[nsp-sec] Daily Reports Summary for week ending 2011-09-26

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 26 SEP 2011.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,112  + lots%   236      0        0            2     2
Bots         1,390,763  + 59.1% 10593      0      280      874,094  9017
Bruteforce         365  - 10.3%   219      0        0          407   260
Ddosreport         992  - 25.8%   398      4        9        1,337   524
Fastflux             0    NaN       0      0        0            0     0
Flowbots           424  + 51.4%    67      0        0          280    68
Malwareurl      12,037  -  8.9%  1985      1        3       13,212  2033
Nachi            1,651  +  3.3%   310     12       14        1,598   311
Openresolver 1,757,251  +142.2% 15511      0      138      725,620 10436
Phishing         1,752  +  5.7%   547      4        4        1,657   503
Proxy              216  - 19.4%   135      0        0          268   163
Routers            228  - 11.3%    50      0        0          257    57
Scanners        24,484  -  1.8%  3190      4        9       24,934  3140
Slammer            171  +402.9%   106      1        1           34    22
Spam         4,859,409  -  9.1% 10590      1     1382    5,346,449 10582
Spreaders          307  - 56.1%   139      0        0          699   221
Stormworm        1,474  -  1.9%   321      0        0        1,503   333

TOTALS       7,949,076  + 15.0% 19129     24     1831    6,910,536 15986

Our friendly neighborhood Beagle data is back, yay!  Big jump in the
bots category, though it had a big drop last week, so that may not
mean a whole lot.  Open resolver increase is likely a regular
full-Internet open resolver probe (though it's smaller than those
usually are, possibly due to some network issues we had at one site
last week), so overall not a huge change this week.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Please feel free to send questions, comments or concerns to us at
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Senior Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----

iEYEARECAAYFAk6A5lcACgkQluRbRini9tg4xACfa2f1V6I4RWChPhtwgQOCeZWF
m6wAn38J+E8AZ0J4x+Ol+XHVnt3LWkXY
=N05K
-----END PGP SIGNATURE-----