Need translation (and fix?) for this AJAX log entry…

  • Can anyone tell me what is going on here:

    23.229.148.132 – – [07/Jun/2015:06:54:08 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:54:08 -0700] “POST /wp-cron.php?doing_wp_cron=1433685247.8222520351409912109375 HTTP/1.0” 200 – “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:54:33 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:54:10 -0700] “GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&cronKey=7bf4853b59657f8f268b4b3 HTTP/1.0” 200 – “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:54:49 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:54:33 -0700] “GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&cronKey=6f822b2718b7ac775855ec3a HTTP/1.0” 200 – “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:55:04 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:54:49 -0700] “GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&cronKey=73c900644ade1740fa30f0c HTTP/1.0” 200 – “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:55:20 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:55:36 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:55:21 -0700] “GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&cronKey=233aa48f1a18ad964f460b4d HTTP/1.0” 200 – “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:55:52 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:55:36 -0700] “GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=1&cronKey=217c396af5a007d4f83d229 HTTP/1.0” 200 – “-” “WordPress/4.2.2; https://www.nwosbs.com”
    23.229.148.132 – – [07/Jun/2015:06:56:08 -0700] “POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.0” 200 12 “-” “WordPress/4.2.2; https://www.nwosbs.com”

    We are talking page after page of that. The IP comes back to the host–GoDaddy.

    Am I being attacked?

    Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)

  • is https://www.nwosbs.com your wordpress site? is yes then its the Wordfence plugin that is running a cron job, as the url itself defines.. action=wordfence_doScan&isFork=1&cronKey. go to your hosting panel and remove the cronjob if you want to disable that.

    Thread Starter Drosgrove

    (@drosgrove)

    Yes, ii is.

    Where would I go to find out what that cronjob is doing? I mean, if it is something critical I don’t want to stop it. If it is simply some piece of fluff consuming resources I may wish to get rid of it.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Need translation (and fix?) for this AJAX log entry…’ is closed to new replies.

Tags