"perhaps while the miscreants are either hung over or expending their spoils."

Or perhaps a massive amount of the compromised computers are in businesses that don't know how to secure their systems, which have them turned off on those days.

I guess you're either referring to what comes out after being run through a spam filter, or you're very lucky

3%?

Make that 14% according to my logs!

My few experiences of DoS attacks appeared to originate from script kiddies, who are invariably frustrated 14 year olds who lack the social skills to attend any sort of New Year's Eve celebration...

I'm truely astounded.

"according to the data, which was culled over 18 months."

Culling refers to the minimising or reduction of the amount of data to acquire a smaller set. I wonder if this verb has been used correctly here, as in the context it appears that the data was simply collected.

I suppose there may be the odd compromised *x box, but almost all of this is made possible through design desicions and features of one particular operating system family, which appear to have been either unwise in retrospect, or effective in degrading un-owned systems.