1

For the last two days I have been getting above average traffic on my website. Most of these visitors have an average duration of under 15 seconds. While there are not that many more visitors than usual (see Aw Stats screenshot below), there are way more page views and hits.

I'm running Wordpress and have Jetpack stats installed, these high numbers are showing up as page views and are not bots (apparently).

I looked for referral spam but don't see anything unsual. Most of the traffic for page views and full referrer in Google Analytics shows up as 'direct' followed by the usual Google Facebook etc. The majority of the bandwidth is being used by accessing javascript files. When I look at server logs most of these js files are just normal files (ie. it's not one specific js file or exclusively custom js files, lots of vendor js files in there).

I use Cloudfront as the CDN (I only host images here though) but I'm not seeing a huge increase in http requests from Amazon - which is weird considering the high page views.

I am considering using CloudFlare but I'm also wondering if anyone can give me possible ideas of what could be causing the traffic spike? Perhaps this is referral spam I'm not recognising or maybe a targeted attack?

Here is a screeshot from Aw Stats of the traffic spike (1, 2 November are normal traffic days):

enter image description here

  • We cannot tell from this question. There are not enough specifics to come to any conclusion. I do appreciate the attention given to your writing the question- it is stellar. However, I think we would need to know more such as what JS files, what installs you have, etc. It is possible that there is a vulnerability that someone is either trying to take advantage of or is taking advantage of. It could be simple site profiling, etc. But so far all we know is that you have a lot of access to JS files on certain days. Can you help fill in the blanks?? Thanks in Advance! – closetnoc Nov 6 '15 at 15:42
  • The js files are mainly Wordpress plugins (Jetpack, Contact Form 7, MyMail) and Jquery (core, accordion etc.). After moving over to CloudFlare the problem appears to have gone away. I am noticing in CloudFlare threats being blocked (average approx 200 per day) relating to 'Bad Browser'. – stemie Nov 9 '15 at 6:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.