Our prepaid balance got depleted yesterday 3 times and we had to disable automatic payments because we’re not getting any more traffic than normal and what balance was left from yesterday is now depleted again, so some pages of our website are not working.
We have done this:
- a DEV key whilelisted only for LOCALHOST, that one will never be on the public website
- a PROD key whilelisted only for our domain
- changed the account password (just in case) and deleted the keys that were created before changing the password
Has anyone got attacked like this as well? We’re just hemorrhaging money. With the number of visitors we get that should have been enough for one year of traffic.