[nsp-sec] Daily Reports Summary for week ending 2012-07-23

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings everyone!

Welcome to the weekly summary of Daily Reports / ASN Alerts
submissions for the week ending 23 JUL 2012!  It was a big ol' open
resolver scanny week this week.  Bots volume seems to have come down a
bit further than I would have expected from the removal of the
DNSChanger data, though it is bouncing back a bit, so we'll just
probably keep an eye on it.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           3,061  + 89.1%   250      0        0        1,619   224
Bots           572,020  + 11.0%  6709      0      105      515,114  6779
Bruteforce         407  +  1.0%   220      0        0          403   223
Ddosreport         783  +  6.0%   294      2        2          739   314
Fastflux             0    NaN       0      0        0            0     0
Flowbots           844  - 15.0%   150     33       34          993   184
Malwareurl      13,778  -  4.3%  2182      1        1       14,398  2245
Nachi              963  -  1.9%   226      3        3          982   226
Openresolver 3,466,375  +388.3% 20135      0      209      709,816 10827
Phishing         2,061  +  9.7%   624      4        7        1,878   603
Proxy              115  - 23.3%    85      0        0          150    79
Routers             82  -  5.7%    44      0        0           87    43
Scanners        23,030  +  3.7%  2921      2        9       22,216  2972
Slammer             75  +212.5%    53      1        1           24    19
Spam         4,758,889  + 24.8% 12967      0     3917    3,814,522 12612
Spreaders            0    NaN       0      0        0            0     0
Stormworm          857  +  9.0%   231      0        0          786   221

TOTALS       8,764,920  + 74.0% 22430     43     4282    5,036,188 16716

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
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=vuMP
-----END PGP SIGNATURE-----