[nsp-sec] Daily Reports Summary for week ending 2010-12-13

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning all,

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 13 DEC 2010:

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,728  - 11.1%   306      0        0        3,068   331
Blaster             68  - 12.8%    48      0        0           78    47
Bots         1,001,286  - 31.0%  9200      0       49    1,451,420  9518
Bruteforce         345  - 53.5%   210      0        0          742   266
Dameware            23  - 14.8%    15      0        0           27    20
Ddosreport         882  + 21.5%   391      2        2          726   342
Defacement           0    NaN       0      0        0            0     0
Dipnet               1  - 50.0%     1      0        0            2     2
Fastflux           744  + 57.0%   208      0        0          474   122
Flowbots             4  +100.0%     3      0        0            2     2
Malwareurl      17,020  -  5.0%  2113      1        1       17,913  2226
Mydoom               4  - 20.0%     4      0        0            5     5
Nachi            2,084  -  6.9%   360      5        5        2,238   356
Openresolvers  722,426  +  0.2% 10178      0       15      721,284 10111
Phatbot            838  - 20.7%   228      0        0        1,057   319
Phishing         1,149  -  5.8%   444      2        2        1,220   468
Proxy           27,705  -  1.2%  1849      0        3       28,039  1821
Routers            190  -  9.5%    50      0        0          210    64
Scanners         3,201  -  5.4%   857      7       10        3,383   884
Sinit                7  + 40.0%     7      0        0            5     5
Slammer          1,498  -  5.1%   419      3       26        1,579   425
Spam         5,788,604  -  1.6% 11021      0      340    5,885,475 11135
Spreaders          830  + 13.9%   249      0        0          729   202
Stormworm        4,837  -  5.0%   594      0        0        5,091   588
Toxbot               0    NaN       0      0        0            0     0

TOTALS       7,480,147  -  6.3% 15739     18      448    7,984,768 15816

The bot number decline is not, unfortunately, a true decline in the
number of bots out there (darn), but some fluctuations in some data
sources, which we are following up on.  Otherwise things seem to have
been relatively stable this week.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0GVh8ACgkQluRbRini9tgT8ACffXOeO3vok9qHhDvqChH7XPXl
w2wAn1wsT5OPMmw0sxlQVrbQdGyHS4xG
=mW1u
-----END PGP SIGNATURE-----