Non stop GET request in WordPress Access Log

  • I’m running an e-commerce store on top of WordPress/Woo-commerce and I’m wondering whether it’s normal to have an almost non-stop GET request log in apache’s access log.

    My website is hosted on Amazon EC2 running on WordPress Bitnami’s image.

    Here’s part of the log:

    172.31.26.171 - - [09/May/2020:13:41:03 +0000] "GET /product-category/printable-templates?query_type_color=or&filter_color=bluecoralpeachpurpleturquoisewhiteyellow&product_orderby=name HTTP/1.1" 301 -
172.31.26.171 - - [09/May/2020:13:41:04 +0000] "GET /product-category/printable-templates/?query_type_color=or&filter_color=bluecoralpeachpurpleturquoisewhiteyellow&product_orderby=name HTTP/1.1" 200 17211
172.31.26.171 - - [09/May/2020:13:41:05 +0000] "GET /product-tag/floral-invitation?query_type_color=or&filter_color=browncoralgoldgraymintorangepeachred&product_count=45 HTTP/1.1" 301 -
172.31.26.171 - - [09/May/2020:13:41:06 +0000] "GET /product-tag/floral-invitation/?query_type_color=or&filter_color=browncoralgoldgraymintorangepeachred&product_count=45 HTTP/1.1" 200 17041
172.31.33.229 - - [09/May/2020:13:41:08 +0000] "GET /product-category/printable-templates/wedding-templates/wedding-invitation-templates?query_type_color=or&filter_color=black%2Cblue%2Ccoral%2Cplum%2Cpurple%2Cteal&product_orderby=price HTTP/1.1" 301 -

    What’s weird is that eventually, it logs 100% CPU usage causing my server to go frozen.

    Note that 172.x.x.x is part of my subnet, I don’t understand why I have this log.

Viewing 1 replies (of 1 total)
  • Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    172.31.x.x is a non-routable address, which means its internal to your network. This may be something on your site hammering itself or another EC2 server scanning yours for vulns, etc.

    I’d block the addresses via iptables and see if anything breaks. (I’m assuming your server supports iptables.) 

    sudo iptables -I INPUT -j DROP -s 172.31.26.171
sudo iptables -I INPUT -j DROP -s 172.31.33.229
Viewing 1 replies (of 1 total)
  • The topic ‘Non stop GET request in WordPress Access Log’ is closed to new replies.

Tags