[nsp-sec] Daily Reports Summary for week ending 2011-01-03

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning teams,

Welcome to 2011!  Below you will find the (day late, sorry) weekly
summary of Daily Reports / ASN Alerts submissions for the week ending 03
JAN 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,657  - 37.7%   277      0        0        4,268   337
Blaster             66  -  7.0%    45      0        0           71    41
Bots           755,037  -  2.8%  8101      0       34      777,013  8449
Bruteforce         306  - 13.3%   201      0        0          353   212
Dameware            23  +  4.5%    14      0        0           22    15
Ddosreport         630  - 18.6%   326      1        3          774   350
Defacement           0    NaN       0      0        0            0     0
Dipnet               5  +400.0%     5      0        0            1     1
Fastflux           862  - 33.6%   342      0        0        1,299   232
Flowbots             1  - 83.3%     1      0        0            6     5
Malwareurl      14,372  - 16.8%  1944      2        5       17,265  2154
Mydoom               4  - 42.9%     4      0        0            7     6
Nachi            2,115  -  2.1%   339      3        3        2,161   353
Openresolvers  719,464  - 80.1% 10114      0       33    3,612,363 18766
Phatbot            800  +  7.1%   245      0        0          747   210
Phishing           958  - 21.6%   399      0        0        1,222   415
Proxy           24,880  -  9.3%  1915      0        9       27,421  1943
Routers            170  + 13.3%    43      0        0          150    43
Scanners         3,150  -  6.1%   779      5        8        3,354   853
Sinit                8  + 14.3%     7      0        0            7     7
Slammer          1,435  +  3.6%   407      3       27        1,385   406
Spam         4,023,294  - 18.5%  9484      4      418    4,938,692 10501
Spreaders          121  - 81.0%    82      0        0          636   238
Stormworm        4,258  -  2.5%   565      0        0        4,366   555
Toxbot               0    NaN       0      0        0            0     0

TOTALS       5,493,501  - 40.9% 14873     17      538    9,299,273 20615

Amazingly the spam category continues on a downward trend, and this is
something I've seen chatter about in other fora now as well.  Don't
worry though, I'm sure it'll find a way to pick back up again soon
enough. :)

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk0jMHEACgkQluRbRini9tiiEwCghUd+n1NZXLZgW+ChzBAGlGyY
2KQAnA8dIH7kS5LzO0fewyddhkBRW3+l
=4U5g
-----END PGP SIGNATURE-----