1. A method for use in a remote intelligence gathering system operable to provide intelligence to at least one network manager for protecting at least one asset from becoming part of at least one botnet, said intelligence comprising information relating to potential security threats to said at least one asset, said remote intelligence gathering system comprising at least one communication unit configured to receive data queries from said at least one network manager and to send said intelligence in response to said data queries; the at least one asset having at least one client address and the botnet being controlled by at least one criminal server having at least one bot address, the botnet operable to communicate data between said at least one client address and said at least one bot address, the method comprising: sending, by said network manager, at least one query relating to characteristics of said at least one asset; receiving, by said network manager, said intelligence pertaining to the characteristics of said at least one asset; defining automatically, by said network manager, said at least one asset which requires botnet protection, said at least one asset having at least one asset address; processing traffic, by said network manager, sent to and from said at least one asset address and said at least one bot address; identifying, by said network manager, at least one bot attack pertaining to said at least one asset; and generating, by said network manager, an indication associated with said at least one bot attack.