Mēris botnet, climbing to the record
blog.qrator.net
Mēris botnet, climbing to the record
1–10 of 61 posts
Re: Mēris botnet, climbing to the record
#2Can someone please explain-like-I'm-not-versed-in-botnets?
Re: Mēris botnet, climbing to the record
#3Can someone please explain-like-I'm-not-versed-in-botnets?
Yes. That is what the article is? RPS is requests per second, 20m RPS is apparently a lot, and there's a new botnet that does it.
Re: Mēris botnet, climbing to the record
#4In other words, this entire botnet can perform the work of... a few dozen decent size AWS instances?
We used to push ~million request per second from each m4.10xl instance when running load tests.
Re: Mēris botnet, climbing to the record
#5In other words, this entire botnet can perform the work of... a few dozen decent size AWS instances? We used to push ~million request per second from each m4.10xl instance when running load tests.
What makes it dangerous is that those requests aren't coming from a single source - it's a distributed denial of service attack. Anybody can push huge throughput from an XL cloud server with good networking, but it's just as easy to block that IP. Blackholing thousands of nodes is much more difficult.
Re: Mēris botnet, climbing to the record
#6Can someone please explain-like-I'm-not-versed-in-botnets?
Yes. That is what the article is? RPS is requests per second, 20m RPS is apparently a lot, and there's a new botnet that does it.
One could surmise as much, but thanks. I'm also looking for some of the 'why' perhaps moreso than the 'what'.
Re: Mēris botnet, climbing to the record
#7"Connect to cloud by default" should be banned in any sensible network.
It's probably even more devastating that "default password by default" if exploited successfully.
A single stolen cert, or access to the device provisioning server instantly gets you "keys to the kingdom," and all of the devices online.
A default password, or a vulnerable API on the device, in contract, will still need the attacked to individually find, and hack each vulnerable device.
Re: Mēris botnet, climbing to the record
#8Earlier quoted context omitted.
Yes. That is what the article is? RPS is requests per second, 20m RPS is apparently a lot, and there's a new botnet that does it.
One could surmise as much, but thanks. I'm also looking for some of the 'why' perhaps moreso than the 'what'.
it make website no worky
Re: Mēris botnet, climbing to the record
#9Re: Mēris botnet, climbing to the record
#10Earlier quoted context omitted.
One could surmise as much, but thanks. I'm also looking for some of the 'why' perhaps moreso than the 'what'.
it make website no worky
I understand the purpose of a botnet. I was asking for an explanation of the technical details of this apparent advancement. But apparently snide comments purposely devoid of any detail is what I'm getting here now. Cheers