Unsolved A Small Orange - bandwidth limit exceded
-
@IRJ said in A Small Orange - bandwidth limit exceded:
There are also plenty of FREE plugins that do this with one click.
https://wordpress.org/plugins/rename-wp-login/
https://wordpress.org/plugins/protect-wp-admin/
Wordfence also lets you do this and restrict IPs to the admin page.
@IRJ Thanks for the tip on renaming the wp-login. I just added that.
-
I got my first round of Analytics from CloudFlare, and I'm not sure where to look.
This doesn't look right:
Top Traffic Origins
Last 24 Hours
Country Traffic
Italy 9,439
United States 6,841
Netherlands 2,145
Germany 883
Poland 826 -
I installed the CloudFlare wordpress plug-in.
-
@Mike-Davis said in A Small Orange - bandwidth limit exceded:
I installed the CloudFlare wordpress plug-in.
This part should be your biggest helper in dealing with bandwidth exceeded.
-
Also check out the listed threats. That'll help.
-
Does this much traffic for a tiny seem out of the ordinary?
-
@scottalanmiller said in A Small Orange - bandwidth limit exceded:
Also check out the listed threats. That'll help.
This?
-
@Mike-Davis Yeah, but I guess that isn't telling us much here.
-
Are you still getting constant hits on the admin page?
-
I think renaming that admin portal would be smart. A simple way to protect against that part of the traffic. And it will make it easier to find what else might be a target once that is moved.
-
@IRJ said in A Small Orange - bandwidth limit exceded:
Are you still getting constant hits on the admin page?
I renamed the admin page with the plug in. I'm still getting hammered, but I don't understand how. The bandwidth hasn't gone down since I went to CloudFlare or renamed the admin page. What should I look at next?
-
Does CloudFlare show the bandwidth the same? Maybe because you exposed your IP it is being hit directly for some reason?
-
yes, CloudFlare shows the bandwidth the same:
-
I wonder why the cache is getting so little.
-
Maybe I should put ads on the page. That seems to drive people away... Seriously, Total Unique Visitors Last 24 Hours: 2,763 If it was an attack, it would seem to be distributed.
-
Maybe there is some bizarre SEO on your page leading people there? Maybe the IP address was used for something else before?
-
Fire up Google Analytics and look for traffic source info.
-
Giving my next question it's own thread:
https://mangolassi.it/topic/13548/add-google-analytics-to-wordpress
(add Google Analytics to Wordpress?) -
I added Google Analytics. I can see when I hit the page, it says 1 active session. Otherwise it's sitting at 0 active sessions. -Which is what I expect for this seldom used site. However, Cloudflare and A Small Orange insist I'm getting 200+ unique visitors an hour. Where do I go next?
-
That suggests it isn't picking up the JavaScript. It's a bot of some sort.
