A botnet is a collection of compromised internet-connected devices controlled by an attacker to launch distributed denial-of-service (DDoS) attacks and other malicious activities. These networks of "zombie" computers can be used to spread malware on a large scale, making them a valuable tool for criminal hackers. A botnet's definition revolves around its ability to be remotely controlled, allowing attackers to coordinate attacks with ease. The compromised devices can include anything from personal computers to IoT devices, making botnets a significant threat to network security. The use of botnets to launch DDoS attacks can have devastating effects on a target's infrastructure, highlighting the importance of robust security measures. So, understanding the mechanics of botnets is crucial for practitioners to assess the relevance of this threat to their environment1.