Conficker Charts

Conficker Population for the A and B variants

The red line is the number of unique IP addresses seen per day. The green line is the number of unique IP addresses that were first seen on that day.

Conficker Population for the C variant

In this second presentation of the C variant counts, the red line gives the daily unique IPs and the green lines gives the unique IPs per the given hour. The blue line represents the number of IPs that were first seen in that hour. The green and blue lines use the scale on the right-hand side of the graph.

Conficker Hits to TrafficConverter.Biz

This shows the number of Unique IP hits per day for the trafficconverter.biz sinkhole.

Darknet Hit Attribital to Conficker P2P

The red line is the count of unique IPs seen in the 10 minute window hitting a Conficker P2P port on the darknet. The green line is the number of IPs hitting the P2P port that haven't been seen before. The blue line is the count of unique IPs hitting port 445 and the purple line represents the count of IPs that were first seen in that 10 minute window hitting port 445.

P2P Sinkholing Chart

This chart is out of date because Vitaly changed the format of the data without telling me and I haven't spent the time to script up the new format.