I'm interested in how you think an attacker would find your address - at least, presuming you have a web-only [1] host on a competently-run [2] network that dro

I'm interested in how you think an attacker would find your address - at least, presuming you have a web-only [1] host on a competently-run [2] network that drops anything but requests from the proxies [3]. Of course, there are (D)DoS attacks that don't consist of sending lots of bits/packets at a host, and this does assume you're hiring a dedicated server or somesuch. Of course, they could try to sniff network traffic at one of the providers/on the backbone/..., but that's a lot harder to carry out than a basic DDoS attack. [1] E.g. don't try to receive e-mail at this host while it's being attacked; you'll need to point an MX record at it, which pretty much defeats the purpose. [2] IP spoofing will break the next defense; if the entire provider can be taken down, you have serious problems. [3] If you accept all traffic, nmap/curl will easily find the host, after which the attack resumes. For bonus points, serve up an uninteresting-looking page.