• Resolved jpgoem

    (@jpgoem)


    I am using the security plugin WP Cerber.
    I the traffic inspector, I see many entries related to TEC, reported as “suspicious requests” :

    /wp-admin/admin-ajax.php?action=tribe_process_async_process_support_test&nonce=82a49cbff0

    POST HTTP 403 Forbidden

    IP blocked Multiple suspicious activities detected
    Spam form submission denied Bot detected

    User Agent : WordPress/6.4.2; https://xxxxxxxxxxxxxxxxx.local
    GET Fields
    action tribe_process_async_process_support_test
    nonce 82a49cbff0

    My questions :

    1. what is “tribe_process_async_process_support_test” ?
    2. is this request a normal behaviour of the TEC ?
    3. is this to be considered a suspicious request ?
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Gustavo Bordoni

    (@bordoni)

    @jpgoem thank you for the report on this.

    We have a couple o features on our codebase that require some async functionalities, and to test that a request of that nature is needed so we can test if your server can handle the async tasks.

    I would love to know how many requests are happening that look like that.

    You might be hitting an edge case where it’s doing it too often.

    Best regards,

    Thread Starter jpgoem

    (@jpgoem)

    Hi @bordoni,

    In a 3-weeks timeframe, I got about 250 occurrences of those requests, with 6 different nonces.
    The requests come in batches of about 25 to 70 occurrences, in a 5 to 10 hours period.
    With the security plugin I use, all these requests are blocked.
    I have no idea what the impact is of this blocking.

    Plugin Author Gustavo Bordoni

    (@bordoni)

    Thank you so much.

    You are not blocking anything super important, I am logging a ticket internally to fix this problem, since this amount of requests are not required.

    Best Regards,

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘what is tribe_process_async_process_support_test, and is it suspicious ?’ is closed to new replies.