> A botnet is a system.

How would you detect that these requests are coming from the same "system?"