[nsp-sec] Daily Reports Summary for week ending 2009-11-23

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Happy Thanksgiving Week to everyone here in the US, and happy "week of
US people disappearing for a holiday no one else celebrates" to everyone
else! ;)  FYI, Team Cymru folks are all off Thursday and Friday of this
week, and many of us are taking other parts of the week off, so please
don't be alarmed or surprised if we take a bit longer than usual to
reply to some things.  We will of course be continuing to keep eyes over
all of our various systems, maintaining the DDoS-RS, etc, just trying to
spend a little less time on all of that and a little more with family,
friends, and food. :)  Have a great week, all!

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 23 NOV 2009.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           8,676  -  5.1%   704      0        0        9,142   696
Blaster             70    NaN      43      0        0            0     0
Bots        25,167,106  -  0.6% 13864      0   211623   25,319,643 13991
Bruteforce         870  + 13.7%   413      0        3          765   368
Dameware            19  + 11.8%    14      0        0           17    12
Ddosreport       1,292  +  1.3%   487      2       84        1,276   477
Defacement           0    NaN       0      0        0            0     0
Dipnet               8  + 33.3%     8      0        1            6     5
Fastflux         2,659  - 33.5%   472      0        0        3,996   697
Flowbots         4,171  - 81.6%   685     11       48       22,681   708
Malwareurl       1,339  - 29.7%   495      1       12        1,905   606
Mydoom               4  - 50.0%     4      0        0            8     8
Nachi            3,462  +  4.9%   446      2        5        3,301   441
Openresolver 1,325,936  - 10.8% 15730      0      337    1,487,234 15885
Phatbot          1,380  - 17.9%   308      0        0        1,681   379
Phishing         1,705  - 18.7%   679      3       22        2,097   784
Proxy           17,982  -  9.6%  1603      1      473       19,900  1666
Routers            177  + 35.1%    77      0        0          131    66
Scanners         3,833  +  0.3%  1018      2        2        3,821  1065
Sinit               14  + 75.0%    14      0        0            8     8
Slammer          2,692  +  8.2%   501      3       14        2,488   490
Spam         7,217,476  - 11.2% 10935      1     2836    8,129,986 11142
Spreaders        1,541  +  9.3%   385      0        1        1,410   368
Stormworm       16,054  -  4.5%  1106      0        3       16,815  1152
Toxbot          10,369  + 68.4%   554      0        0        6,157   504

TOTALS      31,065,149  -  2.7% 19848     24   215299   31,939,612 19926
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAksKkjgACgkQluRbRini9ti6XACfU8/oZwQoDuf7cOZWMdMEllcA
m74AnA10EejFN+V3eSq48S2oNw5G8U/Y
=RuB6
-----END PGP SIGNATURE-----