[nsp-sec] Daily Reports Summary for week ending 2011-06-20

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 20 JUN 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,170  + 12.3%   256      0        0        2,823   247
Bots         1,005,821  - 37.3%  9694      0      132    1,603,501 10018
Bruteforce         152  + 24.6%   105      0        0          122    96
Ddosreport       1,472  -  8.4%   511      1        3        1,607   513
Fastflux           191  - 71.4%    69      0        0          667    99
Flowbots             0  -100.0%     0      0        0            1     1
Malwareurl      11,034  -  5.9%  1849      2        4       11,722  1847
Nachi            1,520  -  4.0%   301     15       15        1,583   322
Openresolvers  746,833  +  7.6% 10447      0       59      693,823 10149
Phishing         1,354  -  3.4%   492      2        3        1,402   532
Proxy            1,742  +  2.7%   826      2        5        1,696   803
Routers            235  + 14.1%    55      0        0          206    53
Scanners        32,645  +  0.7%  3236      2       24       32,410  3143
Slammer             21  - 38.2%    18      0        0           34    25
Spam         6,390,679  - 10.2% 12574      0     2258    7,119,286 12560
Spreaders          825  +  2.6%   272      0        0          804   297
Stormworm        2,407  -  3.3%   405      0        0        2,489   405

TOTALS       7,889,320  -  8.8% 16518     22     2496    8,649,462 16242

The Phatbot category has officially been declared dead, our data
provider is sending the data, but there's just nothing there at the
moment.  Another legacy category bites the dust. :)  The category is
still live and may still contain data, but I've removed it from
summaries going forward.

As you've probably noticed we've moved away from per-infection-type
categories and instead categorize with the mwtype in the bots category
for all new data that reflects bot activity.

Overall activity seems to be a bit down this week but I'm sure it'll be
back up again soon enough. :)

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password can
be used to access these pages.  If you have problems logging in please
verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous donations
and support from a great community of folks.  We always welcome feedback
regarding the daily reports or any of our services.  Please feel free to
send questions, comments or concerns to us at team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-630-230-5433 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk3/sZ0ACgkQluRbRini9tjuOQCfdw6VXpmmivqpQW/mOj+hikpC
PrUAnRzugzuvHBJlyHnIhduo6Vk5shhe
=jylb
-----END PGP SIGNATURE-----