Handling Process for Virtual Host Attacks

Published: 2013-06-06

There are generally the following reasons for a website being attacked:


1. For-profit websites are easily attacked by competitors.

2. Being blackmailed by hackers, who demand payment of a “protection fee”; otherwise, they will carry out attacks.

3. A website is hacked, and the hacker places illegal webpages such as “private servers” and “weight loss” pages in a subdirectory, thereby causing the website to be attacked as well.

4. The corresponding website program itself is an illegal website, such as private servers, cheats, reputation boosting, fake medical websites, etc. (there are many types, not listed one by one).


For attacks caused by the above factors, the handling methods are subdivided into two major categories.

I.

For attack factors 1-3, they generally attract CC attacks and ddos attacks. Such attacks basically consume a large amount of external resources to carry out large access volume and large traffic, causing resource abnormalities on the host server, thereby making the website inaccessible, so as to achieve the corresponding attack purpose.

(1) CC attacks.

This type consumes host resources through a large number of requests. Domestic hosts can enable Baidu Cloud Acceleration. If it cannot be defended against, it is recommended to upgrade to a cloud host, or purchase DDOS protection (purchase address https://www.west.cn/cloudhost/ddos.asp). For Hong Kong hosts, you need to directly purchase DDOS protection; when purchasing, overseas protection is required. The purchase address is still the above address.

Note: CC protection requires additional settings to be enabled. After purchase, users need to submit a ticket to contact our company's technical staff to enable it.

(2) DDOS attacks.

Both domestic hosts and Hong Kong hosts purchase DDOS protection (Note: Hong Kong hosts still need to purchase overseas protection). You can also upgrade the host to a high-defense line cloud host. Among them, Hong Kong hosts that are attacked can also be upgraded to the Yashu Data Center, and then a high-defense IP can be added separately (to purchase a high-defense IP (log in to Management Center > Business Management > Server Management, click Manage to enter, and click “Add High-Defense IP”)).

II.

In order to provide legitimate customers with a more stable network environment, our company strictly prohibits illegal websites from purchasing our products in terms of policy. For the 4th attack factor, once an illegal website is found to purchase our products, it will be shut down immediately with no refund.

If you are a legitimate enterprise website, you can purchase our products with confidence. First, the possibility of such a legitimate website being attacked is very, very low; second, even if it encounters an attack, high-defense protection services are also available.