[nsp-sec] Daily Reports Summary for week ending 2010-11-22

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning everyone,

Welcome to another week of Daily Reports data!  Immediately below you
will find the weekly summary of Daily Reports / ASN Alerts submissions
for the week ending 22 NOV 2010.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,473  - 22.5%   361      0        0        4,482   344
Blaster             57  +  5.6%    38      0        0           54    37
Bots         1,463,151  - 10.0%  9515      0       66    1,625,360  9709
Bruteforce         418  +  1.0%   249      0        0          414   237
Dameware            22  - 24.1%    15      0        0           29    21
Ddosreport       1,027  + 17.8%   436      3        4          872   371
Defacement           0    NaN       0      0        0            0     0
Dipnet               3  + 50.0%     3      0        0            2     2
Fastflux         1,590  -  5.1%   271      0        0        1,675   305
Flowbots             1  -  0.0%     1      0        0            1     1
Malwareurl      17,969  +  0.1%  2235      2        3       17,949  2267
Mydoom               5  + 25.0%     4      0        0            4     3
Nachi            2,272  -  1.7%   360      3        3        2,312   353
Openresolver 3,587,046  +390.8% 18647      0      112      730,865 10111
Phatbot            850  -  7.4%   229      0        0          918   227
Phishing         1,446  + 29.3%   549      0        0        1,118   445
Proxy           17,805  - 34.3%  1644      0        8       27,116  1683
Routers            177  + 11.3%    63      0        0          159    63
Scanners         2,313  +  7.4%   721      1        2        2,154   692
Sinit                8  + 33.3%     8      0        0            6     5
Slammer          1,508  - 13.9%   426      3       26        1,752   452
Spam         5,448,428  - 12.1% 11100      5      503    6,196,400 11404
Spreaders          630  + 15.2%   214      0        0          547   202
Stormworm        5,060  -  0.3%   591      0        1        5,076   626
Toxbot               0    NaN       0      0        0            0     0

TOTALS      10,394,445  + 22.9% 20720     14      723    8,456,765 15971

As one subscriber astutely observed last week, spam, bots, and open
resolvers are quite consistently the highest categories on the list.
While that seems like a good "small" list of categories, there's still
plenty of badness to go around in them, so your continuing efforts are
always appreciated!  Suggestions of additional data sources are always
welcome as well (especially if you have data to contribute :)).

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAkzqfSYACgkQluRbRini9tgNIwCfXhUcDg6DJ2W/HkqEr+Gfuqia
gygAni6JTzY/StWDG+wb+g7aaKF+3a03
=jR4/
-----END PGP SIGNATURE-----