Simple attacks such as SYN floods may appear with a wide range of source IP addresses, giving the appearance of a well distributed DoS . These flood attacks do not require completion of the TCP three way handshake and attempt to exhaust the destination SYN queue or the server bandwidth.