[nsp-sec] Daily Reports Summary for week ending 2011-03-14

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings everyone!

Immediately below you will find the weekly summary Daily Reports / ASN
Alerts submissions for the week ending 14 MAR 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,966  -  3.7%   256      0        0        3,080   263
Bots         1,035,780  +  0.1%  8911      0       70    1,034,474  8932
Bruteforce         332  +  8.5%   204      0        0          306   202
Ddosreport       1,257  + 23.5%   504      2        6        1,018   430
Fastflux         1,059  +278.2%   274      0        0          280    96
Flowbots             2  - 33.3%     2      0        0            3     3
Malwareurl      15,572  -  0.2%  2074      1        4       15,597  2029
Nachi            1,975  -  1.6%   341     16       16        2,007   336
Openresolvers  739,441  -  0.4% 10249      0       28      742,490 10364
Phatbot            676  +  3.2%   183      0        0          655   199
Phishing         1,241  - 14.8%   511      1        2        1,456   556
Proxy           24,607  +  8.1%  1940      0        4       22,768  1969
Routers            273  + 31.9%    62      0        0          207    52
Scanners         3,681  -  3.6%   891      5        9        3,819   939
Slammer            233  - 33.4%   118      0        0          350   173
Spam         5,246,834  -  2.4% 10994      0      774    5,374,725 10904
Spreaders          546  - 47.5%   212      0        0        1,040   356
Stormworm        3,666  -  2.5%   472      0        0        3,760   504

TOTALS       6,963,617  -  1.8% 15802     23      909    7,087,701 15836

The notable increase in the fastflux category this week represents an
increase in the amount of data returned from one of our providers.  We
haven't done any deeper investigation into the source of that particular
increase.  Otherwise activity levels look to be staying in the ranges we
would expect, nothing too major to report.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk1+OMkACgkQluRbRini9tg3sQCeJOPukXC0OGvvpqoo69XmbmiF
X+wAn0sOOmBOVvESD1HY6rS99AieVxvS
=80qz
-----END PGP SIGNATURE-----