So were getting ddosed for the better part of a month now, a few days into it we hired a company that serves as a proxy to filter the traffic that the ddos is coming in from.
Now the thing is that this company refuses to permanently ban the IP addressed that get blacklisted so it clears the bans every 4-8 hours and this thing just keeps going and going. Now i know its in their best interest to keep us under attack so we keep on renewing their services, however can they not permanently ban the offending IP addresses and get this thing resolved ? or are they pulling my leg ?
yeah it is distributed. Its not one ip, its more in the zone of 20,000 ip addresses that are part of the botnet. Its just wierd seeing how twitter, facebook and other larger sites have their problems solved in 30 minutes flat and here were getting attacked for almost a month straight.