[nsp-sec] Daily Reports Summary for week ending 2011-04-25

[Dave Monnier]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning all!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 25 APR 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,071  +  6.5%   248      0        0        2,884   265
Bots         1,497,822  - 16.0%  9842      0       22    1,782,866 10994
Bruteforce         300  - 13.0%   176      0        0          345   194
Ddosreport       1,403  + 23.9%   507      2        4        1,132   441
Fastflux           702  - 35.8%   195      0        0        1,093   236
Flowbots             0    NaN       0      0        0            0     0
Malwareurl      11,468  - 23.2%  1848      1        1       14,930  2070
Nachi            1,743  -  3.3%   337     13       13        1,802   331
Openresolvers  3,497,175  +423.7% 18970      0      240      667,762 10049
Phatbot            555  -  6.6%   178      0        0          594   197
Phishing           893  - 41.7%   373      3        3        1,532   555
Proxy           21,456  +  1.2%  1680      0        4       21,192  1677
Routers            247  -  4.3%    58      0        0          258    50
Scanners        32,286  - 11.7%  3039      3        8       36,577  3337
Slammer            138  - 30.7%    77      0        0          199    90
Spam         6,551,821  + 13.8% 11256      0      548    5,758,378 11293
Spreaders        1,049  + 27.2%   309      0        1          825   274
Stormworm        3,017  -  2.0%   444      0        0        3,079   459

TOTALS      11,392,440  + 40.7% 21315     19      841    8,095,455 16716

Please note that there are some new family names being included in the
bots report; the bots report page is NOT intended to list all possible
family names, but rather only those that we feel require additional
explanation.  If it's not listed there, odds are it's intended that the
name represent a commonly known family name that should be relatively
easy to find in your search engine of choice.

That said, you're always welcome to ask us for more information, and
especially to report possible false positives, as we're constantly
evaluating and re-evaluating all of our data sources for the
appropriateness of their inclusion, and your feedback is the best way
for us to do that!

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support, and a special YO for David at IU!

Cheers,
- -Dave

- -- 
Dave Monnier
Team Cymru
https://www.team-cymru.org/
PGP: http://www.cymru.com/dmonnier/0x7C1AAE55_pub.asc

We just launched our new Training Practice, see
http://www.team-cymru.com/Services/Training/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk215hYACgkQ+29txnwarlUW/ACfVnZVVEcivBdqA5WughdotdFy
6U8Amwd3+lxN2K0M2Q+1La/JEhbkedGW
=ruT4
-----END PGP SIGNATURE-----