drone armies C&C report - April/2005

Below is a periodic public report from the drone armies / botnets
research and mitigation mailing list.
For this report it should be noted that we base our analysis on the data
we have accumulated from various sources.

According to our incomplete analysis of information we have thus far, we
now publish our regular two reports.

We have updated our algorithms and combined our main reports into one table.

This survey reflects an overall change in Responsible Party rankings.
We have established trusted relationships with Atrivo and The Planet.
In the case of The Planet these relationships have helped to achieve a
significant reduction in C&Cs with only 1 C&C reporting as active in The
Planet's space for this survey. Atrivo also responds to reported C&Cs.
PNAP and KrCert made an incredible progress. Sagonet has also requested
C&C information but is ranked in the top 4 Responsible parties for this

The ISP's that are most often plagued with botnet C&C's (command &
control) are, by the order listed: