Using Dynamic IP Restrictions protection against denial of service and brute force attacks, DDoS on Content Management Systems (CMS)

DDoS attacks and its multitude of tiny packets, in order to be effective, should be concentrated on one address even though the onslaught itself comes from varying sources.

Basically, multiple IP addresses are ganging up on one IP address to ensure that its resources are sapped and it's rendered unusable.

Then again, it's important to remember that this only works in a short amount of time and particularly tenacious DDoS attackers will merely attempt to search for your new IP and go forth in attacking it.

A dynamic IP, nevertheless, is a great method of evading DDoS attacks as long as they're concentrated on your IP address and nothing else.

Steps to follow with Windows Server 2019

1. Install Dynamic IP Restrictions

Enter search box [Server Manager]

Enter [Add roles and features]

Check a box [IP and Domain Ristrictions] and click Next install it.

2. Set up Dynamic IP Restrictions

Enter Edit Dynamic Restriction Settings

Enter parameters on Dynamic IP Restriction Settings and select OK

Note: 
When setting low query count. We must separate static files such as js, css, 
images into subdomains to avoid image and interface errors