You are reading a single comment by @Velocio and its replies. Click here to read the full conversation.
  • Put a scanner on the router, block traffic from any device of it fails scans?

  • That could be your home. How do you know that you're not pay off the botnet?

    This is the problem, it's so prevalent that to block those IP addresses is to block so many users that the effect is a negative economic DDoS on online companies and those who run their businesses online.

    No one can legally remotely deal with this, not can they be blocked. Except that this specify type of traffic (telnet and SSH) could be blocked by ISPs to prevent further compromise and to disrupt command and control. Anyone who needs that access will know how to change the port number and type around default blocks. A lot of spam was stopped when port 25 was closed, and this is the same thing.

  • Yep that may be a good and simple way to deal with it: Port blocking.

    Just was wondering if dealing with it at the isp router end may work. Instead of just accepting any iot traffic it blocks it if there is a default password etc.

    Or basic analysis to identify surges in traffic which can indicate a ddos and block.

    So rather than block the router, the router is pickier.

    Right now all traffic going out of your home is trusted by default..

  • I do not understand any of this.
    Expert
    Vote Leave

About

Avatar for Velocio @Velocio started