[nsp-sec] Daily Reports Summary for week ending 2012-09-10

[Dave Monnier]

Hello all.

With Tim's parting, I'll be handling the weekly reporting for a bit.
I'll do my best to be as insightful and entertaining =)

This week we've seen significant increases in a few categories. The flow
increase has been due to a few new partners sharing their flows with us
for analysis and inclusion.  If you're interested in doing the same,
drop me a line!

                       CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
------     ------------------------------------------  -----------------
Beagle           2,934  -  0.7%   261      0        0        2,954   267
Bots         1,161,808  + 69.6%  9648      0      410      684,949  7923
Bruteforce         974  + 25.8%   342      0        0          774   287
Ddosreport         704  +  4.8%   298      2        2          672   301
Fastflux             0    NaN       0      0        0            0     0
Flowbots           781  +131.1%   144     14       14          338   101
Malwareurl      15,033  -  1.9%  2317      1        2       15,318  2267
Nachi              901  +  0.1%   208      3        4          900   211
Openresolvers    685,212  -  0.5% 10754      0       34      688,362 10779
Phishing         1,981  - 15.9%   606      3        3        2,355   669
Proxy           12,787  + 23.0%  1289      0        4       10,399  1322
Routers             96  +  9.1%    43      0        1           88    49
Scanners        24,211  - 26.3%  2877      3        6       32,866  3194
Slammer            117  - 31.2%    64      0        0          170    77
Spam         4,509,316  + 72.7% 13127      1     1819    2,611,654 11812
Spreaders            0    NaN       0      0        0            0     0
Stormworm          759  - 10.6%   196      0        0          849   229

TOTALS       6,310,848  + 57.5% 17678     25     2293    4,005,834 16682

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Cheers,
-Dave

-- 
Dave Monnier
Team Cymru
https://www.team-cymru.org/
PGP: https://www.cymru.com/dmonnier/0x7C1AAE55_pub.asc


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20120910/0e69d60f/attachment-0001.sig>