A Small Orange - bandwidth limit exceded
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
So by having DNS on CloudFlare I would get better analytics than what a small orange provides?
I didn't even know that ASO provided any.
-
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
I didn't even know that ASO provided any.
They also have the awstats plug in that has other reports I can run, but I don't really know what I'm looking for.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
I didn't even know that ASO provided any.
They also have the awstats plug in that has other reports I can run, but I don't really know what I'm looking for.
Looking for WHO is requesting all of those pages.
-
Here is a list by IP. If I had to take a guess, I'd say the top IP was reloading the WP-admin page over and over trying to hack the site. What can I do about it?
-
Half a GB of wp-admin seems unlikely, but theoretically possible.
-
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
Half a GB of wp-admin seems unlikely, but theoretically possible.
From the first stats I posted, it was the second most hit page after the home page.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
Half a GB of wp-admin seems unlikely, but theoretically possible.
From the first stats I posted, it was the second most hit page after the home page.
But only 10% of total hits. And the content on that page is normally tiny.
-
I turned on Hotlink Protection and blocked the top IP. We'll see how that goes.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
I turned on Hotlink Protection and blocked the top IP. We'll see how that goes.
Or you cold ignore everything you were told when asking for help. Great work!
-
@JaredBusch said in A Small Orange - bandwidth limit exceded:
Or you cold ignore everything you were told when asking for help. Great work!
It's going to take me a minute to set up cloudflare....
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
I turned on Hotlink Protection and blocked the top IP. We'll see how that goes.
What did you block with that? I mean blocking the IP, sure, that makes sense if you are sure it is malicious. But there is no hotlinking since you have no images.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
@JaredBusch said in A Small Orange - bandwidth limit exceded:
Or you cold ignore everything you were told when asking for help. Great work!
It's going to take me a minute to set up cloudflare....
But literally, one minute
It's SO fast. I do it every few days. -
I suppose if you don't have an account yet.
-
OK 9 minutes because I didn't have an account. It looks like I'll be able to check back tomorrow to see some analytics.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
OK 9 minutes because I didn't have an account. It looks like I'll be able to check back tomorrow to see some analytics.
You will be able to!
Speaking of which... wow, 110 requests on my almost blank blog page on my home lab. Surprising because I wasn't actually working on it at the time.
-
I thought that CloudFlare would show something in about four hours.
-
Check the cache and security settings, you can adjust some things to reduce threats. Also, if you are running WordPress, install the CloudFlare plugin for even more benefits.
-
I am really surprised no one recommended renaming the admin page! That alone cuts way down on blind bruteforce attacks.
Not to mention you could also add CAPTCHA
-
There are also plenty of FREE plugins that do this with one click.
https://wordpress.org/plugins/rename-wp-login/
https://wordpress.org/plugins/protect-wp-admin/
Wordfence also lets you do this and restrict IPs to the admin page.
-
@IRJ said in A Small Orange - bandwidth limit exceded:
There are also plenty of FREE plugins that do this with one click.
https://wordpress.org/plugins/rename-wp-login/
https://wordpress.org/plugins/protect-wp-admin/
Wordfence also lets you do this and restrict IPs to the admin page.
@IRJ Thanks for the tip on renaming the wp-login. I just added that.
