[nsp-sec] Daily Reports Summary for week ending 2010-01-04

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Welcome to 2010!  We hope everyone had a safe and happy holiday season
and new year, no matter what you celebrate.  The drop in the "bots"
category is due to a slight year rollover problem with some of our
Conficker data; that should be returning to normal after today.

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 04 JAN 2010.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           5,417  +  1.0%   540      0        0        5,363   560
Blaster             54  + 10.2%    30      0        0           49    36
Bots        17,972,456  - 29.8% 14036      0      426   25,589,528 14146
Bruteforce         352  - 11.8%   214      0        0          399   232
Dameware            19  -  5.0%    11      0        0           20    14
Ddosreport       1,181  - 13.0%   465      1        1        1,357   514
Defacement           0    NaN       0      0        0            0     0
Dipnet              10  - 23.1%     9      0        0           13    12
Fastflux         3,836  - 19.4%   512      0        0        4,757   594
Flowbots           364  +  3.1%   130      0        0          353   136
Malwareurl      26,242  -  3.6%  2524      2        2       27,229  2673
Mydoom               7  - 30.0%     7      0        0           10     8
Nachi            3,146  -  1.2%   426      4        5        3,185   435
Openresolver   232,863  - 80.3%  8914      0        8    1,179,476 15514
Phatbot          1,311  -  4.8%   298      0        0        1,377   304
Phishing         1,583  - 21.4%   603      1        1        2,014   668
Proxy           21,467  +  7.2%  1547      0        1       20,028  1426
Routers            129  - 17.3%    72      0        0          156    79
Scanners         3,509  +  7.0%  1016      2        3        3,279   913
Sinit               12  + 33.3%    11      0        0            9     8
Slammer          2,616  -  3.4%   514      3       14        2,708   516
Spam         6,872,327  + 10.2% 10902      0      856    6,237,763 10964
Spreaders        1,296  + 17.6%   311      0        0        1,102   250
Stormworm       12,607  -  3.7%   976      0        0       13,096  1008
Toxbot           8,367  -  0.9%   511      0        0        8,440   507

TOTALS      23,470,741  - 24.1% 17272     12     1305   30,931,212 20077
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAktB8CQACgkQluRbRini9thTGwCfdmw1fdjwrA0XXKiQYdPo73XK
HDYAmgMM139R/J0EpXQt/6DwBly8BfnM
=5NrC
-----END PGP SIGNATURE-----