[nsp-sec] Daily Reports Summary for week ending 2012-06-11

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Good morning everyone!

I got several e-mails in response to my question last week about these
reports, indicating that folks do find them useful, so I'll keep on
plugging away with them for you guys.  One bit of feedback was that my
descriptive paragraph was still a bit buried despite my change in
format a while ago, so I'm going to write my commentary way up here at
the top from now on, lucky you!

Welcome to the weekly summary of Daily Reports / ASN Alerts
submissions for the week ending 11 JUN 2012!  This week doesn't show
any huge changes; well, no real ones, anyway.  Slammer looks like a
huge change by percentage but it's really just a small blip in
reality, we probably will be retiring that category at some point in
the future, though I always hate to retire a category. :)

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,884  + 35.5%   231      0        0        2,129   200
Bots         1,701,414  + 34.5%  9513    822     1107    1,265,225  9117
Bruteforce         404  - 43.5%   224      0        0          715   317
Ddosreport         639  +  0.2%   284      2        2          638   263
Fastflux             0    NaN       0      0        0            0     0
Flowbots           328  - 26.5%    38      4        4          446    80
Malwareurl      11,715  - 11.4%  1967      1        2       13,229  2096
Nachi            1,079  + 10.1%   237      4        5          980   226
Openresolvers  724,023  +  2.6% 11046      0       34      705,336 10756
Phishing         1,931  -  1.4%   618      1        2        1,959   603
Proxy              152  - 39.9%    93      0        0          253   140
Routers            101  -  1.9%    53      0        0          103    56
Scanners        18,851  - 13.9%  2974      3       10       21,887  3201
Slammer             81 +1520.0%    53      0        0            5     6
Spam         5,781,092  + 10.7% 12968      0     2604    5,222,282 12830
Spreaders            0    NaN       0      0        0            0     0
Stormworm          923  -  2.2%   257      0        0          944   252

TOTALS       8,116,077  + 13.6% 17392    834     3765    7,142,077 17136

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
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=Fqr3
-----END PGP SIGNATURE-----