[nsp-sec] Daily Reports Summary for week ending 2012-06-05

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Howdy #3, all!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 05 JUN 2012.

But first, a message from our sponsor.  How important to you fine
folks is the little blurb I try to write after the stats, describing
any oddities for the week?  I realize that of late it's been somewhat
monotonous - either "nothing to report" or "it was an open resolver
reprobe week", but, even for that, does anyone actually read it?  Or
could I have a script send out this e-mail instead of crafting it
manually like some n00b who doesn't know Perl?  Thoughts? :)

Now back to your regularly scheduled summary data...

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,129  +  0.3%   200      0        1        2,122   209
Bots         1,265,225  - 23.1%  9117    822     1121    1,644,689  9397
Bruteforce         715  + 57.8%   317      0        0          453   259
Ddosreport         638  -  3.5%   263      1        2          661   294
Fastflux             0    NaN       0      0        0            0     0
Flowbots           446  - 23.5%    80      2        2          583   157
Malwareurl      13,229  + 25.5%  2096      2        2       10,543  1881
Nachi              980  -  2.7%   226      3        3        1,007   237
Openresolvers  705,336  - 80.7% 10756      0       64    3,647,511 20024
Phishing         1,959  +  5.4%   603      2        2        1,858   559
Proxy              253  - 22.9%   140      0        0          328   181
Routers            103  + 56.1%    56      0        0           66    38
Scanners        21,887  -  2.0%  3201      3        8       22,327  3226
Slammer              5  -  0.0%     6      0        0            5     4
Spam         5,222,282  +  1.9% 12830      0      875    5,126,150 12672
Spreaders            0    NaN       0      0        0            0     0
Stormworm          944  + 18.0%   252      0        0          800   235

TOTALS       7,142,077  - 30.8% 17136    831     2074   10,325,811 22501

Previous week was an open resolver week, everything else seems
sane-ish.  I think bots was low due to a problem with our DNSChanger
reporting code, but I believe that has since been fixed so you should
be getting hit with those all over again.

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
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=dC9r
-----END PGP SIGNATURE-----