Block IPs from DDOS attack

Hi there,

I am experiencing DDOS attack. I have blocked many of the IPs of the attack, but I there are IPs that are sending little traffic lets say 500 requests per minute which is close to real traffic. I cannot block those through Rate Limiting Rules. I also cannot identify easily those IP addresses, because when I go to Traffic and look into the Source IPs for the past 24 hours it shows maximum the top 15 IPs. I would like to get information on more than the first 15 IPs. For example if I will be able to get a list of the first 100 or 200 with the number of requests from each IP, I can easily block them. How can I do this? Is this even possible?

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.