[nsp-sec] Daily Reports Summary for week ending 2011-12-19

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 19 DEC 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           1,824  +  5.7%   211      0        0        1,726   205
Bots         2,416,234  -  7.3% 10826   1260     1641    2,605,428 10838
Bruteforce         533  +  5.5%   259      0        0          505   277
Ddosreport         607  + 55.6%   287      1        1          390   234
Fastflux             0    NaN       0      0        0            0     0
Flowbots           378  - 25.4%   106      5        5          507   140
Malwareurl       8,522  -  5.9%  1649      1        2        9,055  1641
Nachi            1,527  -  2.2%   313     16       16        1,562   313
Openresolvers  662,591  -  0.1% 10244      0       85      662,923 10206
Phishing         1,881  +  1.6%   592      3        4        1,851   588
Proxy              496  -  1.6%   286      0        0          504   279
Routers            195  - 14.8%    46      0        0          229    52
Scanners        21,667  -  1.0%  3184      6       10       21,880  3197
Slammer            254  + 10.0%   115      2        2          231   111
Spam         5,242,600  + 14.5% 11840      0     1080    4,577,913 11852
Spreaders          263  - 48.0%   130      0        0          506   189
Stormworm        1,188  -  9.8%   277      0        0        1,317   289

TOTALS       8,208,065  +  6.2% 17030   1288     2839    7,731,681 17010

The spam category seems to have jumped a bit, but I wouldn't be
surprised to see that as a holiday-centered spam increase; I know I've
been seeing a lot more hitting and getting past my filters lately.
Ugh, bad spam.

Please note: Team Cymru is closed for the week (and a day this year)
from December 26 through January 2nd inclusive.  I will be sending out
a weekly summary at some point during that week but won't promise it
on Monday.  Our 24x7 NOC hotline is, as always, available at
+1-847-378-3301.  E-mails will be monitored, but if your issue
requires attention during the break, a phone call is the best way to
make sure that it's seen.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk7vc4wACgkQluRbRini9thxZACfWMDgEne25T6dDc5RgtECFdve
AHAAn3j/0Ld4IWo7WexTjjyd2gf/SIoe
=B+UA
-----END PGP SIGNATURE-----