Web Analytics Made Easy - Statcounter
Back to case studies
Emergency Recovery

Hosting collapse caused by malicious traffic

Emergency mitigation work to stop aggressive malicious traffic repeatedly crashing a production website and exhausting server resources.

99%
Bad traffic blocked
45m
Mitigation
100%
Stability restored

A production website repeatedly collapsed under aggressive malicious traffic. The hosting account exhausted available resources, legitimate users were blocked by timeouts, and the existing protection stack was not stopping the attack pattern.

We traced the traffic source, hardened the exposed paths, applied targeted blocking rules, and stabilised the hosting environment.

WordPress
Platform
Traffic attack
Issue type
45m
Mitigation time
Server and frontend
Systems affected
The Problem

Malicious traffic exhausted hosting resources

The site was not failing because of normal traffic growth. Repeated abusive requests were bypassing basic caching and hitting expensive endpoints until the hosting environment became unstable.

The immediate priority was to restore availability without blocking legitimate customers.

Resource exhaustion

Aggressive repeated requests consumed CPU and memory until the site stopped responding.

Cache bypassing

Attack traffic targeted routes that avoided the normal caching layer.

Legitimate users affected

Real visitors experienced timeouts and failed page loads during repeated hosting collapses.

The Fix

Targeted traffic mitigation and endpoint hardening

We reviewed server logs, identified the repeated request pattern, and applied focused mitigation rules rather than bluntly blocking broad traffic.

The recovery combined rate limiting, endpoint protection, caching correction, and hosting cleanup so legitimate visitors could reach the website again.

Identified attack paths

Mapped the requests responsible for resource exhaustion and cache bypassing.

Applied targeted protection

Added focused WAF and rate-limit rules without blocking normal user traffic.

Stabilised hosting

Cleared failed processes and restored normal server response under continued traffic pressure.

Results

Website stability restored under attack pressure

The malicious traffic was neutralised, normal page delivery returned, and the site remained stable while protection rules continued to filter abusive requests.

99%
Bad traffic blocked
0
Legitimate paths blocked
100%
Availability restored

Need help fixing something similar?