[nsp-sec] Daily Reports Summary for week ending 2011-01-24

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 24 JAN 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,317  + 80.0%   253      0        0        1,287   178
Blaster             54  - 15.6%    41      0        0           64    45
Bots           770,567  -  1.8%  8450      0       55      784,911  8560
Bruteforce         378  +  1.3%   224      0        0          373   227
Dameware             3  - 82.4%     3      0        0           17    12
Ddosreport         740  + 19.4%   366      1        3          620   321
Fastflux           680  - 85.3%   120      1        1        4,616   692
Flowbots             1  -  0.0%     1      0        0            1     1
Malwareurl      12,882  + 21.5%  1829      1        1       10,605  1639
Nachi            1,763  + 45.1%   353      5        5        1,215   303
Openresolver 3,710,328  +408.8% 18924      0      129      729,198 10228
Phatbot            735  +  5.6%   217      0        0          696   212
Phishing         1,438  + 25.3%   516      2        3        1,148   453
Proxy           24,955  -  4.6%  2148      1       12       26,161  2013
Routers            192  +  3.2%    50      0        0          186    49
Scanners         3,643  +149.0%   920      2        4        1,463   538
Slammer            450  - 66.9%   181      1        2        1,361   399
Spam         5,454,331  + 14.4% 11159     27      573    4,768,989 11095
Spreaders          762  + 13.7%   268      0        0          670   212
Stormworm        4,395  -  3.4%   560      0        0        4,552   561

TOTALS       9,887,162  + 57.7% 20851     38      781    6,269,312 15639

Spam continues back upward, fun times for all!  The big open resolvers
bump is the quasi-monthly large-scale resolver scan, nothing nefarious
going on there.  The scanners jump is just a return to normal after a
drop last week due to some darknet collection issues at our end -
hopefully that should stabilize now.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk0956UACgkQluRbRini9tg3ngCeP+aeuj6Xhgx6DUdWyY+cXFkO
yewAnRxVTqxrwjTCte3zD3caiH6l9dLk
=Nv1/
-----END PGP SIGNATURE-----