News for hackers. Stuff that matters.

A comment on Mēris botnet, climbing to the record.

Re:Mēris botnet, climbing to the record by swiftcoder on Thursday September 09, 2021 @09:03AM (#28469190)
In other words, this entire botnet can perform the work of... a few dozen decent size AWS instances?

We used to push ~million request per second from each m4.10xl instance when running load tests.

[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by yabones on Thursday September 09, 2021 @09:06AM (#28469211)
What makes it dangerous is that those requests aren't coming from a single source - it's a distributed denial of service attack. Anybody can push huge throughput from an XL cloud server with good networking, but it's just as easy to block that IP. Blackholing thousands of nodes is much more difficult.
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by menmob on Thursday September 09, 2021 @09:40AM (#28469552)
Legitimate IPs, at that. These are networks that are not hostile 99% of the time.
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by junon on Thursday September 09, 2021 @09:41AM (#28469559)
Yes and to mitigate your puny attack I need to block a few dozen IPs.

A botnet is probably coming from hundreds, if not thousands of IPs, sprinkled in with normal user requests and often with similar frequency.

[ Parent | on HN ]