To request access this dataset you will need to login with an IMPACT account. Accounts are free. If you don't have one please register.
Data for the Witty Worm outbreak
Information useful for studying the spread of the Witty worm, as observed by
the UCSD Network Telescope over a 5-day period in Mar 2004. Data available
include IP address and hostname lists: time, duration, and country distributions:
flow files: and raw packet traces containing all observed Witty worm traffic.
Possible uses include modeling worm propagation and using real packet traces
to validate algorithms for detecting or classifying malicious traffic.
Statistics: 104GB (uncompressed) of traces containing 997 million packets,
55,909 infected IP addresses.