Hacker News Reader

Not from China but yes, usually they are very quick to respond, it's crucial for most ISPs to maintain a good reputation.

If it's one ISP you don't work with them, you simply add a `drop` rule for their IP range.

I think this article is misleading; there's nothing terribly "distributed" about the DoS.

Yep - customers will start getting pretty shirty if websites become unavailable only on their ISP, as their ISP fails to respond to abuse reports.

whois on the ip-address tells their range, also their asn with which you can find and block all their nets if necessary. but block via firewall, not webserver

Well, no reply from the ISP so far.

Have you tried blocking only endpoint for the IPs in question?

Happy to help discussing mitigation techniques. Long time user of ArXiv. Email in Bio.

Sorry qmarchi -- I don't know how to get your contact information here. But it shouldn't be too hard to find mine, if you try.

Click the post username.