[nsp-sec] Daily Reports Summary for week ending 2011-06-06

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 06 JUN 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,282  - 27.8%   223      0        0        3,159   241
Bots         2,258,048  + 10.2% 10658      0      264    2,049,019 10986
Bruteforce         269  +  9.8%   181      0        0          245   175
Ddosreport       1,780  + 32.8%   572      1        5        1,340   488
Fastflux           705  + 10.3%    99      0        1          639   117
Flowbots             0    NaN       0      0        0            0     0
Malwareurl      11,676  +  1.0%  1829      1        2       11,565  1857
Nachi            1,716  -  1.7%   334     17       19        1,745   327
Openresolvers  725,468  -  2.1% 10331      0       37      741,124 10458
Phatbot              0    NaN       0      0        0            0     0
Phishing         1,416  -  2.5%   516      2        2        1,453   537
Proxy            1,413  - 24.7%   700      0        2        1,876   796
Routers            210  -  5.0%    45      0        0          221    56
Scanners        38,618  +  3.7%  3158      2        9       37,257  3125
Slammer             55  - 54.9%    36      0        0          122    76
Spam         5,518,977  -  1.2% 10970      1     1472    5,584,421 11124
Spreaders          766  + 18.8%   229      0        0          645   200
Stormworm        2,464  -  2.5%   418      0        0        2,527   422

TOTALS       8,372,496  +  1.5% 16436     22     1810    8,247,691 16624

Here in the Northern Hemisphere, summer is approaching, kids are getting
out of school, that means it's time for script kiddies! ;)  I've always
observed that you can tell when schools get out by the burst of carding,
1337 haxx0ring, and other general maliciousness that seems to come with
it.  Totally non-scientific and just my personal observation and opinion
of course, but I can't imagine I'm the only one who's seen that, am I? :)

Anywho, nothing major change-wise in the report this week; I'm still
chasing down the data from the phatbot report, it may or may not return,
we'll see.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk3tRnsACgkQluRbRini9tgTjQCfdjWGMbYBxQnylggHV+oLM2kW
OQAAnAzXv7z+UUfMpnyosM+5KrCI+d2N
=0NtZ
-----END PGP SIGNATURE-----