3 ms·
Botnets usually, sometimes amplification attacks against NTP or DNS, although the Chinese government’s Great Firewall also has offensive capabilities known as t
by fmajid 2y ago
Botnets usually, sometimes amplification attacks against NTP or DNS, although the Chinese government’s Great Firewall also has offensive capabilities known as the Great Cannon, although they are generally used against GitHub because it hosts censorship-circumvention software like VPNs.
- markus_zhang 2y agoAre botnets usually hosted on personal computers or servers or IoT? I'm thinking maybe archive.org can block a whole range of IPs if needed.
- 0xcde4c3db 2y agoResistance to that kind of simple countermeasure is exactly what distinguishes a DDoS attack from a non-distributed DoS attack. The traffic basically comes from "everywhere". Not literally every IP block and route, but widespread enough that it's difficult to separate from legitimate users without actually processing the traffic (which is what you're trying to avoid by e.g. blocking an IP range).
- hnthrowaway0328 2y agoThanks. And I assume they mostly come from friendly countries which makes it even harder to block? This is indeed very tough to resist.
- ziml77 2y agoYes. This is why it's maddening that most people don't take computer security seriously. Virus infected devices are what give these botnets their scale and wide distribution.
- pmarreck 2y agoSo compile a long list of compromised source IP's and just block those upstream?
- fmajid 2y agoAll of the above, and also increasingly IoT devices, specially printers and routers. There is no simple way to block them.