We're getting ddosed by an 58k botnet, what can i do with the list of ips.

Hello,
Our gameserver has been under repeated ddos attack (around 16 attacks ) between 2 and 6 a day.

I've had to learned the basics of ddos security in less than a week.

So i ended up doing a script that records 1 packet every 100 only during high bandwidth event in a pcap file and analyzed the pcap in wireshark to identify the attack vectors

The attack was multifactor

1) Dns amplification attack , they were contacting legit dns …

amplification attack attacks attack vectors bandwidth basics botnet cybersecurity ddos ddos attack ddos security dns doing event hello high identify ips legit list multifactor packet pcap script security servers spoofing under wireshark