[nsp-sec] Daily Reports Summary for week ending 2011-02-28

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon everyone,

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 28 FEB 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,123  +  6.9%   255      0        0        2,922   261
Bots           875,949  - 13.8%  8197      0       62    1,016,760  9322
Bruteforce         330  -  8.6%   192      0        0          361   208
Ddosreport       1,025  -  5.2%   407      4        6        1,081   430
Fastflux           976  + 48.6%   132      0        0          657   167
Flowbots             1  - 66.7%     1      0        0            3     3
Malwareurl      11,631  - 13.1%  1765      2        2       13,389  1906
Nachi            2,129  +  5.9%   345      7        7        2,011   343
Openresolver 3,707,490  +618.3% 19008      0       74      516,115  9144
Phatbot            683  -  4.1%   191      0        0          712   205
Phishing         1,557  +  9.3%   553      2        3        1,424   524
Proxy           23,738  -  5.6%  1962      0       17       25,136  2045
Routers            210  + 12.3%    62      0        0          187    51
Scanners         3,825  +  3.0%   936      3        7        3,715   885
Slammer            322  -  5.8%   156      0        1          342   162
Spam         4,916,219  -  2.1% 10671      0      970    5,022,702 10825
Spreaders          550  - 15.1%   231      0        1          648   230
Stormworm        4,000  +  5.9%   508      0        0        3,776   509

TOTALS       9,436,431  + 45.3% 20891     16     1147    6,492,825 15314

This week reflects the monthly-ish larger Open Resolvers run, hence the
big increase there.  The drop in bots is due to the loss of Conficker C
data for most of last week, but we believe this has now been restored,
and you'll likely see an increase again next week.  Malware URLs are
down due to the database issues I e-mailed NSP-SEC about earlier today,
and hopefully will be ramping right back up soon once we have those
issues resolved.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk1r/H4ACgkQluRbRini9tjUsgCfVoCBwXvEqL66s54huLK4fGBk
H/UAnitkTDj97uH79qh6NR3RpbFYHYhC
=8Ktc
-----END PGP SIGNATURE-----