During the analysis period,
we observed commands to attack a total of 1,968 unique
URL targets. Figure 2 shows the observed lifetime of the
servers after initial discovery up to 24 days. Three C&C
servers were online for a longer time and operated over the full time span of our monitoring evaluation. The average
monitoring time of a DirtJumper C&C server in
the data set was 406.52 hours (i.e., almost 17 days).