Notes on issues related to attacks on websites and servers.

Websites are generally attacked for the following reasons:

1. Profit-making websites are easily attacked by competitors.

2. They are extorted by hackers, who demand a “protection fee”; otherwise, an attack will be launched.

3. The website is hacked, and the hacker places illegal web pages such as “private servers” and “weight loss” in subdirectories, causing it to be attacked as well.

Protective measures against website attacks:

For websites that may be attacked, it is recommended to use our company's high-defense line data center cloud host, or enable third-party protection, such as百度云加速, 加速乐, cloudflare, etc. to protect the website. For legitimate websites, website security protection measures should be well implemented to prevent them from being exploited after being hacked. For specific measures, see: http://www.west.cn/faq/list.asp?unid=733 

It is recommended to upgrade to our high-defense line data center cloud host.

For 亚数 Hong Kong IP under attack, it is recommended to purchase a high-defense IP (log in to the Control Center > Business Management > Server Management, click Manage, and click “Add High-Defense IP”), or purchase a separate high-defense service

西部数码's policy on attack issues:

1. Our company provides professional DDoS high-defense services  and exclusive high-defense line cloud hosts, with 30Gb ~ 500Gb protection peak, easily handling various types of DDoS and CC attacks. BGP multi-line protection fully covers Telecom, Mobile, and Unicom lines. It provides exclusive protection for high-risk websites most vulnerable to attacks, such as e-commerce, finance, enterprise portals, and specialized hospitals. The independent IPs of our cloud hosts and VPS hosts, as well as external IPs, can all be used.

2. For non-high-defense line data center cloud servers,  if attacked, the relevant IP will be automatically suspended by the data center. If high-defense protection is needed, you can upgrade and migrate the cloud server to the “high-defense line” in the Control Center, or purchase a separate DDoS high-defense service .

3. Because virtual hosting uses a shared IP, it is easy for sites to affect each other when under attack, and it is not conducive to protection. You can purchase DDoS high-defense service separately. If the attack traffic is large, you need to upgrade to a cloud host with an independent IP (it is recommended to upgrade to a high-defense data center).

4. Suspension times by data center for cloud servers under attack:

1. Telecom, Smart Multi-line data centers:

First attack less than 2G: suspended for 2 hours; greater than 2G: suspended for 8 hours

Second attack and above: suspended for 48 hours

2. North China BGP data center

First time: suspended for 8 hours

Second time and above: suspended for 24 hours

3. Central China BGP data center

First and second times: suspended for 24 hours; third time or above: suspended for 48 hours

4. South China BGP data center

After being attacked, it can no longer be hosted in this data center and must be migrated to a high-defense or other data center.

5. Hong Kong 163, CN2 lines

First time 8 hours, second time and above 24 hours

If an application is frequently attacked, it is recommended to consider directly using  high-defense line cloud host  or deploying  DDoS high-defense service . In addition, you may consider applying for a backup IP. When the main IP is attacked, you can obtain data through the backup IP, or communicate with protection services such as 百度云加速 through the backup IP, ensuring that the service is not interrupted.