[nsp-sec] Daily Reports Summary for week ending 2011-10-31

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good afternoon!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 31 OCT 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,090  -  1.3%   221      0        0        2,117   214
Bots           819,916  -  2.2%  8948      0      132      838,597  8982
Bruteforce         544  + 13.3%   280      0        0          480   263
Ddosreport         971  -  4.4%   409      3        3        1,016   403
Fastflux             0    NaN       0      0        0            0     0
Flowbots         1,936  + 39.4%   329      6        8        1,389   290
Malwareurl      15,274  + 45.1%  2179      2        3       10,528  1770
Nachi            1,552  -  3.3%   316     10       10        1,605   312
Openresolvers  786,164  - 67.8% 10713      0       86    2,443,101 17252
Phishing         1,487  -  9.4%   487      2        2        1,642   540
Proxy              272  -  1.1%   148      0        0          275   140
Routers            199  - 13.1%    58      0        0          229    66
Scanners        24,856  +  9.3%  3494      4        8       22,741  3397
Slammer            287  + 31.1%   107      2        3          219   111
Spam         4,260,925  - 26.4% 11169      0     2565    5,786,588 11560
Spreaders          461  +  5.3%   177      0        0          438   167
Stormworm        1,392  - 14.4%   324      0        0        1,626   313

TOTALS       5,852,590  - 35.1% 16331     25     2816    9,017,915 20040

Looks like a considerable drop in the spam category plus the expected
"not a full re-scan week" effect in Open Resolvers led to a
significant-looking decline.  I have no doubt the spammers will be
back in full force next week, though. :)

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, etc, can be sent to
support at cymru.com, more general communications to team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk6u4sAACgkQluRbRini9tg7LwCeOffWYj/Mm9iCHRgXL41PAx7O
2XkAn1FmEKWvUSkjNDnwxyLCyNIM1GzV
=uM//
-----END PGP SIGNATURE-----