http://blogs.msdn.com/tzink/archive/2008/05/15/sample-stats-on-botnets.aspxA few months ago there was a research presentation presented on computer security.&#160; It touched upon botnets and the presenter gave some data.&#160; Below are some summary results based on a 9-day down-sampled spam trace from Hotmail. There were 294enCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.msdn.com/tzink/archive/2008/05/15/sample-stats-on-botnets.aspx#8509210Thu, 15 May 2008 23:33:45 GMT91d46819-8472-40ad-a661-2c78acb4018c:8509210Matt Sergeant<p>How are you grouping botnets together? If it's just by similar subjects this method doesn't work.</p> http://blogs.msdn.com/tzink/archive/2008/05/15/sample-stats-on-botnets.aspx#8511260Fri, 16 May 2008 08:24:41 GMT91d46819-8472-40ad-a661-2c78acb4018c:8511260David Cawley<p>I'd also be interested in hearing more about how the researcher correlated an IP address with a specific bot.</p> <p>If this is based solely on grouping similar messages together it's more an analysis of spam campaigns rather than botnets.</p>