[nsp-sec] Daily Reports Summary for week ending 2010-12-20

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 20 DEC 2010.  Please note
that due to the Christmas and New Years holidays the next two weeks'
summaries may be delayed and/or at unusual times, but I'll try to get
them out!

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,248  + 19.1%   325      0        0        2,728   306
Blaster             68  -  0.0%    43      0        0           68    48
Bots           782,253  - 21.9%  8667      0       22    1,001,286  9200
Bruteforce         506  + 46.7%   295      0        0          345   210
Dameware            26  + 13.0%    17      0        0           23    15
Ddosreport         908  +  2.9%   407      1        2          882   391
Defacement           0    NaN       0      0        0            0     0
Dipnet               4  +300.0%     4      0        0            1     1
Fastflux         1,253  + 68.4%   232      0        0          744   208
Flowbots             4  -  0.0%     4      0        0            4     3
Malwareurl      15,569  -  8.5%  2061      2        3       17,020  2113
Mydoom               5  + 25.0%     5      0        0            4     4
Nachi            2,083  -  0.0%   366      4        4        2,084   360
Openresolvers  724,595  +  0.3% 10142      0       55      722,426 10178
Phatbot            792  -  5.5%   225      0        0          838   228
Phishing         1,221  +  6.3%   440      0        0        1,149   444
Proxy           29,389  +  6.1%  1960      1        8       27,705  1849
Routers            188  -  1.1%    51      0        0          190    50
Scanners         3,613  + 12.9%  1017      6        7        3,201   857
Sinit               10  + 42.9%     7      0        0            7     7
Slammer          1,420  -  5.2%   400      2       26        1,498   419
Spam         5,221,768  -  9.8% 10920      3      558    5,788,604 11021
Spreaders          757  -  8.8%   229      0        0          830   249
Stormworm        4,649  -  3.9%   567      0        0        4,837   594
Toxbot               0    NaN       0      0        0            0     0

TOTALS       6,729,373  - 10.0% 15665     18      684    7,480,147 15739

This week's noticeable decline in the bots category is due to the loss
of one of our larger report contributions.  We're working on an in-house
replacement of that particular data, and it's also possible it may
re-appear in some form in the future, but for now, you shouldn't be
surprised by somewhat reduced volume there.

The decline in spam category volume is not due to a similar data loss,
but just appears to be a fluctuation in the actual number of hosts
reported there.  Alas, I don't quite believe it's a real decline in
spam/spambot activity, but I guess time will tell on that one. :)

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk0PoXAACgkQluRbRini9tjd8wCeITk3H/0jYiEFqNMtT4FJcaY6
ojQAn1PJMLzDaeMFDczESmMr7su5BOOM
=5Ctk
-----END PGP SIGNATURE-----