[nsp-sec] Daily Reports Summary for week ending 2010-03-08

Tim Wilde twilde at cymru.com
Mon Mar 8 11:58:31 EST 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings, Everyone!

The "bots" category numbers remain down this week due to the Conficker
situation described last week.  We continue to work on this situation to
the extent that we can, and again, all of our other data sources remain
unchanged.

Below is the weekly summary of ASN Alert/Daily Reports submissions for
the week ending 08 MAR 2010.  For information regarding these projects
please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           8,090  +  0.1%   625      0        0        8,078   611
Blaster             75  - 14.8%    48      0        0           88    48
Bots         2,877,278  - 10.9% 12584      0      254    3,229,776 12278
Bruteforce       1,155  +122.5%   677      0        1          519   312
Dameware            31  + 55.0%    25      0        0           20    13
Ddosreport       1,230  - 12.8%   434      2        3        1,410   515
Defacement           0    NaN       0      0        0            0     0
Dipnet               3  - 40.0%     3      0        0            5     5
Fastflux           929  - 56.7%   136      0        0        2,146   414
Flowbots         2,279  + 30.8%    57      3        3        1,742    59
Malwareurl      31,148  -  2.1%  2802      2        9       31,809  2775
Mydoom               3  - 57.1%     3      0        0            7     6
Nachi            3,193  -  3.0%   427     12       15        3,292   422
Openresolver 1,076,439  - 31.4% 10796      0       20    1,569,232 11957
Phatbot          1,265  -  1.3%   310      0        0        1,282   306
Phishing         1,807  - 11.6%   652      2        2        2,044   729
Proxy           28,272  + 22.8%  1562      0        6       23,014  1642
Routers            167  + 25.6%    80      0        0          133    67
Scanners         4,227  - 21.6%  1148      0        0        5,390   999
Sinit               10  -  0.0%     9      0        0           10     6
Slammer          2,020  -  2.4%   453      3       15        2,070   450
Spam         6,755,472  - 19.9% 11321      1      740    8,434,364 11626
Spreaders        5,631  - 48.1%   655      0        0       10,843  1030
Stormworm       10,610  -  5.8%   887      0        0       11,269   933
Toxbot           8,104  - 15.1%   505      0        0        9,547   520

TOTALS      10,469,238  - 18.8% 17379     21     1053   12,888,547 17572
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAkuVLLcACgkQluRbRini9tg2/wCdE0bw8KqtVTtE3xWuoBfFaDIM
75MAniq+0vZqHgZKzlcqS6t/4s0xh4Vd
=6vuu
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list