Yes, that`s exactly what I mean. And it`s not necessary botnets (though it may be one of reasons), real new users are getting banned too. As I understand it`s aboun dynamic IPs that most providers use in Eastern Europe, for example. Whole node get marked as evil one if even one user uses TOR or trying to make some troubles.
The evil IP works by giving a score to IP addresses. Every time an account is banned the IP address used gains some evil points and all addresses near that address also get a smaller number of points added. Once the score gets to a certain value a fee is required, the higher the score the higher the fee.
I'm only guessing about how much of this is due to botnets but they are prevalent in Eastern Europe (Russia and Ukraine in particular) so I think they'll account for a large part of this and also will have affected innocent users of the same ISPs.