Bots are the less glamorous side of running WPBay

WPBay had a fun morning today. A bot started hammering the /cart/ page with many requests at once.

Because the cart cannot be cached like a normal page, every request loaded the entire stack. Within 15 seconds all available workers were busy. This caused slow loading and some timeouts.

I added extra Cloudflare protection and the attack stopped. The server returned to normal immediately. No other damage was done, only a small downtime window.

These attack start to be more frequent, as I just tackled a similar attack a couple of days ago…

So, if WPBay was slow for you today, this was the reason…

I don’t get the people who do this. what do they gain?

They test sites and search for any known vulnerability or something new which might have been introduced by custom code added to the site, based on which they might be able to get admin access or do other nasty stuff to the site.

1 Like