[nsp-sec] Daily Reports Summary for week ending 2012-04-23

Tim Wilde twilde at cymru.com
Mon Apr 23 11:03:35 EDT 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning all!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 23 APR 2012.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,547  -  1.4%   219      0        0        2,582   236
Bots         2,582,583  + 46.2% 12132   2212     2738    1,766,112  9693
Bruteforce         556  + 34.3%   286      0        0          414   245
Ddosreport         213  - 69.5%   128      1        1          698   311
Fastflux             0    NaN       0      0        0            0     0
Flowbots           456  - 21.8%   101      8        9          583   110
Malwareurl      11,186  -  2.2%  1916      1        1       11,442  1936
Nachi            1,241  +  3.6%   251      5        5        1,198   253
Openresolver 3,615,197  +377.4% 19890      0      131      757,191 10926
Phishing         1,967  -  0.9%   569      3        3        1,984   584
Proxy              308  - 17.6%   162      0        0          374   195
Routers            148  + 12.1%    59      0        0          132    43
Scanners        16,025  + 14.1%  2717      7       11       14,039  2516
Slammer             23  +  4.5%    11      0        0           22    11
Spam         6,344,953  + 17.9% 12922      0     2680    5,383,287 12697
Spreaders            0    NaN       0      0        0            0     0
Stormworm        1,068  -  9.6%   265      0        0        1,182   268

TOTALS      12,413,000  + 58.9% 23294   2230     5567    7,814,028 17290

This week was an open resolver probe week.  We also added a couple
more sources to the bots category last week, which are responsible for
the uptick there.  Thanks to Dave Monnier for sending the report in my
absence last week!

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
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=F68R
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list