Questions tagged [ddos]

14 questions
9
votes
2 answers

Facebook crawler with no user agent spamming our site in possible DoS attack

Crawlers registered to Facebook (ipv6 ending in :face:b00c::1) were slamming our site, seeing 10s of thousands of hits in just 20 minutes. We noticed they didn't have a user agent in the header and implemented a rule on cloudflare to protect…
L Martin
  • 4,023
  • 12
  • 25
2
votes
1 answer

Is there a risk to hosting service if hot-potato site is using cloudflare?

Picture a politically hot website that might be subject to a DDOS attack. If that site is hosted at examplehosting.com and then uses cloudflare or another CDN, is the hosting service vulnerable to a DDOS attack on the site? I do understand that the…
Steve
  • 8,575
  • 25
  • 30
2
votes
2 answers

Why is my regional website being hit by thousands of Chinese IP addresses?

For a few days now one of my websites (a local travel guide) has been getting a massive number of hits from Chinese IP addresses. This is to the point that my log files are 10 times bigger and my modsecurity log is over 100 times bigger than…
2
votes
1 answer

Will DDoS testing one’s own site negatively impact networks between me and my site?

I’ve been planning to DDoS test my own site to see the capacity of my site, but gave up at last cause I saw this word of advice: DDOS attack does not magically reach to the target. It will violate many innocent network infrastructures. If this is…
gudako
  • 121
  • 4
2
votes
0 answers

Can many single page hits from a variety user agents from the same VPN with the same screen resolution be hurting my search rankings?

I am trying to clarify what is happening with the traffic on my site. Lately I am being flooded with many strange hits, mostly from US and they seem to only open 1 page or visit for few seconds. The attached picture shows hits from 22 different IPs…
adrianTNT
  • 203
  • 1
  • 9
1
vote
1 answer

How can I prevent DOS 404 attacks involving non-existent URLs?

One of my virtual hosts running Apache is experiencing an influx of over 30,000 IP connections attempting to access non-existent URLs. Here's an example log entry: 62.74.16.240 - - [13/Sep/2023:14:24:46 +0200] "GET /741418kipgo9lrffo7rv2z/ HTTP/1.1"…
Gold24k
  • 19
  • 1
1
vote
0 answers

my website is working fine but the traffic keeps dropping and i can't find the reason

My website is being attacked by IP range 66.249.72 My website is experiencing a huge drop in traffic even though it's working properly. I found that the IP address of google bot accessing my website a lot. I am very stuck as to what is the reason.…
Tú Lê
  • 31
  • 4
1
vote
2 answers

My website is being attacked by IP range 66.249.72

I am being attacked by IP ranges as shown below. I did a search on Google and found that it is an IP address range owned by Google LLC and located in United States https://developers.google.com/search/apis/ipranges/googlebot.json it makes my site…
Tú Lê
  • 31
  • 4
1
vote
3 answers

Huge number of requests for recently online website

I recently put a new website online on a .com domain. It is not advertised, and the number of "real" users is basically zero. It is secured via cloudflare. Since linked with the .com domain, the number of requests is very high despite the 91 unique…
seb007
  • 113
  • 5
1
vote
1 answer

SEO Ranking for a website under DDOS attack

Our website was under a DDOS attack and the attacker demanding $5000 to stop it. Under this condition, we have blocked all the traffic from outside India. Our customers are from ONLY India and we target only the Indian market. As we have blocked the…
Michael
  • 11
  • 1
1
vote
0 answers

Best resources for learning how to prevent malicious usage?

I'd like to work on creating a public website, but I'm concerned about the potential for it to be the target of some attack. I'm aware of some of the more common attacks like XSS, query injection, DDOS, and spam bots, but before I can feel…
mowwwalker
  • 151
  • 1
1
vote
1 answer

How can I protect stratum+tcp from DDoS?

There was a question asking this posted earlier (seems to have been removed) and I did some research to find the answer. You can protect http and https from DDoS using Cloudflare but non-http services like ftp are configured to bypass Cloudflare. If…
Willtech
  • 265
  • 1
  • 10
1
vote
1 answer

Should we use Amazon CloudFront? (We need mitigate cost attacks)

We want to serve our files from Amazon S3. We are worried about cost DoS attacks (deliberately downloading files from Amazon many times, in order for us to pay a big bill to Amazon). We don't have enough money to use AWS Shield Advanced…
porton
  • 383
  • 1
  • 3
  • 11
0
votes
1 answer

From a technical standpoint, why do we have to pay for any domain name?

In terms of the ownership of any domain name, why is it that a person or a company who owns a website and the technology to make the said website work has to pay "extra" money to "rent" a domain name? Do these (domain registrar) companies offer you…