According to some embodiments, a plurality of geographically remote distribution points may be established, each distribution point being associated with a traffic cleaning or scrubbing center. Incoming traffic at each distribution point may be received and not legitimate network traffic may be detected, wherein the not legitimate network traffic may include DDOS traffic. When not legitimate network traffic is detected, the system may filter the incoming traffic via the clearing or scrubbing center at each distribution point, or across a plurality of distribution points simultaneously (thereby diluting the attack across multiple network nodes and scrubbing centers). The filtered traffic may then be transmitted from each distribution point to a customer network via an active association, wherein responses from the customer network utilize customer infrastructure to deliver the response with or without involving the clearing or scrubbing centers.