[nsp-sec] Daily Reports Summary for week ending 2010-03-01

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

Welcome to March!  Today is Team Cymru Founders' Day, when we celebrate
the founding of Team Cymru by taking a company-wide day off, so don't be
surprised by us being somewhat quiet today.  As always, though, our 24x7
NOC hotline is monitored at +1-630-230-5401 for urgent issues!

Note: the "bots" category numbers are way down this week due to the loss
of some Conficker A+B data.  We're hoping that this will be resolved
soon, but it is due to circumstances beyond our control (and beyond that
of our data provider as well), so we do not have any firm estimates.
Conficker C and other data remains in our data feeds, though!

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 01 MAR 2010.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           8,078  + 25.0%   611      0        0        6,460   608
Blaster             88  +  4.8%    48      0        0           84    51
Bots         3,229,776  - 78.4% 12278      0      301   14,972,986 14866
Bruteforce         519  + 37.7%   312      0        0          377   229
Dameware            20  +  5.3%    13      0        0           19    14
Ddosreport       1,410  -  7.1%   515      2        3        1,518   542
Defacement           0    NaN       0      0        0            0     0
Dipnet               5  + 25.0%     5      0        0            4     4
Fastflux         2,146  - 72.9%   414      0        0        7,915   943
Flowbots         1,742  +955.8%    59      5        5          165    73
Malwareurl      31,809  + 11.1%  2775      1        3       28,620  2619
Mydoom               7  + 75.0%     6      0        0            4     4
Nachi            3,292  +  3.5%   422     13       13        3,180   400
Openresolver 1,569,232  +  2.0% 11957      0       19    1,538,060 11954
Phatbot          1,282  -  5.4%   306      0        0        1,355   303
Phishing         2,044  +  4.0%   729      2        3        1,966   684
Proxy           23,014  -  0.1%  1642      0     4617       23,035  1575
Routers            133  - 33.8%    67      0        0          201   106
Scanners         5,390  + 41.1%   999      3        3        3,821   968
Sinit               10  + 66.7%     6      0        0            6     6
Slammer          2,070  +  4.9%   450      4       23        1,973   455
Spam         8,434,364  +  5.2% 11626      0      831    8,019,969 11645
Spreaders       10,843  + 41.2%  1030      0        0        7,678   820
Stormworm       11,269  +  1.2%   933      0        0       11,138   931
Toxbot           9,547  +235.2%   520      0        1        2,848   384

TOTALS      12,888,547  - 43.3% 17572     27     5808   22,731,715 18474
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAkuL8xEACgkQluRbRini9thDPgCfXvXCBMF1er8eB759GrCFbARu
QYwAn1mYrQSRej/lw//lLG9Qyv1/5fhj
=KULG
-----END PGP SIGNATURE-----