[nsp-sec] Daily Reports Summary for week ending 2011-11-14

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 14 NOV 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,255  + 11.7%   238      0        0        2,019   229
Bots         2,542,242  +331.6% 10913    943     1500      589,088  7542
Bruteforce         594  +  5.3%   310      0        0          564   307
Ddosreport         884  + 14.5%   373      2        2          772   353
Fastflux             0    NaN       0      0        0            0     0
Flowbots           316  - 29.5%    89      1        1          448    95
Malwareurl       8,206  - 32.8%  1570      1        1       12,219  1984
Nachi            1,565  -  2.7%   307     11       11        1,608   306
Openresolvers  696,577  -  4.1% 10428      0       39      726,251 10520
Phishing         1,462  + 10.5%   494      2        2        1,323   465
Proxy              420  - 12.5%   220      0        0          480   244
Routers            176  - 26.7%    52      0        0          240    54
Scanners        18,686  +  4.3%  3079      0        2       17,924  3056
Slammer            119  +  9.2%    66      1        1          109    58
Spam         5,139,223  + 27.8% 11275      0     2244    4,021,572 10868
Spreaders          572  + 18.7%   184      0       13          482   195
Stormworm        1,265  - 11.7%   310      0        0        1,432   328

TOTALS       8,249,959  + 55.1% 16850    958     3807    5,318,960 15638

This week's jump in bots is related to the well-publicized "Operation
Ghost Click" take-down, which translates into entries with "mwtype
DNSChanger" in the bots category.  We expect these to hopefully trail
down as folks get systems cleaned up!  If you're not already receiving
Daily Reports, check out the information below to learn more and sign up!

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, etc, can be sent to
support at cymru.com, more general communications to team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk7BW4QACgkQluRbRini9tiCdQCbBvxpKORKVX+5Pnm+nhbHk8iN
83AAniMT2KMnODfhxwV8RnAfzL46txZZ
=remQ
-----END PGP SIGNATURE-----