Unsolved A Small Orange - bandwidth limit exceded
-
I installed the CloudFlare wordpress plug-in.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
I installed the CloudFlare wordpress plug-in.
This part should be your biggest helper in dealing with bandwidth exceeded.
-
Also check out the listed threats. That'll help.
-
Does this much traffic for a tiny seem out of the ordinary?
-
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
Also check out the listed threats. That'll help.
This?
-
@Mike-Davis Yeah, but I guess that isn't telling us much here.
-
Are you still getting constant hits on the admin page?
-
I think renaming that admin portal would be smart. A simple way to protect against that part of the traffic. And it will make it easier to find what else might be a target once that is moved.
-
@IRJ said in A Small Orange - bandwidth limit exceded:
Are you still getting constant hits on the admin page?
I renamed the admin page with the plug in. I'm still getting hammered, but I don't understand how. The bandwidth hasn't gone down since I went to CloudFlare or renamed the admin page. What should I look at next?
-
Does CloudFlare show the bandwidth the same? Maybe because you exposed your IP it is being hit directly for some reason?
-
yes, CloudFlare shows the bandwidth the same:
-
I wonder why the cache is getting so little.
-
Maybe I should put ads on the page. That seems to drive people away... Seriously, Total Unique Visitors Last 24 Hours: 2,763 If it was an attack, it would seem to be distributed.
-
Maybe there is some bizarre SEO on your page leading people there? Maybe the IP address was used for something else before?
-
Fire up Google Analytics and look for traffic source info.
-
Giving my next question it's own thread:
https://mangolassi.it/topic/13548/add-google-analytics-to-wordpress
(add Google Analytics to Wordpress?) -
I added Google Analytics. I can see when I hit the page, it says 1 active session. Otherwise it's sitting at 0 active sessions. -Which is what I expect for this seldom used site. However, Cloudflare and A Small Orange insist I'm getting 200+ unique visitors an hour. Where do I go next?
-
That suggests it isn't picking up the JavaScript. It's a bot of some sort.
-
Have you looked into WordFence?
-
If they are bots, Wordfence has an option to automatically block "fake Google crawlers" found under Wordfence -> Firewall -> Rate Limiting. Wordfence is free for many of it's features but also offers some premium features for paid option.
Something else to watch for is, I noticed that Google crawlers were going ape$hit for a while crawling a couple sites I manage to the tune of hundreds of pages per day. That's since calmed down though. Right around the time I submitted a sitemap to Google Search Console.
