[nsp-sec] Daily Reports Summary for week ending 2011-11-28

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 28 NOV 2011.  The end of
the year is nigh!

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,355  +  2.8%   245      0        0        2,291   247
Bots         2,630,406  - 10.6% 10584   1804     2346    2,940,792 11056
Bruteforce         497  -  4.6%   283      0        0          521   302
Ddosreport         235  - 57.6%   153      3        3          554   278
Fastflux             0    NaN       0      0        0            0     0
Flowbots           564  + 97.9%   119      0        2          285    78
Malwareurl      11,126  - 11.0%  1877      1        4       12,503  1996
Nachi            1,517  -  1.2%   302     13       13        1,535   308
Openresolver 2,811,855  +301.3% 18211      0       57      700,714 10345
Phishing         1,756  + 13.9%   589      3        3        1,542   528
Proxy              414  -  3.3%   250      0        0          428   225
Routers            261  - 13.9%    57      0        0          303    63
Scanners        19,569  +  2.7%  3123     13       15       19,056  3009
Slammer            279  + 17.2%   122      2        2          238   114
Spam         5,686,522  +  5.5% 11815      0     1208    5,390,772 11722
Spreaders          594  -  5.0%   196      0        0          625   186
Stormworm        1,315  -  0.2%   301      0        0        1,318   289

TOTALS      10,966,493  + 23.5% 21068   1833     3645    8,880,837 17122

Openresolver numbers were inflated by the monthly-ish rescanning of
Internet-wide open resolvers, they'll go back down to normal again
next week.  Note that bots reports may be impacted somewhat by a
reduction in Conficker data due to an upstream problem in the
Conficker sinkholing process that was detected and reported today;
hopefully that will be returning to normal soon.  Everything else
looks pretty normal overall.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk7T5IsACgkQluRbRini9tgi3wCfeAeUGgn6qaDBi6niFDiECKZ1
ZFcAn3lH/sKRLCTphwIugIiv8fi8WZOj
=raaT
-----END PGP SIGNATURE-----