Comment by mrkramer

So you DDOSed their backend but they could've whitelist their IP range and blacklist all the others for incoming requests.

What you did does nothing against flexible and adaptive adversaries.