Unsolved A Small Orange - bandwidth limit exceded
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
Is that something I need to do with two pages of text and no images? How would I do that?
Well, it would have protected you here. Or at least to some degree. It's like never having your DNS hosted by your registrar or never letting your DNS host also host your web page, it's just a basic best practice. Do you have to do it? No. But I follow the standard pattern of good practice for every site, every time, regardless of size. It's a bit like virtualization. Do you always need it? No. Is it possible to know ahead of time when you won't have needed it? No. So you always do it.
You move your DNS to CloudFlare, which is one of the best DNS hosts anyway, so that is good even if you don't use the CDN. Then once your DNS is set up you just click the cloud button on the A record for your site and it turns orange and poof, you are done.
-
So by having DNS on CloudFlare I would get better analytics than what a small orange provides?
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
So by having DNS on CloudFlare I would get better analytics than what a small orange provides?
I didn't even know that ASO provided any.
-
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
I didn't even know that ASO provided any.
They also have the awstats plug in that has other reports I can run, but I don't really know what I'm looking for.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
I didn't even know that ASO provided any.
They also have the awstats plug in that has other reports I can run, but I don't really know what I'm looking for.
Looking for WHO is requesting all of those pages.
-
Here is a list by IP. If I had to take a guess, I'd say the top IP was reloading the WP-admin page over and over trying to hack the site. What can I do about it?
-
Half a GB of wp-admin seems unlikely, but theoretically possible.
-
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
Half a GB of wp-admin seems unlikely, but theoretically possible.
From the first stats I posted, it was the second most hit page after the home page.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
Half a GB of wp-admin seems unlikely, but theoretically possible.
From the first stats I posted, it was the second most hit page after the home page.
But only 10% of total hits. And the content on that page is normally tiny.
-
I turned on Hotlink Protection and blocked the top IP. We'll see how that goes.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
I turned on Hotlink Protection and blocked the top IP. We'll see how that goes.
Or you cold ignore everything you were told when asking for help. Great work!
-
@JaredBusch said in A Small Orange - bandwidth limit exceded:
Or you cold ignore everything you were told when asking for help. Great work!
It's going to take me a minute to set up cloudflare....
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
I turned on Hotlink Protection and blocked the top IP. We'll see how that goes.
What did you block with that? I mean blocking the IP, sure, that makes sense if you are sure it is malicious. But there is no hotlinking since you have no images.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
@JaredBusch said in A Small Orange - bandwidth limit exceded:
Or you cold ignore everything you were told when asking for help. Great work!
It's going to take me a minute to set up cloudflare....
But literally, one minute
It's SO fast. I do it every few days. -
I suppose if you don't have an account yet.
-
OK 9 minutes because I didn't have an account. It looks like I'll be able to check back tomorrow to see some analytics.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
OK 9 minutes because I didn't have an account. It looks like I'll be able to check back tomorrow to see some analytics.
You will be able to!
Speaking of which... wow, 110 requests on my almost blank blog page on my home lab. Surprising because I wasn't actually working on it at the time.
-
I thought that CloudFlare would show something in about four hours.
-
Check the cache and security settings, you can adjust some things to reduce threats. Also, if you are running WordPress, install the CloudFlare plugin for even more benefits.
-
I am really surprised no one recommended renaming the admin page! That alone cuts way down on blind bruteforce attacks.
Not to mention you could also add CAPTCHA
