What is a DDoS Attack?
A Distributed Denial of Service (DDoS) attack occurs when a hacker uses a botnet (a network of infected computers) to send a massive flood of fake traffic to your website. The goal is to overwhelm your server's resources (CPU and RAM) until the server crashes, taking your website offline.
Signs You Are Under a DDoS Attack
- Your website becomes extremely slow or unresponsive.
- You see 500, 502, 503, or 504 error pages when trying to access your site.
- Your hosting provider emails you warning about high CPU usage.
- Your analytics show a massive, inexplicable spike in traffic from unusual countries.
How to Stop a DDoS Attack
1. Enable Under Attack Mode
If you are using a CDN like Cloudflare, immediately log in and activate "Under Attack Mode". This will present a JS challenge to every visitor, effectively blocking automated bots from hitting your server.
Need immediate help?
If your site is currently hacked or showing warnings, our incident response team can help right now.
2. Block the Attacking IPs
If the attack is smaller (an Application-Layer DDoS), you can look at your server logs to identify the attacking IP addresses. You can then block these IPs via your `.htaccess` file or your hosting control panel. However, this is difficult if the attack is highly distributed.
3. Disable XML-RPC and REST API
WordPress has two endpoints that are frequently abused for Application-Layer DDoS attacks: xmlrpc.php and the REST API. Hackers use these to amplify their attacks.
Upgrade to Nexura Pro
Get enterprise-grade protection. Block zero-day exploits, advanced malware, and brute-force attacks instantly.
LIMITED TIME LAUNCH OFFER
- Use a security plugin or `.htaccess` rules to completely disable XML-RPC if you do not use the WordPress mobile app.
- Restrict the REST API to authenticated users only.
4. Use a Web Application Firewall (WAF)
A robust WAF is your best defense against Application-Layer attacks. Nexura Security's Pre-Boot WAF is designed to analyze incoming traffic and drop malicious requests (like repeated rapid hits from the same IP) before they can consume your server's PHP resources.
Long-Term Prevention
The best way to survive a DDoS attack is to be prepared before it happens. Ensure you are using a quality hosting provider, utilize a CDN, and keep a powerful endpoint firewall like Nexura Security active at all times.
