Solved – DOS Attacks On My Web Directory
1359 days agoFinally I have solved the DOS attack problem that is happening to my web directory. If you don’t know what is happening, please read this post. It happened last thursday when my...
Finally I have solved the DOS attack problem that is happening to my web directory. If you don’t know what is happening, please read this post. It happened last thursday when my webhost told me that I was using too much bandwidth for the month and I check and discovered that I had used up over 30GB of extra bandwidth. When I investiage further, I found that it will led to 404 error page. So I thought that my site was attacked, either by Denial Of Service attacks or by some other methods. My webhost after studying the situation told me that this is the most plausible scenario. However, after deeper investigation I found that this is not to be the case.
The problem lies with the script I am using. Actually, it lies with one of the templates (or themes or skin) that I was using for the web directory script. This template had a few bugs which somehow made the script load javascript files which does not exist and every time it loads, additional bandwidth is used. Worse still, the web directory script loads those non-existent javascript files every time a category is accessed. So just imagine if you browse a web directory with thousands of categories! You would have made used huge amount of bandwidth without doing anything useful!
Oh you may be wondering why I didn’t realize this problem till now. Well, previously my web directory didn’t get as much visitors as before. It was not until a few months back before I had a decent increase in the number of visitors to my directory. It could be due to my web directory gaining “authority status” by Google since a lot of those visitors come from Google Search. Hey, this is a good thing but in this case, it caused my webhost to suspend my account temporarily. I had to convince my webhost to allow me to figure out the problem. And finally on Saturday, I discovered the stupid problem and I modified the script. The redundant javascript files were removed from the code and I sat back and see how the performance was. Well guys, everything looks good from my end. The number of 404 error requests dropped to almost none! Thus, I didn’t see any significant increase in the bandwidth usage and my webhost didn’t suspend my account again.
I really felt relief. I was worried that my webhost will get so pissed off with the overloading of their servers and kicked me off. This has saved me a lot of extra work in getting a new webhost, changing the DNS settings and uploading the files to the new server. Not to mention the hours lost while waiting for the DNS to propagate properly. However, I have yet to pass another test. Monday is a public holiday in Singapore, so the traffic was low as compared to the normal weekdays. I got a ton of visitors in the weekdays. I don’t get as many as in the weekends. So, tomorrow will be my baptistism of fire when the real weekend traffic comes and hammer at the server. If all goes well, I think that my webhost won’t kick me out.


























