3 ms·

I would like to see an estimate in how much a person paid in the black market to buy access to the botnets that did this. $5? $50? $100? What is the going rate

by belorn 6y ago

I would like to see an estimate in how much a person paid in the black market to buy access to the botnets that did this. $5? $50? $100? What is the going rate for 110k requests per seconds?

5040 6y ago
https://krebsonsecurity.com/2015/08/stress-testing-the-booter-services-financially/ https://krebsonsecurity.com/2015/08/stress-testing-the-boote... This article is 5 years old now, but may give a rough idea. Like other booter services, Asylum, Lizard Stresser and VDO rely on a subscription model, where customers or subscribers can launch an unlimited number of attacks that have a duration typically ranging from 30 seconds to 1-3 hours and are limited to 1-4 concurrent attacks depending on the tier of subscription purchased. The price for a subscription normally ranges from $10-$300 USD per a month depending on the duration and number of concurrent attacks provided.
bArray 6y ago
I'm not sure, but it doesn't sound like much shared among all of them (assuming a good number have popped up). I think many people here regularly deal with those sorts of numbers in legitimate traffic. > One single website belonging to an unnamed advocacy group > dealt with 20,000 requests a second. 20k requests per second doesn't sound crazy to re-produce. Assuming you only need a 100 byte TCP packet to make a request [1], that's 800 bits. Bump up to 2000 bits assuming some overheads from somewhere, a 100Mb/s internet connection could send 50k requests a second. Seems like a single person with a decent internet connection could flood them with 20k request per second. If the attacker picks a page that requests database access or a large payload return, you could easily sink a small web server. [1] https://stackoverflow.com/questions/14526139/what-is-the-minimum-packet-size-for-tcp-over-ipv4 https://stackoverflow.com/questions/14526139/what-is-the-min...

by belorn 6y ago

I would like to see an estimate in how much a person paid in the black market to buy access to the botnets that did this. $5? $50? $100? What is the going rate for 110k requests per seconds?

5040 6y ago

https://krebsonsecurity.com/2015/08/stress-testing-the-booter-services-financially/ https://krebsonsecurity.com/2015/08/stress-testing-the-boote... This article is 5 years old now, but may give a rough idea. Like other booter services, Asylum, Lizard Stresser and VDO rely on a subscription model, where customers or subscribers can launch an unlimited number of attacks that have a duration typically ranging from 30 seconds to 1-3 hours and are limited to 1-4 concurrent attacks depending on the tier of subscription purchased. The price for a subscription normally ranges from $10-$300 USD per a month depending on the duration and number of concurrent attacks provided.

bArray 6y ago

I'm not sure, but it doesn't sound like much shared among all of them (assuming a good number have popped up). I think many people here regularly deal with those sorts of numbers in legitimate traffic. > One single website belonging to an unnamed advocacy group > dealt with 20,000 requests a second. 20k requests per second doesn't sound crazy to re-produce. Assuming you only need a 100 byte TCP packet to make a request [1], that's 800 bits. Bump up to 2000 bits assuming some overheads from somewhere, a 100Mb/s internet connection could send 50k requests a second. Seems like a single person with a decent internet connection could flood them with 20k request per second. If the attacker picks a page that requests database access or a large payload return, you could easily sink a small web server. [1] https://stackoverflow.com/questions/14526139/what-is-the-minimum-packet-size-for-tcp-over-ipv4 https://stackoverflow.com/questions/14526139/what-is-the-min...