Live from wi24rd.com
Do you know what is happening on your domain right now?
wi24rd.com is a small site. Still, automated attacks knock on the door around the clock. Here is what Cloudflare stopped – fetched live and explained without jargon.
- Last day
- – stopped at the gate
- 7 days
- – stopped at the gate
- Share of traffic
- – requests was stopped (30 days)
- Snoopers
- – looked for files that do not exist (7 days)
Requests stopped at the gate in the last 30 days: –
Fetching the figures from Cloudflare …
Latest
The latest Cloudflare stopped.
Each line is a real request against wi24rd.com, translated into what it tried to do. Not all of it is malicious – a forgotten test script can end up in the maze too – but none of it reached the site.
No hoodies
Almost all of it is automation: programs on rented servers trying the same tricks against millions of addresses. They do not check what you run. They just try everything.
Fetching …
What they looked for
They are not looking for you. They are looking for your keys.
The robots ask for files that, on many small business sites, are left out by accident. wi24rd.com has none of them, so they got nothing – but consider whether your web host could answer yes.
Known vulnerabilities
Attacks on software we do not even use.
When a new hole becomes public, it often takes only hours before robots try it everywhere. Cloudflare adds a rule for all customers – including the free plan wi24rd.com uses.
Where from
From rented servers, not basements.
Countries
Networks
The country is where the server stands – not necessarily where the attacker sits.
Robots that lie
–
Cloudflare checks that a bot calling itself Google actually comes from Google’s network.
See the crawlersThe door to the admin area
–
The admin area sits behind Cloudflare Access: you have to log in with Cloudflare before the page even exists.
See the doorHow to protect yourself
Most of this is free.
wi24rd.com runs on Cloudflare’s free plan. The defences above are not an expensive product, but a few switches and a little care.
Put your domain behind Cloudflare
Move DNS to Cloudflare and switch on the proxy (the orange cloud). Then all traffic goes through their network, and DDoS protection and the managed rules stand in front of the site from the first minute.
Switch on the bot protection
Under Security → Bots: Bot Fight Mode stops known malicious bots, and AI Labyrinth lures dishonest crawlers into fake pages instead of the real ones.
Lock the admin area
Put login pages behind Cloudflare Access (free for small teams), so only people you have approved can even see them.
Keep watch from outside
Get notified when a new port opens, and when someone issues a certificate for your domain. Both are described step by step in Security tips.
Wi24rd has no financial interest in Cloudflare. The figures are the same as The defences and The crawlers in the machine room show, and they store nothing about you.
Missing a tip?
Write what you would like explained. The next security tip could be yours.