Network-based botnet detection