[nsp-sec] Daily Reports Summary for week ending 2012-09-24

Dave Monnier dmonnier at cymru.com
Wed Sep 26 11:55:09 EDT 2012


Hello, All.

This week saw our usual spike in open resolvers due to completing the
scans. Also some decreases in counts due to some variances in
contributed data.  As always, if others are interested in helping please
let us know.


                      CURRENT WEEK'S DATA               PREVIOUS WEEK

report       UniqueIPs   Change  ASNs  bogon  noroute    UniqueIPs  ASNs
------     ------------------------------------------  -----------------
Beagle           2,748  + 78.8%   252      0        0        1,537   220
Bots           980,145  -  4.3%  9048      0      145    1,023,862  9551
Bruteforce         522  - 16.9%   280      0        0          628   283
Ddosreport         959  + 39.0%   372      1        1          690   262
Fastflux             0    NaN       0      0        0            0     0
Flowbots           399  - 33.2%   124     18       18          597   164
Malwareurl      12,189  -  1.3%  2086      1        1       12,350  2129
Nachi              923  +  6.3%   215      3        4          868   206
Openresolvers  3,269,648  +378.1% 19967      0     1141      683,883 10754
Phishing         2,061  -  2.4%   635      2        2        2,111   621
Proxy           15,728  + 19.8%  1410      0        4       13,131  1401
Routers             83  -  3.5%    41      0        0           86    41
Scanners        22,624  +  0.1%  2841      2        7       22,598  2763
Slammer             68  - 45.6%    39      0        0          125    59
Spam         3,460,410  - 29.6% 12406      0      674    4,914,102 13421
Spreaders            0    NaN       0      0        0            0     0
Stormworm          798  + 14.8%   214      0        0          695   220

TOTALS       7,669,609  + 16.6% 22562     25     1991    6,575,995 17784

For information regarding these projects please visit our website at:

	<https://www.cymru.com/nsp-sec/ASN-Alert/>
	<https://www.cymru.com/nsp-sec/dailyreports/>

Please note that the nsp-security section on our website is
password-protected.  Your nsp-sec mailing list username and password
can be used to access these pages.  If you have problems logging in
please verify your account information at:

	<http://www.nsp-security.org/>

Team Cymru couldn't provide our services without the generous
donations and support from a great community of folks.  We always
welcome feedback regarding the daily reports or any of our services.
Technical questions regarding reports, data, false positive reports,
etc, can be sent to support at cymru.com, more general communications to
team-cymru at cymru.com.

Thank you for your continued support!

Cheers,
-Dave
-- 
Dave Monnier
Team Cymru
https://www.team-cymru.org/
PGP: https://www.cymru.com/dmonnier/0x7C1AAE55_pub.asc


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/mailman/private/nsp-security/attachments/20120926/4e87f46e/attachment-0001.sig>


More information about the nsp-security mailing list