My site was taken down due to a Ddos attack yesterday
What steps have you taken to resolve the issue?
My host has shut down my site for a DDos attack of 37126 different IP addresses logged in just one hour. They say I should enable Under Attack Mode in Cloudflare but it looks like the DDoS attack protection is always enabled by default? I have read the help page about custom pages but I cannot find that option in my account and don’t understand what I should do. I would be grateful if someone could help let me know what I can do, are there any other settings I should be using to prevent this and get my site back online? Thanks, Debbie
My site has been taken down on and off for the past 3 days so I really need to permanently reduce the CPU seconds caused by aggressive crawling. I have no experience with firewall rules or setting up WAF. I have spent days reading the help files but find them difficult to understand.
I had ‘Under Attack’ activated for 24 hours but could not leave it longer. I took that off and enabled the ‘Cloudflare Managed Ruleset’ although I am not sure if that is the right thing to do or whether the ‘good’ crawlers can access the site while this is on.
My host is telling me to set up custom WAF rules to allow legitimate search engine / bots crawling.
This morning my CPU seconds have shot back up to over 31,000 again which means Siteground will take the site down again. The access log shows thousands of hits from Applewebkit.
I would be happy to pay someone to set this up for me as I am getting so frustrated with this.