Downadup infections appear to have peaked during the week.
As time passes, the number of estimated Downadup infections becomes more problematic to calculate as we are monitoring a varying number of domains. Re-infections may also be inflating the count. In any case, today seems better than the day before and we think that growth of Downadup has been curbed. Disinfection of the worm remains a challenge.
So let's look at Thursday's IP count, where are the infected computers?
Our sinkhole logged just over one million unique IP addresses yesterday. This is compared to 350,000 last Friday. Remember, there may be any number of computers sitting behind a single IP address.
China, Russia, and Brazil have the highest IP count. Combined, they account for nearly 41 percent of the total.
Only a bit over 1 percent came from the United States…