[nsp-sec] Daily Reports Summary for week ending 2011-02-21

Tim Wilde twilde at cymru.com
Mon Feb 21 15:51:32 EST 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon all!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alert submissions for the week ending 21 FEB 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,922  - 13.7%   261      0        0        3,384   311
Bots         1,016,760  + 39.5%  9322      0      103      728,902  8496
Bruteforce         361  -  1.1%   208      0        0          365   228
Ddosreport       1,081  +  9.2%   430      2        4          990   396
Fastflux           657  + 28.1%   167      0        0          513   155
Flowbots             3    NaN       3      0        0            0     0
Malwareurl      13,389  - 10.6%  1906      1        3       14,974  1991
Nachi            2,011  -  4.0%   343      6        6        2,095   361
Openresolvers  516,115  +  3.3%  9144      0       21      499,541  9038
Phatbot            712  -  3.5%   205      0        0          738   233
Phishing         1,424  +  7.1%   524      2        2        1,330   495
Proxy           25,136  - 10.9%  2045      0       35       28,210  2032
Routers            187  -  4.6%    51      0        0          196    53
Scanners         3,715  -  4.9%   885      6        9        3,907   906
Slammer            342  -  4.2%   162      0        1          357   164
Spam         5,022,702  +  5.1% 10825      0     3238    4,780,186 10935
Spreaders          648  - 38.0%   230      0        4        1,045   328
Stormworm        3,776  -  0.9%   509      0        0        3,812   541

TOTALS       6,492,825  +  8.2% 15314     14     3413    6,002,439 15170

Note that while the bots category had quite a boost this week, it may
have a corresponding drop next week, as we may have lost a source of
Conficker data.  We're still trying to work out the particulars there,
so it may not be gone forever or for the long term, just trying to
pre-set expectations appropriately. :)

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk1i0FQACgkQluRbRini9tiJrwCbBS6htusi/2OiJULsvBg7GM8D
PzQAni48vSOARwW/REa/rz3CZNZPbNIT
=VOKr
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list