summary for week ending 2009-05-11

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Those bots numbers just keep going up thanks to our friendly
neighborhood Conficker. :|  If you have any contacts that are outside of
the NSP-SEC sphere of trust, but interested in Conficker-specific
reports (and preferably able to take action on them :)), please feel
free to direct them to contact team-cymru at cymru.com, as we are providing
feeds from our Conficker sinkhole directly to any ISP that requests
them.  We'd love to see those numbers start going down instead of up! :)

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 11 MAY 2009.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- --
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report     UniqueIPs   Change  ASNs  bogon  no-routes   UniqueIPs  ASNs
- ------  -------------------------------------------- -----------------
Beagle        13,214  +  2.4%   871      0        7        12,898   906
Blaster          378  +  7.1%    97      0        0           353    89
Bots      17,671,187  +  4.2% 13045     15    48218    16,963,309 13080
Bruteforce       379  -  6.9%   219      0        0           407   239
Dameware          84  +180.0%    44      0        0            30    16
Ddosreport     1,173  - 14.6%   459      1        5         1,374   518
Defacement         0    NaN       0      0        0             0     0
Dipnet             0  -100.0%     0      0        0             2     1
Fastflux       2,104  +  3.6%   518      0        0         2,030   389
Flowbots       3,188  - 42.3%   568     76       78         5,528   641
Malwareurl    24,961  - 25.8%  2416      2       27        33,636  2825
Mydoom             0  -100.0%     0      0        0             1     1
Nachi          4,502  -  0.0%   540      5        5         4,503   537
Phatbot        2,179  -  0.8%   407      0        0         2,196   396
Phishing       2,548  +  6.9%   858      2        5         2,384   804
Proxy          5,259  + 15.4%  1015      7       51         4,558   903
Routers          216  +137.4%   104      0        0            91    51
Scanners       2,929  - 15.2%   802      2        8         3,455   885
Sinit             12  - 25.0%    11      0        0            16    12
Slammer        3,324  -  7.2%   523      3       15         3,582   557
Spam       7,644,087  -  4.9% 11297      2    23187     8,034,551 11473
Spreaders      2,657  + 35.5%   567      0        0         1,961   505
Stormworm     40,160  -  3.7%  1664      1       32        41,689  1687
Toxbot        13,848  +  0.8%   657      0        0        13,736   649

TOTALS    23,106,156  +  1.7% 15271    115    58567    22,720,480 15469
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFKCEYrluRbRini9tgRAl+HAJ94Z/EaMb33yfzZ0jcydBvh7RxV4gCcDxzg
PiugzoUHN7QqCe3urNJOZxQ=
=vsAu
-----END PGP SIGNATURE-----