Unsolved A Small Orange - bandwidth limit exceded

[IRJ]

I am really surprised no one recommended renaming the admin page! That alone cuts way down on blind bruteforce attacks.

Not to mention you could also add CAPTCHA

[IRJ]

https://wordpress.org/support/topic/how-to-change-the-admin-url-or-wp-admin-to-secure-login/?replies=13

There are also plenty of FREE plugins that do this with one click.

https://wordpress.org/plugins/rename-wp-login/

https://wordpress.org/plugins/protect-wp-admin/

Wordfence also lets you do this and restrict IPs to the admin page.

[Mike Davis]

@IRJ said in A Small Orange - bandwidth limit exceded:

https://wordpress.org/support/topic/how-to-change-the-admin-url-or-wp-admin-to-secure-login/?replies=13

There are also plenty of FREE plugins that do this with one click.

https://wordpress.org/plugins/rename-wp-login/

https://wordpress.org/plugins/protect-wp-admin/

Wordfence also lets you do this and restrict IPs to the admin page.

@IRJ Thanks for the tip on renaming the wp-login. I just added that.

[Mike Davis]

I got my first round of Analytics from CloudFlare, and I'm not sure where to look.

This doesn't look right:
Top Traffic Origins
Last 24 Hours
Country Traffic
Italy 9,439
United States 6,841
Netherlands 2,145
Germany 883
Poland 826

[Mike Davis]

I installed the CloudFlare wordpress plug-in.

[JaredBusch]

@Mike-Davis said in A Small Orange - bandwidth limit exceded:

I installed the CloudFlare wordpress plug-in.

This part should be your biggest helper in dealing with bandwidth exceeded.

[scottalanmiller]

Also check out the listed threats. That'll help.

[Mike Davis]

Does this much traffic for a tiny seem out of the ordinary?

[Mike Davis]

@scottalanmiller said in A Small Orange - bandwidth limit exceded:

Also check out the listed threats. That'll help.

This?

[scottalanmiller]

@Mike-Davis Yeah, but I guess that isn't telling us much here.

[IRJ]

Are you still getting constant hits on the admin page?

[StrongBad]

I think renaming that admin portal would be smart. A simple way to protect against that part of the traffic. And it will make it easier to find what else might be a target once that is moved.

[Mike Davis]

@IRJ said in A Small Orange - bandwidth limit exceded:

Are you still getting constant hits on the admin page?

I renamed the admin page with the plug in. I'm still getting hammered, but I don't understand how. The bandwidth hasn't gone down since I went to CloudFlare or renamed the admin page. What should I look at next?

[scottalanmiller]

Does CloudFlare show the bandwidth the same? Maybe because you exposed your IP it is being hit directly for some reason?

[Mike Davis]

yes, CloudFlare shows the bandwidth the same:

[scottalanmiller]

I wonder why the cache is getting so little.

[Mike Davis]

Maybe I should put ads on the page. That seems to drive people away... Seriously, Total Unique Visitors Last 24 Hours: 2,763 If it was an attack, it would seem to be distributed.

[scottalanmiller]

Maybe there is some bizarre SEO on your page leading people there? Maybe the IP address was used for something else before?

[scottalanmiller]

Fire up Google Analytics and look for traffic source info.

[Mike Davis]

Giving my next question it's own thread:
https://mangolassi.it/topic/13548/add-google-analytics-to-wordpress
(add Google Analytics to Wordpress?)