Hi @mayank29gupta, thanks for the information and supporting screenshot from your host.
The screenshot shows those requests running one after another, some of which are happening within the same second, which shouldn’t be happening normally. It does look like they’re timing out because of the fairly standard 60 second average duration. Typically, this URL is requested from the server’s own IP but if the server can’t make connections back to itself, then the syncAttackData URL is loaded by a user’s browser when necessary.
If the site is under heavy attack and the front of site is being propped up by CDN/proxy caching, the syncAttackData calls could be timing out because the backend is basically down. This seems to tally with why the site couldn’t connect to database followed by the admin section loading very slowly.
It is worth checking to see if re-enabling Wordfence causes the issue to immediately come back. Wordfence could certainly be affected by a possible DDOS or brute force type attack, especially as it needs to read/write the database during a scheduled scan. The timeouts and previous database connectivity issues seem to tally with this, but I’m not convinced Wordfence is the actual root cause.
If the problems immediately return when Wordfence is back in the mix, can you send a diagnostic report to wftest @ wordfence . com? You can find the link to do so at the top of the Wordfence > Tools > Diagnostics page. Then click on “Send Report by Email”. Please add your forum username where indicated and respond here after you have sent it.
NOTE: It should look as follows – Screenshot of Tools > Diagnostic > Send by Email
Thanks,
Peter.
