<<<
NEWS FROM THE LAB - Friday, January 23, 2009
>>>
 

 
Where is Downadup? Posted by Sean @ 17:34 GMT

Downadup infections appear to have peaked during the week.

As time passes, the number of estimated Downadup infections becomes more problematic to calculate as we are monitoring a varying number of domains. Re-infections may also be inflating the count. In any case, today seems better than the day before and we think that growth of Downadup has been curbed. Disinfection of the worm remains a challenge.

So let's look at Thursday's IP count, where are the infected computers?

Our sinkhole logged just over one million unique IP addresses yesterday. This is compared to 350,000 last Friday. Remember, there may be any number of computers sitting behind a single IP address.

China, Russia, and Brazil have the highest IP count. Combined, they account for nearly 41 percent of the total.

Only a bit over 1 percent came from the United States…

Here's the breakdown by country:

Number of IPsRegistered Country of the IP
1388Sweden
1394Peru
1555Yemen
1669Canada
1723Hong Kong
1803Czech Republic
1906Sri Lanka
2178Croatia
2179Austria
2249Moldova
2486Lithuania
2839Ecuador
2971Slovakia
3127Bosnia and Herzegovina
3269Jordan
3451Vietnam
4310Portugal
4423Saudi Arabia
4666Spain
4895Japan
5572Iran
5763Republic of Macedonia
6758Poland
6822Hungary
6900Bulgaria
7857United Kingdom
7973Pakistan
8088France
8328Turkey
10249Venezuela
10527Mexico
10683.EU
11779United States (1.17%)
12629Kazakhstan
14785Colombia
15697Germany
16154Taiwan
16924Philippines
17285Malaysia
17312Thailand
17322Chile
21263Indonesia
36070Argentina
39156Romania
39712Italy
39731South Korea
63939Ukraine
64035India
120197Brazil (11.9%)
139934Russia (13.9%)
152016China (15.1%)
1005941