Shadowserver.org has provided a Hilbert Map (with video) of all the infections from Jan 2012 to March 2012.This is a useful tool to spot “hot spots” based on IPv4 prefix ranges.

More information on Hilbert Maps can be found at:

  • http://www.caida.org/research/traffic-analysis/arin-heatmaps/
  • http://www.team-cymru.org/Monitoring/Malevolence/maps.html