I always look to firewalls for abnormal activity

I suspect you aren't the type of person who gets infected by a botnet.