Go Back   Website Publisher Forums > Website Management > General Management Issues

Notices

Reply
Thread Tools Rate Thread
Unread 02-03-2012, 04:23 AM   #1
Roy Beardmore
Roymech
 
Join Date: Jul 2011
Location: Manchester UK
Posts: 8
Attack on My Website

I need some help
My hosting company has stopped my website "RoyMech.co.uk" because it is receiving massive traffic from global sources. +1000 times more than normal.
The queries on my webpage seem to be from legitimate computers (possible infected with malware). Can anyone advise why this is occurring and what I can do about it.
Roy Beardmore is offline   Reply With Quote

Unread 02-03-2012, 01:46 PM   #2
HTMLBasicTutor
Registered
 
HTMLBasicTutor's Avatar
 
Join Date: Aug 2010
Posts: 76
Do you know where the main batch of visitors are coming from? Country? IP address or range?
__________________
HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

Web Design eBooks - Web Design eBooks for Beginners
HTMLBasicTutor is offline   Reply With Quote
Unread 02-04-2012, 06:15 AM   #3
Roy Beardmore
Roymech
 
Join Date: Jul 2011
Location: Manchester UK
Posts: 8
Attack on my website

No... I have been given a list of DNS numbers/time and in about 2minutes there are litteraly 100s of different numbers .The seem to come from all over the world. Many are the same number with different #xxxx after them.
Roy Beardmore is offline   Reply With Quote
Unread 02-04-2012, 10:23 AM   #4
HTMLBasicTutor
Registered
 
HTMLBasicTutor's Avatar
 
Join Date: Aug 2010
Posts: 76
Quote:
Originally Posted by Roy Beardmore View Post
Many are the same number with different #xxxx after them.
That would indicate a IP range.

You can look up some of them at IP-Lookup to determine what country and ISP they are from. With that information you can get a list of IPs from the ISP to deny access to your site.
__________________
HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

Web Design eBooks - Web Design eBooks for Beginners
HTMLBasicTutor is offline   Reply With Quote
Unread 02-04-2012, 02:41 PM   #5
Todd W
4x4
 
Join Date: Oct 2004
Posts: 1,040
Why don't you block the countries you are not interested in having visit ?
Todd W is offline   Reply With Quote
Unread 02-09-2012, 02:52 AM   #6
Roy Beardmore
Roymech
 
Join Date: Jul 2011
Location: Manchester UK
Posts: 8
Hello again thanks for the comments . I have gone through the list of DNS numbers (about 800-1000 visits/s) resulting from 10 minutes activity . They are from all over the world US ,UK ,Turkey, China, Russia.... I am at this time in the hands of my website hosting company.

Is it possible for a server to include a switch which simply turns off access if
the rate of visits exceeds say 5/s and then turns it back on again after 10 minutes.
Roy Beardmore is offline   Reply With Quote
Unread 02-09-2012, 12:21 PM   #7
HTMLBasicTutor
Registered
 
HTMLBasicTutor's Avatar
 
Join Date: Aug 2010
Posts: 76
Have you asked your web host about throttling?

Quote:
Throttling/Disabling
If for whatever reason your sites increased traffic causes problems for the server it may be necessary for the support department to "throttle" your site (restricting the number of simultaneous visitors or maximum throughput, etc.) or possible even disable it. This is done in fairness to the other customers on your server. Remember that you're on a shared hosting platform (hosting plans L1 - L4) and one customer cannot jeopardize the operation of the server for all of the other customers. However, we will do what we can to keep your site up as best as we can. We may even be able to offer suggestions as to what you can do to modify your site to handle the increased traffic or whatever may be happening to adversely effect the servers. Note that this "throttling" is NOT the same as "Bandwidth Throttling" mentioned below! If it is necessary to throttle your site for some reason the support department will contact the owner of the account with the details. If there is a problem with your site that you can resolve, once you've resolved it we will most likely be able to reduce (or completely remove) the throttle that was put in place.
http://wiki.dreamhost.com/Expecting_...ng.2FDisabling

Actually I'm surprised they didn't offer/suggest this. You are obviously under attack by a bot.
__________________
HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

Web Design eBooks - Web Design eBooks for Beginners
HTMLBasicTutor is offline   Reply With Quote
Unread 02-11-2012, 05:12 AM   #8
Roy Beardmore
Roymech
 
Join Date: Jul 2011
Location: Manchester UK
Posts: 8
Thank you very much for your helpful comments I have now checked out throttling as a solution. I am not sure this works against a DDOS.

I now believe I sm subject to a DDOS(Denial of service attack) . I do not know how I can be protected against this without spending a lot........
Roy Beardmore is offline   Reply With Quote
Unread 02-11-2012, 06:05 PM   #9
HTMLBasicTutor
Registered
 
HTMLBasicTutor's Avatar
 
Join Date: Aug 2010
Posts: 76
Tried to find something for you but DDOS attacks are hard to solve. Most solutions were at the server level.

You web host should be looking into this.

If they are not willing to help, think it's time to move on.
__________________
HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

Web Design eBooks - Web Design eBooks for Beginners
HTMLBasicTutor is offline   Reply With Quote
Unread 02-17-2012, 06:16 PM   #10
Roy Beardmore
Roymech
 
Join Date: Jul 2011
Location: Manchester UK
Posts: 8
Hello again
I have moved my website "Roymech.co.uk "to a hosting company which includes DDOS protection as a selling feature. For five days now my website has been on line. The hosting company is "DDOShostingsolutions.com" I am hoping this is the solution. I am a bit nervous though because although my website has been in continous opereration, on two occasions in the same time period , their support page has been down !!.
Roy Beardmore is offline   Reply With Quote
Unread 02-17-2012, 08:49 PM   #11
HTMLBasicTutor
Registered
 
HTMLBasicTutor's Avatar
 
Join Date: Aug 2010
Posts: 76
Hope everything works out ok for you there.

Do you get some kind of report if you become under a dos attack?
__________________
HTML Basic Tutor - HTML basics for business owners, blog owners and those new to web design.

Web Design eBooks - Web Design eBooks for Beginners
HTMLBasicTutor is offline   Reply With Quote
Unread 02-18-2012, 06:27 AM   #12
Chris
Administrator
 
Chris's Avatar
 
Join Date: Feb 2003
Location: East Lansing, MI USA
Posts: 7,045
I regularly use countryipblocks.net to find countries I wish to ban, in fact I used it just now.

How much advertising revenue do you get from russia or china? None. If you got an order from one or the other would you fill it? Not likely because it is usually a stolen credit card. So why give them access to your site at all when 90% of malicious activity and spam comes from them?
__________________
Chris Beasley - My Guide to Building a Successful Website[size=1]
Content Sites: ABCDFGHIJKLMNOP|Forums: ABCD EF|Ecommerce: Swords Knives
Chris is offline   Reply With Quote
Unread 02-20-2012, 05:54 PM   #13
Todd W
4x4
 
Join Date: Oct 2004
Posts: 1,040
For most sites I find just allowing USA/Canada/AU/Europe is fine.

Obviously it depends on the site but sure is faster to allow vs deny

User agent control is another thing to watch even though it can be faked still good to keep an eye on.
Todd W is offline   Reply With Quote
Reply

Bookmarks

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
E-Commerce Baby Products Website Available For Sale Zethix The Marketplace 1 06-08-2011 10:20 PM
E-Commerce Antique Furniture Website For Sale Zethix The Marketplace 0 03-30-2011 06:52 PM
So is it WP or WSP? Erin Site and Forum Feedback 13 03-09-2006 12:41 PM
Why should I start a Website up? northtrex General Chat 8 10-10-2004 07:38 PM



All times are GMT -7. The time now is 04:30 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
Site Copyright 2003-2006 Jalic Inc. All rights reserved.