undefined | Better HN

0 pointsxvolter13y ago0 comments

The easiest would be to modify your web server to reject requests to that URL. Therefore it no longer causes annoyances. However, if that URL is still being used, your best shot is to reject on a per-IP basis.

You cannot DDOS any server, a DDOS attack works primary on web servers, and the server it's coming from isn't likely to have a web server that matters, since it just redirects DDOSing would be nearly impossible to accomplish without a huge effort.

What may be easier is getting the website shutdown, if you trace the host provider or ISP you can file a claim and possibly get their connection or hosting turned off.

0 comments

bmelton13y ago

I don't mean to seem critical, but

1) it would be slightly better to DROP requests to the URL than to reject them and

2) you can DDOS plenty of other servers besides web servers. You're right of course that there likely isn't a server attached to the IP address (though you could likely tie up at least the one thread with programmatic recursion / redirects), but DDOSing isn't particular to web servers at all.

xvolterOP13y ago

No, but DDOSing does require an open listener - the most common and easiest is a web server. If whoever is trying to use some old Wordpress hacks is smart, however likely that is, he/she would not have a ton of ports open.

You can also drop requests if per-IP if you are setup on a web provider that has a hardware firewall, but I do not know your setup, so my recommendation was one that would work anywhere.

j / k navigate · click thread line to collapse