[nsp-sec] Daily Reports Summary for week ending 2010-12-27
Tim Wilde
twilde at cymru.com
Mon Dec 27 10:01:02 EST 2010
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Good morning everyone!
Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 27 DEC 2010.
CURRENT WEEK'S DATA PREVIOUS WEEK
report UniqueIPs Change ASNs bogon noroute UniqueIPs ASNs
- ------ ------------------------------------------ -----------------
Beagle 4,268 + 31.4% 337 0 1 3,248 325
Blaster 71 + 4.4% 41 0 0 68 43
Bots 777,013 - 0.7% 8449 0 46 782,253 8667
Bruteforce 353 - 30.2% 212 0 0 506 295
Dameware 22 - 15.4% 15 0 0 26 17
Ddosreport 774 - 14.8% 350 1 1 908 407
Defacement 0 NaN 0 0 0 0 0
Dipnet 1 - 75.0% 1 0 0 4 4
Fastflux 1,299 + 3.7% 232 0 0 1,253 232
Flowbots 6 + 50.0% 5 0 0 4 4
Malwareurl 17,265 + 10.9% 2154 2 5 15,569 2061
Mydoom 7 + 40.0% 6 0 0 5 5
Nachi 2,161 + 3.7% 353 6 6 2,083 366
Openresolver 3,612,363 +398.5% 18766 0 269 724,595 10142
Phatbot 747 - 5.7% 210 0 0 792 225
Phishing 1,222 + 0.1% 415 0 0 1,221 440
Proxy 27,421 - 6.7% 1943 0 12 29,389 1960
Routers 150 - 20.2% 43 0 0 188 51
Scanners 3,354 - 7.2% 853 0 4 3,613 1017
Sinit 7 - 30.0% 7 0 0 10 7
Slammer 1,385 - 2.5% 406 4 28 1,420 400
Spam 4,938,692 - 5.4% 10501 2 480 5,221,768 10920
Spreaders 636 - 16.0% 238 0 0 757 229
Stormworm 4,366 - 6.1% 555 0 0 4,649 567
Toxbot 0 NaN 0 0 0 0 0
TOTALS 9,299,273 + 38.2% 20615 14 850 6,729,373 15665
Looks like we had another periodic re-scan of the larger open resolvers
picture this week, otherwise things seem pretty normal. The spam
category seems to be continuing its decline, but this week that could
well be due to folks being on vacation and leaving computers turned off
so they're not able to spew as much garbage as usual. :)
I hope everyone is having a safe and happy holiday period! Remember,
Team Cymru is closed until 2011-01-03, we're only checking in for urgent
requests and doing some periodic reporting during this period.
For information regarding these projects please visit our website at:
<https://www.cymru.com/nsp-sec/ASN-Alert/>
<https://www.cymru.com/nsp-sec/dailyreports/>
Please note that the nsp-security section on our website is
password-protected. Your nsp-sec mailing list username and password can
be used to access these pages. If you have problems logging in please
verify your account information at:
<http://www.nsp-security.org/>
Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks. We always welcome feedback
regarding the daily reports or any of our services. Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.
Thank you for your continued support!
Regards,
Tim Wilde
- --
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAk0Yqi4ACgkQluRbRini9tjESACfS3yyksmxSiI+ckbSunz7djF0
DkwAn0+IL7hInaR8JYhZr/xky88H3XzY
=OwTD
-----END PGP SIGNATURE-----
More information about the nsp-security
mailing list