I'm not sure, but it doesn't sound like much shared among all of them (assuming a good number have popped up). I think many people here regularly deal with thos

I'm not sure, but it doesn't sound like much shared among all of them (assuming a good number have popped up). I think many people here regularly deal with those sorts of numbers in legitimate traffic. > One single website belonging to an unnamed advocacy group > dealt with 20,000 requests a second. 20k requests per second doesn't sound crazy to re-produce. Assuming you only need a 100 byte TCP packet to make a request [1], that's 800 bits. Bump up to 2000 bits assuming some overheads from somewhere, a 100Mb/s internet connection could send 50k requests a second. Seems like a single person with a decent internet connection could flood them with 20k request per second. If the attacker picks a page that requests database access or a large payload return, you could easily sink a small web server. [1] https://stackoverflow.com/questions/14526139/what-is-the-minimum-packet-size-for-tcp-over-ipv4 https://stackoverflow.com/questions/14526139/what-is-the-min...