2 ms·
Resistance to that kind of simple countermeasure is exactly what distinguishes a DDoS attack from a non-distributed DoS attack. The traffic basically comes from
by 0xcde4c3db 2y ago
Resistance to that kind of simple countermeasure is exactly what distinguishes a DDoS attack from a non-distributed DoS attack. The traffic basically comes from "everywhere". Not literally every IP block and route, but widespread enough that it's difficult to separate from legitimate users without actually processing the traffic (which is what you're trying to avoid by e.g. blocking an IP range).
- hnthrowaway0328 2y agoThanks. And I assume they mostly come from friendly countries which makes it even harder to block? This is indeed very tough to resist.
- ziml77 2y agoYes. This is why it's maddening that most people don't take computer security seriously. Virus infected devices are what give these botnets their scale and wide distribution.
- pmarreck 2y agoSo compile a long list of compromised source IP's and just block those upstream?