News for hackers. Stuff that matters.

A comment on DDoS Botnet Aisuru Blankets US ISPs in Record DDoS. Parent comment

Re:DDoS Botnet Aisuru Blankets US ISPs in Record DDoS by bsder on Tuesday October 14, 2025 @02:25AM (#45576861)
This DDoS is claimed to be the result of <300,000 compromised routers.

That would be really easy to block if we were on IPv6. And it would be pretty easy to propagate upstream. And you could probabilistically unblock in an automated way and see if a node was still compromised. etc.

[ Parent | on HN ]
Re:DDoS Botnet Aisuru Blankets US ISPs in Record DDoS by josteink on Tuesday October 14, 2025 @08:28AM (#45579240)
> That would be really easy to block -- if we were on IPv6.

Make that: If the service being attacked was on IPv6-only, and the attacker had no way to fall back to IPv4.

As long as we are dual-stack and IPv6 is optional, no attacker is going to be stupid enough to select the stack which has the highest probability of being defeated. Don't be naive.

[ Parent | on HN ]
Re:DDoS Botnet Aisuru Blankets US ISPs in Record DDoS by div72 on Tuesday October 14, 2025 @09:55AM (#45580092)
It'd be far more acceptable to block the CG-NAT IPv4 addresses if you knew that the other non-compromised hosts could utilize their own IPv6 addresses to connect to your service.
[ Parent | on HN ]