Dutch law enforcement agencies have successfully disrupted a massive botnet operation involving approximately 17 million compromised devices and seized more than 200 servers that supported the criminal network.
The operation followed an extensive investigation conducted by the Dutch Police in collaboration with the National Cyber Security Centre (NCSC), the country’s cybersecurity authority.
17 Million Infected Devices Linked to Cybercrime
According to Dutch authorities, the seized infrastructure was being used to remotely control millions of compromised devices, including computers, tablets, and smartphones. These devices were allegedly leveraged to conduct various cybercriminal activities.
Botnets are networks of infected devices that cybercriminals use to perform malicious operations such as distributed denial-of-service (DDoS) attacks, proxying internet traffic, distributing malware, and cryptocurrency mining.
The NCSC stated that investigators identified at least 17 million infected devices connected to the botnet. Authorities also discovered that more than 200 servers supporting the operation were hosted within the Netherlands.
“The investigation revealed that the botnet consisted of at least 17 million infected devices and that the 200 servers used to host the infrastructure were located in the Netherlands,” the NCSC said.
Following the findings, Dutch police seized multiple servers for forensic analysis, while the hosting provider involved took the infrastructure offline due to its connection with criminal activities.
Botnet Reportedly Connected to Asocks Proxy Service
While authorities have not officially identified the botnet, local media reports suggest it may be linked to Asocks, a proxy service that markets itself as a global proxy network.
According to its website, Asocks offers access to millions of IP addresses across more than 150 locations worldwide and serves a large customer base. The platform provides residential, mobile, and corporate proxy services through subscription plans ranging from $5 to $15 per month, with discounts available for larger purchases.
Proxy services are not inherently illegal and often rely on users who voluntarily share bandwidth through dedicated applications. However, Dutch authorities indicated that many devices within this botnet may have been compromised without their owners’ knowledge or consent, raising concerns about unauthorized participation in cybercriminal operations.
At the time of publication, Asocks had not publicly responded to allegations connecting its infrastructure to the dismantled botnet.
How to Protect Your Devices from Botnet Infections
Cybersecurity experts recommend several measures to reduce the risk of devices becoming part of a botnet:
- Change default usernames and passwords on routers and connected devices.
- Use strong, unique passwords for all administrative accounts.
- Regularly install firmware and software updates.
- Disable remote administration features when they are not required.
- Monitor devices for unusual activity or unauthorized access attempts.
- Use reputable security software and network protection tools.
As cybercriminals continue to target vulnerable internet-connected devices, maintaining strong security practices remains one of the most effective defenses against botnet infections.
Final Thoughts
The takedown highlights the growing scale of global botnet operations and the importance of international cybersecurity efforts. With millions of devices potentially compromised, the operation serves as a reminder for individuals and organizations to prioritize device security and remain vigilant against emerging cyber threats.
The scale of this operation is striking—17 million infected devices shows how long large botnets can remain active before being fully disrupted. It’s also interesting that investigators were able to identify and seize more than 200 servers in the Netherlands, which highlights how important cooperation between law enforcement, cybersecurity agencies, and hosting providers is when tackling this kind of infrastructure.