[nsp-sec] Daily Reports Summary for week ending 2009-01-11

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Sorry for the delayed report from last week (and this week's to come
shortly), I was out of town and crossed some wires when setting up
coverage for the summaries.  Should be back to normal now, and there
were no problems with the real stuff under the hood that I know of! :)

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 11 JAN 2010.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           6,239  + 15.2%   564      0        0        5,417   540
Blaster            158  +192.6%    91      0        0           54    30
Bots        24,049,182  + 33.8% 14422      0      808   17,972,456 14036
Bruteforce         577  + 63.9%   342      0        1          352   214
Dameware            28  + 47.4%    19      0        0           19    11
Ddosreport       1,251  +  5.9%   488      4        5        1,181   465
Defacement           0    NaN       0      0        0            0     0
Dipnet               9  - 10.0%     9      0        0           10     9
Fastflux         3,958  +  3.2%   537      0        0        3,836   512
Flowbots           360  -  1.1%    94      1        1          364   130
Malwareurl      25,366  -  3.3%  2465      1        2       26,242  2524
Mydoom               5  - 28.6%     5      0        0            7     7
Nachi            3,226  +  2.5%   435      2        3        3,146   426
Openresolver 1,434,838  +516.2% 15830      0       54      232,863  8914
Phatbot          1,366  +  4.2%   301      0        0        1,311   298
Phishing         2,122  + 34.0%   684      2        2        1,583   603
Proxy           24,634  + 14.8%  1542      0        3       21,467  1547
Routers            158  + 22.5%    91      0        0          129    72
Scanners         3,070  - 12.5%   913      0        0        3,509  1016
Sinit                8  - 33.3%     8      0        0           12    11
Slammer          2,601  -  0.6%   483      5       17        2,616   514
Spam         7,589,005  + 10.4% 11538      1      422    6,872,327 10902
Spreaders        1,363  +  5.2%   304      0        0        1,296   311
Stormworm       13,336  +  5.8%  1002      0        0       12,607   976
Toxbot           8,968  +  7.2%   497      0        0        8,367   511

TOTALS      30,828,100  + 31.3% 20420     14     1308   23,470,741 17272
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAktVyV8ACgkQluRbRini9tgFjQCfZcNclG+3jJyxEJIx+B8Iou1+
RAIAn3fnpGm18lm6YcwJwAIb1yycehBO
=eIWK
-----END PGP SIGNATURE-----