Over the past two years, the average network of bots, or compromised PCs commandeered by remote attackers, has dropped from more than 100,000 to an average of 20,000, Mark Sunner, MessageLabs’s chief technology officer, said during Tuesday’s annual Security Roundtable Webcast.