Today I spent a bit attacking my servers and getting the IPs used by free stresser sites, if anyone knows of stresser sites I can also block PM me the link. I will eventually release all the ips I have and a video of the difference of when the ips are blocked and when they are not.
Currently I have 316 ips collected. This reduces the load on the server majorly and makes it so much easier for your host to mitigate the attack. What I found with OVH, after blocking a stressers IPs the mitigation was much faster and no network congestion at all.
You can use ufw to block a list of a IPs which is the easiest way.
Code:
while read line; do sudo ufw deny from $line; done < list-of-ips.txt
*Not the way I done it*
You can get the ips by logging the incoming ips to all ports, but you have to do on a server which you are not using and use a port which nothing else is.