Unsolved A Small Orange - bandwidth limit exceded

[scottalanmiller]

I suppose if you don't have an account yet.

[Mike Davis]

OK 9 minutes because I didn't have an account. It looks like I'll be able to check back tomorrow to see some analytics.

[travisdh1]

@Mike-Davis said in A Small Orange - bandwidth limit exceded:

OK 9 minutes because I didn't have an account. It looks like I'll be able to check back tomorrow to see some analytics.

You will be able to!

Speaking of which... wow, 110 requests on my almost blank blog page on my home lab. Surprising because I wasn't actually working on it at the time.

[Reid Cooper]

I thought that CloudFlare would show something in about four hours.

[scottalanmiller]

Check the cache and security settings, you can adjust some things to reduce threats. Also, if you are running WordPress, install the CloudFlare plugin for even more benefits.

[IRJ]

I am really surprised no one recommended renaming the admin page! That alone cuts way down on blind bruteforce attacks.

Not to mention you could also add CAPTCHA

[IRJ]

https://wordpress.org/support/topic/how-to-change-the-admin-url-or-wp-admin-to-secure-login/?replies=13

There are also plenty of FREE plugins that do this with one click.

https://wordpress.org/plugins/rename-wp-login/

https://wordpress.org/plugins/protect-wp-admin/

Wordfence also lets you do this and restrict IPs to the admin page.

[Mike Davis]

@IRJ said in A Small Orange - bandwidth limit exceded:

https://wordpress.org/support/topic/how-to-change-the-admin-url-or-wp-admin-to-secure-login/?replies=13

There are also plenty of FREE plugins that do this with one click.

https://wordpress.org/plugins/rename-wp-login/

https://wordpress.org/plugins/protect-wp-admin/

Wordfence also lets you do this and restrict IPs to the admin page.

@IRJ Thanks for the tip on renaming the wp-login. I just added that.

[Mike Davis]

I got my first round of Analytics from CloudFlare, and I'm not sure where to look.

This doesn't look right:
Top Traffic Origins
Last 24 Hours
Country Traffic
Italy 9,439
United States 6,841
Netherlands 2,145
Germany 883
Poland 826

[Mike Davis]

I installed the CloudFlare wordpress plug-in.

[JaredBusch]

@Mike-Davis said in A Small Orange - bandwidth limit exceded:

I installed the CloudFlare wordpress plug-in.

This part should be your biggest helper in dealing with bandwidth exceeded.

[scottalanmiller]

Also check out the listed threats. That'll help.

[Mike Davis]

Does this much traffic for a tiny seem out of the ordinary?

[Mike Davis]

@scottalanmiller said in A Small Orange - bandwidth limit exceded:

Also check out the listed threats. That'll help.

This?

[scottalanmiller]

@Mike-Davis Yeah, but I guess that isn't telling us much here.

[IRJ]

Are you still getting constant hits on the admin page?

[StrongBad]

I think renaming that admin portal would be smart. A simple way to protect against that part of the traffic. And it will make it easier to find what else might be a target once that is moved.

[Mike Davis]

@IRJ said in A Small Orange - bandwidth limit exceded:

Are you still getting constant hits on the admin page?

I renamed the admin page with the plug in. I'm still getting hammered, but I don't understand how. The bandwidth hasn't gone down since I went to CloudFlare or renamed the admin page. What should I look at next?

[scottalanmiller]

Does CloudFlare show the bandwidth the same? Maybe because you exposed your IP it is being hit directly for some reason?

[Mike Davis]

yes, CloudFlare shows the bandwidth the same: