Forum Moderators: Robert Charlton & goodroi

Message Too Old, No Replies

How to recover after the server was not available (I had a Ddos attack)

         

doc_z

7:45 am on Dec 9, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I had a massive Ddos attack - up to 500 millions hits per day!

The server was not available for about 3-4 days. I'm trying to recover.

Any advice what to do? Or just wait?

netmeg

1:27 pm on Dec 9, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



How much damage did you incur in your ranking/indexing?

I'd just wait.

doc_z

1:54 pm on Dec 9, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I have tenthousends of keywords - too much too control by hand. I'll get an overview only once per week at sunday when I see my overall visibility. Than I'll see the damage in ranking.

Also in the moment I'm still under attack. Therefore, I'm still busy with blocking and keep the service alive.

I also had to change my IP, but I hope that this doesn't play a role.

alika

1:59 pm on Dec 9, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



My advice is to be careful with the next steps.

We had a similar experience with a series of ddos attacks. We were ok with that even when the site went down.

What hurt us with Google was the increase in authorization errors we got after putting password protection in our login pages [webmasterworld.com...] sometime in June. Google traffic went downhill after that. Even after we have removed password protection, traffic just went sliding down, down and down with Dec our lowest point.

We are now up more than 100% from our lowest point last year, but still a lot way off from our traffic before the attacks.

So just be careful on what you implement next to protect your site. To this day, I still can't understand why Google would react that way to putting password protection to our login pages, but they did -- and we got severely hit in the process.

doc_z

5:02 pm on Dec 9, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Thanks for the advice.

Anyway in my case all traffic is just for the homepage, no other page. Therefore, there is nothing to protect or any other way to avoid traffic apart from blocking IPs and blocking countries. So far I've blocked about 20 coutries plus thousands of IPs. It's hard to get rid of that attack even with professional help.

aristotle

5:48 pm on Dec 9, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



doc_z
I suggest that you start a thread about this in the WebmasterWorld Search Engine Spider and User Agent Identification Forum
[webmasterworld.com ]
There are some real experts there who might be able to help you improve your defenses against this.

lucy24

10:01 pm on Dec 9, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



thousands of IPs

You're cutting your slivers too small.