[nsp-sec] Daily Reports Summary for week ending 2010-11-29

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings everyone!

I hope all in the US had a good and safe Thanksgiving, and the rest of
you enjoyed our being gone and/or in a food coma for the weekend. :)
Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 29 NOV 2010.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,059  - 11.9%   332      0        0        3,473   361
Blaster             73  + 28.1%    51      0        0           57    38
Bots         1,442,024  -  1.4%  9408      0       55    1,463,151  9515
Bruteforce         400  -  4.3%   232      0        0          418   249
Dameware            24  +  9.1%    18      0        0           22    15
Ddosreport         697  - 32.1%   346      1        3        1,027   436
Defacement           0    NaN       0      0        0            0     0
Dipnet               2  - 33.3%     2      0        0            3     3
Fastflux           914  - 42.5%   169      0        0        1,590   271
Flowbots             3  +200.0%     2      0        0            1     1
Malwareurl      17,190  -  4.3%  2203      1        4       17,969  2235
Mydoom               3  - 40.0%     3      0        0            5     4
Nachi            2,332  +  2.6%   359      4        4        2,272   360
Openresolvers  719,730  - 79.9% 10072      0       32    3,587,046 18647
Phatbot            825  -  2.9%   239      0        0          850   229
Phishing         1,326  -  8.3%   513      2        2        1,446   549
Proxy           27,076  + 52.1%  1769      0        6       17,805  1644
Routers            176  -  0.6%    59      0        0          177    63
Scanners         3,179  + 37.4%   821      4        5        2,313   721
Sinit               11  + 37.5%    11      0        0            8     8
Slammer          1,612  +  6.9%   433      5       27        1,508   426
Spam         5,956,144  +  9.3% 10980      2      566    5,448,428 11100
Spreaders          668  +  6.0%   214      0        0          630   214
Stormworm        5,131  +  1.4%   605      0        2        5,060   591
Toxbot               0    NaN       0      0        0            0     0

TOTALS       8,044,196  - 22.6% 15711     18      704   10,394,445 20720

Can you believe it's almost December already?  The big drop this week is
due to that not-quite-regular re-scanning of open resolvers being
present last week and gone this week.  Don't be surprised to see that
coming up again in the future.  Otherwise I don't see any super huge
increases; the proxy report looks to have spiked a little bit, we'll see
if that trend continues or not.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAkzz5OIACgkQluRbRini9tjaCwCfZVgFZrnRq1QzKoV4VrQn231v
QhwAoIVhcZ9Uci9AXf2EDZyJoeIrypWU
=glgj
-----END PGP SIGNATURE-----