Shadowserver works with national governments, network providers, enterprises, financial and academic institutions, law enforcement agencies, and others, to reveal security vulnerabilities, expose malicious activity and help remediate victims.

145 million

sinkhole connections per day

4-5 million

IP addresses sinkholed per day, across 400 different malware family variants

96 billion

UDP and 214 billion TCP IPv4 scan packets sent every day