[nsp-sec] Daily Reports Summary for week ending 2011-03-07

Tim Wilde twilde at cymru.com
Wed Mar 9 11:50:21 EST 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning all!

Immediately below you will find the (late because of me, sorry!) weekly
summary of Daily Reports / ASN Alerts submissions for the week ending 07
MAR 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,080  -  1.4%   263      0        0        3,123   255
Bots         1,034,474  + 18.1%  8932      0       91      875,949  8197
Bruteforce         306  -  7.3%   202      0        0          330   192
Ddosreport       1,018  -  0.7%   430      1        2        1,025   407
Fastflux           280  - 71.3%    96      0        0          976   132
Flowbots             3  +200.0%     3      0        0            1     1
Malwareurl      15,597  + 34.1%  2029      1        1       11,631  1765
Nachi            2,007  -  5.7%   336      7        7        2,129   345
Openresolvers  742,490  - 80.0% 10364      0       52    3,707,490 19008
Phatbot            655  -  4.1%   199      0        0          683   191
Phishing         1,456  -  6.5%   556      1        1        1,557   553
Proxy           22,768  -  4.1%  1969      0        9       23,738  1962
Routers            207  -  1.4%    52      0        0          210    62
Scanners         3,819  -  0.2%   939     10       10        3,825   936
Slammer            350  +  8.7%   173      0        1          322   156
Spam         5,374,725  +  9.3% 10904      0     1714    4,916,219 10671
Spreaders        1,040  + 89.1%   356      0        0          550   231
Stormworm        3,760  -  6.0%   504      0        0        4,000   508

TOTALS       7,087,701  - 24.9% 15836     18     1886    9,436,431 20891

The drop in open resolvers is for the same reason as last week's rise;
last week included a monthly larger-net scan, this week is the regular
scan/report volume.  Everything else is pretty normal, spam is up again,
what a surprise. :)  Second verse, same as the first. :)

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk13r8wACgkQluRbRini9tjPfACfYjC1iWYhVLcnPNy3JKekk3C1
VlEAn1SXUKnjkJeju9U5z2ZJgJ8TadAl
=KDNO
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list