Results 1 to 13 of 13

Thread: Attack on My Website

  1. #1
    Roymech
    Join Date
    Jul 2011
    Location
    Manchester UK
    Posts
    8

    Attack on My Website

    I need some help
    My hosting company has stopped my website "RoyMech.co.uk" because it is receiving massive traffic from global sources. +1000 times more than normal.
    The queries on my webpage seem to be from legitimate computers (possible infected with malware). Can anyone advise why this is occurring and what I can do about it.

  2. #2
    Do you know where the main batch of visitors are coming from? Country? IP address or range?
    HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

    Web Design eBooks - Web Design eBooks for Beginners

  3. #3
    Roymech
    Join Date
    Jul 2011
    Location
    Manchester UK
    Posts
    8

    Attack on my website

    No... I have been given a list of DNS numbers/time and in about 2minutes there are litteraly 100s of different numbers .The seem to come from all over the world. Many are the same number with different #xxxx after them.

  4. #4
    Quote Originally Posted by Roy Beardmore View Post
    Many are the same number with different #xxxx after them.
    That would indicate a IP range.

    You can look up some of them at IP-Lookup to determine what country and ISP they are from. With that information you can get a list of IPs from the ISP to deny access to your site.
    HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

    Web Design eBooks - Web Design eBooks for Beginners

  5. #5
    4x4
    Join Date
    Oct 2004
    Posts
    1,040
    Why don't you block the countries you are not interested in having visit ?

  6. #6
    Roymech
    Join Date
    Jul 2011
    Location
    Manchester UK
    Posts
    8
    Hello again thanks for the comments . I have gone through the list of DNS numbers (about 800-1000 visits/s) resulting from 10 minutes activity . They are from all over the world US ,UK ,Turkey, China, Russia.... I am at this time in the hands of my website hosting company.

    Is it possible for a server to include a switch which simply turns off access if
    the rate of visits exceeds say 5/s and then turns it back on again after 10 minutes.

  7. #7
    Have you asked your web host about throttling?

    Throttling/Disabling
    If for whatever reason your sites increased traffic causes problems for the server it may be necessary for the support department to "throttle" your site (restricting the number of simultaneous visitors or maximum throughput, etc.) or possible even disable it. This is done in fairness to the other customers on your server. Remember that you're on a shared hosting platform (hosting plans L1 - L4) and one customer cannot jeopardize the operation of the server for all of the other customers. However, we will do what we can to keep your site up as best as we can. We may even be able to offer suggestions as to what you can do to modify your site to handle the increased traffic or whatever may be happening to adversely effect the servers. Note that this "throttling" is NOT the same as "Bandwidth Throttling" mentioned below! If it is necessary to throttle your site for some reason the support department will contact the owner of the account with the details. If there is a problem with your site that you can resolve, once you've resolved it we will most likely be able to reduce (or completely remove) the throttle that was put in place.
    http://wiki.dreamhost.com/Expecting_...ng.2FDisabling

    Actually I'm surprised they didn't offer/suggest this. You are obviously under attack by a bot.
    HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

    Web Design eBooks - Web Design eBooks for Beginners

  8. #8
    Roymech
    Join Date
    Jul 2011
    Location
    Manchester UK
    Posts
    8
    Thank you very much for your helpful comments I have now checked out throttling as a solution. I am not sure this works against a DDOS.

    I now believe I sm subject to a DDOS(Denial of service attack) . I do not know how I can be protected against this without spending a lot........

  9. #9
    Tried to find something for you but DDOS attacks are hard to solve. Most solutions were at the server level.

    You web host should be looking into this.

    If they are not willing to help, think it's time to move on.
    HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

    Web Design eBooks - Web Design eBooks for Beginners

  10. #10
    Roymech
    Join Date
    Jul 2011
    Location
    Manchester UK
    Posts
    8
    Hello again
    I have moved my website "Roymech.co.uk "to a hosting company which includes DDOS protection as a selling feature. For five days now my website has been on line. The hosting company is "DDOShostingsolutions.com" I am hoping this is the solution. I am a bit nervous though because although my website has been in continous opereration, on two occasions in the same time period , their support page has been down !!.

  11. #11
    Hope everything works out ok for you there.

    Do you get some kind of report if you become under a dos attack?
    HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

    Web Design eBooks - Web Design eBooks for Beginners

  12. #12
    Administrator Chris's Avatar
    Join Date
    Feb 2003
    Location
    East Lansing, MI USA
    Posts
    7,045
    I regularly use countryipblocks.net to find countries I wish to ban, in fact I used it just now.

    How much advertising revenue do you get from russia or china? None. If you got an order from one or the other would you fill it? Not likely because it is usually a stolen credit card. So why give them access to your site at all when 90% of malicious activity and spam comes from them?
    Chris Beasley - My Guide to Building a Successful Website[size=1]
    Content Sites: ABCDFGHIJKLMNOP|Forums: ABCD EF|Ecommerce: Swords Knives

  13. #13
    4x4
    Join Date
    Oct 2004
    Posts
    1,040
    For most sites I find just allowing USA/Canada/AU/Europe is fine.

    Obviously it depends on the site but sure is faster to allow vs deny

    User agent control is another thing to watch even though it can be faked still good to keep an eye on.

Similar Threads

  1. E-Commerce Baby Products Website Available For Sale
    By Zethix in forum The Marketplace
    Replies: 1
    Last Post: 06-08-2011, 10:20 PM
  2. E-Commerce Antique Furniture Website For Sale
    By Zethix in forum The Marketplace
    Replies: 0
    Last Post: 03-30-2011, 06:52 PM
  3. So is it WP or WSP?
    By Erin in forum Site and Forum Feedback
    Replies: 13
    Last Post: 03-09-2006, 12:41 PM
  4. Why should I start a Website up?
    By northtrex in forum General Chat
    Replies: 8
    Last Post: 10-10-2004, 07:38 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •