[nsp-sec] Daily Reports Summary for week ending 2012-10-01

Dave Monnier dmonnier at cymru.com
Mon Oct 1 04:21:05 EDT 2012


Happy October, Team!

This week has an expected reduction in open resolvers. Otherwise it's
largely variations as normal.  Slightly fewer bots detected but I
suspect that to be fairly normal over the curve.

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
------     ------------------------------------------  -----------------
Beagle           2,150  - 21.8%   240      0        0        2,748   252
Bots           759,495  - 22.5%  8566      0      234      980,145  9048
Bruteforce         542  +  3.8%   268      0        0          522   280
Ddosreport         994  +  3.6%   426      1        1          959   372
Fastflux             0    NaN       0      0        0            0     0
Flowbots           609  + 52.6%   143      9        9          399   124
Malwareurl      11,170  -  8.4%  2007      1        3       12,189  2086
Nachi              948  +  2.7%   207      1        2          923   215
Openresolvers    676,213  - 79.3% 10711      0       29    3,269,648 19967
Phishing         2,123  +  3.0%   634      3        3        2,061   635
Proxy           14,215  -  9.6%  1354      0       11       15,728  1410
Routers            102  + 22.9%    51      0        0           83    41
Scanners        23,408  +  3.5%  2925      5       12       22,624  2841
Slammer             86  + 26.5%    47      0        0           68    39
Spam         3,543,548  +  2.4% 12664      0      827    3,460,410 12406
Spreaders            0    NaN       0      0        0            0     0
Stormworm          578  - 27.6%   184      0        0          798   214

TOTALS       4,969,395  - 35.2% 17249     18     1126    7,669,609 22562

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Cheers,
-Dave

-- 
Dave Monnier
Team Cymru
https://www.team-cymru.org/
PGP: https://www.cymru.com/dmonnier/0x7C1AAE55_pub.asc


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20121001/fc8424f4/attachment-0001.sig>


More information about the nsp-security mailing list