Shadowserver works with national governments, network providers, enterprises, financial and academic institutions, law enforcement agencies, and others, to reveal security vulnerabilities, expose malicious activity and help remediate victims.

145 million

sinkhole connections per day

3.7 billion

IPv4 addresses scanned on 148 ports each per day (1.07 billion IPv6 on 77 ports). 381 million hosts respond

848,000

Malicious domains sinkholed & blocked in a single botnet takedown operation, 2.5M over 4 years.