Need Help! Looks Like my site is under DDOS Attack

So everything was fine with my site until last night I noticed a huge increase in my traffic. As a result my web host suspended my account (I was using a shared hosting). After talking with them, they restored my account. Now after looking at the server logs, something doesn't look right. I am no good at these things. so I am asking all of you to help me out. Take a look at the screenshots given below:



1. They all are going to wierd url's which don't even exist on my site like /~myprojec/fit/admin/1/secure.php.
2. All traffic is coming from China and India.
3. They have very similar user agent i.e. Mozilla/4.0

My CPU usage and Ram usage has been peaked to 100% over-night.

My normal bandwidth usage is at 4 GB but this month it has crossed 48 GB (most usage in last 2 days)..

So what you guys think.. is it a DDOS attacK? if yes then what I can do to avoid it. This site only earns me like $200 per month so buying a costly anti DDOS hosting for this site is not worth it at all..

If you guys can recommend me anything to get out of this situation.. it would be really helpful.

You can use CloudFlare's anti DDOS feature, it also costs ~200$ but you can add all your websites...

Use Cloudfare bro

Okay cloudfare would protect but Can you afford cloudfare?

Yes, it looks like your site is under DDOS attack so, as suggested by other members above, you can check out Cloudfare or have a look at Prolexic or Blacklotus. You can find more about them here:
Still not convinced? Compare the top 10 DDOS protection services here:

cloudflare is free for 1 site try it.

this thing may help if you are can't buy other sevices. https://wordpress.org/plugins/iosec-anti-flood-security-gateway-module/installation

-=-

Your host can stop this with iptable rules on the server

wanted4knowledge said:

Your host can stop this with iptable rules on the server

Click to expand...

How to do that?

Block Chinese traffic in your .htaccess

Jeff Bezos said:

Block Chinese traffic in your .htaccess

Click to expand...

I am not good in these things. Can you tell how to do that?

I have just disabled the Indian traffic. Hope it will solve the problem.

^ disable all third world country traffic. as far as i know you are content locking and they just not convert.
-=-

Update: I just moved to a new hosting that offers DDOS protection. Now everything is good again.

<?php

thread closed

?>