Excessive generated traffic in the logs

  • WordPress 2.8.5, CentOS 5

    We have a site that generates excessive amount of traffic according to the Apache logs. According to the logs the site is generating about 150MB of “viewed” traffic but 10-15GB of “not viewed” traffic. The log files are full of the 7 lines below which are generated every 10th of a second with a new timestamp. The strange thing is that the IP address (38.106.14.185) is the shared IP address of the server itself.

    38.106.14.185 – – [22/Nov/2009:02:10:27 -0800] “GET /blog/ HTTP/1.0” 301 0 “-” “WordPress/2.8.5; https://www.foo.com/blog”
    38.106.14.185 – – [22/Nov/2009:02:10:27 -0800] “GET /blog/ HTTP/1.0” 200 26598 “-” “WordPress/2.8.5; https://www.foo.com/blog”
    38.106.14.185 – – [22/Nov/2009:02:10:27 -0800] “GET /blog HTTP/1.0” 301 229 “-” “WordPress/2.8.5; https://www.foo.com/blog”
    38.106.14.185 – – [22/Nov/2009:02:10:27 -0800] “GET /blog/ HTTP/1.0” 301 0 “-” “WordPress/2.8.5; https://www.foo.com/blog”
    38.106.14.185 – – [22/Nov/2009:02:10:27 -0800] “GET /blog/ HTTP/1.0” 200 26598 “-” “WordPress/2.8.5; https://www.foo.com/blog”
    38.106.14.185 – – [22/Nov/2009:02:10:27 -0800] “GET /blog HTTP/1.0” 301 229 “-” “WordPress/2.8.5; https://www.foo.com/blog”
    38.106.14.185 – – [22/Nov/2009:02:10:27 -0800] “GET /blog/ HTTP/1.0” 301 0 “-” “WordPress/2.8.5; https://www.foo.com/blog”

    Any thoughts of what is going on is highly appreciated.

    //jonas

Viewing 1 replies (of 1 total)

  • Hi,

    I run WordPress Mu (2.9.1), but I thought I’d reply because I see something similar in my logs. My apache logs have requests coming from localhost (127.0.0.1) that are returning 302 redirects. An interesting point is that the GET says HTTP/1.0 (not 1.1).

    Sometimes it “gets” so bad the server can’t take the load. It’s like it DoS’s itself!

    So there are two questions:
    1) Why do HTTP/1.0 GETs return redirects?
    What’s interesting here is that doing a GET / HTTP/1.0 via telnet does return 200 if I specify the host, but returns 302 error if I don’t. I think this is because (for me at least) my domain name is listed as a virtual host in my apache config.
    2) Why is the server hosting wordpress doing GETs of itself?
    This I’m not sure about. Maybe it’s a plugin (e.g. akismet)? Any ideas?

    My apologies if my issue is specific to Mu, but I thought I’d reply as it appears netwood99 has a similar issue.

    Thanks,
    Ian

Viewing 1 replies (of 1 total)
  • The topic ‘Excessive generated traffic in the logs’ is closed to new replies.