[nsp-sec] Daily Reports Summary for week ending 2010-01-25

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Alas, the drop in "spam" category numbers you see this week is NOT due
to a massive drop in spam, but instead a problem downloading data from
one of our providers that cropped up over the weekend.  We're looking
into this and should have it resolved soon.

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 25 JAN 2010.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           7,965  -  5.2%   613      0        0        8,406   626
Blaster             66  - 35.3%    47      0        0          102    67
Bots        24,995,195  +  0.4% 14754      0     1600   24,884,096 14711
Bruteforce       3,408  + 27.3%  1125      0        0        2,677   990
Dameware            25  -  0.0%    17      0        0           25    17
Ddosreport       1,462  -  3.2%   544      1        2        1,511   557
Defacement           0    NaN       0      0        0            0     0
Dipnet               3  -  0.0%     3      0        0            3     3
Fastflux         6,804  + 64.5%   735      0        0        4,136   548
Flowbots           139  - 53.8%    74      2        2          301   102
Malwareurl      31,531  +  8.5%  2787      1        2       29,072  2701
Mydoom               3  - 25.0%     3      0        0            4     4
Nachi            3,230  +  0.6%   427      2        6        3,210   448
Openresolver 1,248,189  -  4.8% 15648      0       45    1,311,653 15737
Phatbot          1,036  - 22.3%   272      0        0        1,333   296
Phishing         1,988  - 11.1%   650      1        2        2,235   687
Proxy           23,139  -  9.5%  1543      0        4       25,561  1632
Routers            166  + 27.7%    91      0        0          130    75
Scanners         5,618  + 52.2%  1423      1        1        3,692   977
Sinit               10  + 66.7%     8      0        0            6     6
Slammer          2,605  -  2.2%   525      3       15        2,664   514
Spam         3,768,019  - 47.9% 10618      0      156    7,230,946 11575
Spreaders        1,295  +  5.4%   291      0        1        1,229   282
Stormworm       13,156  -  0.6%   974      0        0       13,241  1003
Toxbot           8,776  +  3.9%   522      0        0        8,449   517

TOTALS      28,834,818  -  7.6% 20345     10     1833   31,201,667 20504
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAktdux0ACgkQluRbRini9tg7OgCeKvZwZXrcH0O5reRx858HmOs6
k14An06er0cuytcBI9ojN4Jg4nB/+3vd
=dJMh
-----END PGP SIGNATURE-----