[nsp-sec] Daily Reports Summary for week ending 2012-03-26

[Tim Wilde]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings everyone!

Immediately below you will find the weekly summary of Daily Reports /
ASN Alerts submissions for the week ending 26 MAR 2012.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
- ------     ------------------------------------------  -----------------
Beagle           2,126  +  2.2%   214      0        0        2,080   211
Bots         1,994,972  +  7.7% 10272   1325     1762    1,851,863  9977
Bruteforce         463  - 11.5%   255      0        0          523   274
Ddosreport       1,031  + 14.9%   393      2        2          897   356
Fastflux             0    NaN       0      0        0            0     0
Flowbots         2,195 +1238.4%   510      5        5          164    48
Malwareurl      10,073  -  2.9%  1822      1        1       10,376  1843
Nachi            1,272  -  5.0%   268      4        5        1,339   286
Openresolver 3,542,329  +446.4% 19755      0      182      648,360 10467
Phishing         1,579  - 10.0%   507      2        2        1,754   546
Proxy              375  - 40.7%   214      0        0          632   327
Routers            251  +  7.7%    53      0        0          233    61
Scanners         9,019  - 11.4%  1989      5        8       10,185  2153
Slammer            105  +  6.1%    66      0        0           99    62
Spam         5,695,248  -  2.3% 12781      0     1311    5,827,016 12744
Spreaders            0    NaN       0      0        0            0     0
Stormworm        1,033  -  3.2%   242      0        0        1,067   252

TOTALS      11,103,644  + 35.0% 22370   1338     3265    8,225,299 17148

This week is the periodic open resolver probing for the month, hence
the huge increase there.  Yay for open resolvers!  Also looks like
something might have gotten unstuck somewhere in the flowbots
category, I'm not 100% sure what's up there, but I won't complain as
long as I don't get any false positive reports. :)

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Regards,
Tim Wilde

- -- 
Tim Wilde, Software Engineer, Team Cymru, Inc.
twilde at cymru.com | +1-847-378-3333 | http://www.team-cymru.org/
-----BEGIN PGP SIGNATURE-----
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=UHW/
-----END PGP SIGNATURE-----