rethinking rowkey for infra_botnet