[nsp-sec] Daily Reports Summary for week ending 2010-12-27

Tim Wilde twilde at cymru.com
Mon Dec 27 10:01:02 EST 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 27 DEC 2010.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           4,268  + 31.4%   337      0        1        3,248   325
Blaster             71  +  4.4%    41      0        0           68    43
Bots           777,013  -  0.7%  8449      0       46      782,253  8667
Bruteforce         353  - 30.2%   212      0        0          506   295
Dameware            22  - 15.4%    15      0        0           26    17
Ddosreport         774  - 14.8%   350      1        1          908   407
Defacement           0    NaN       0      0        0            0     0
Dipnet               1  - 75.0%     1      0        0            4     4
Fastflux         1,299  +  3.7%   232      0        0        1,253   232
Flowbots             6  + 50.0%     5      0        0            4     4
Malwareurl      17,265  + 10.9%  2154      2        5       15,569  2061
Mydoom               7  + 40.0%     6      0        0            5     5
Nachi            2,161  +  3.7%   353      6        6        2,083   366
Openresolver 3,612,363  +398.5% 18766      0      269      724,595 10142
Phatbot            747  -  5.7%   210      0        0          792   225
Phishing         1,222  +  0.1%   415      0        0        1,221   440
Proxy           27,421  -  6.7%  1943      0       12       29,389  1960
Routers            150  - 20.2%    43      0        0          188    51
Scanners         3,354  -  7.2%   853      0        4        3,613  1017
Sinit                7  - 30.0%     7      0        0           10     7
Slammer          1,385  -  2.5%   406      4       28        1,420   400
Spam         4,938,692  -  5.4% 10501      2      480    5,221,768 10920
Spreaders          636  - 16.0%   238      0        0          757   229
Stormworm        4,366  -  6.1%   555      0        0        4,649   567
Toxbot               0    NaN       0      0        0            0     0

TOTALS       9,299,273  + 38.2% 20615     14      850    6,729,373 15665

Looks like we had another periodic re-scan of the larger open resolvers
picture this week, otherwise things seem pretty normal.  The spam
category seems to be continuing its decline, but this week that could
well be due to folks being on vacation and leaving computers turned off
so they're not able to spew as much garbage as usual. :)

I hope everyone is having a safe and happy holiday period!  Remember,
Team Cymru is closed until 2011-01-03, we're only checking in for urgent
requests and doing some periodic reporting during this period.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0Yqi4ACgkQluRbRini9tjESACfS3yyksmxSiI+ckbSunz7djF0
DkwAn0+IL7hInaR8JYhZr/xky88H3XzY
=OwTD
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list