manukkd

Thank you, Fixed this issue by disabled Object Caching. Turned back after enabled the Jobs

yes, it’s working, thank you

https://www.freshgulfjob.com/. (in side bar widget area)

https://www.freshgulfjob.com/walk-in-interview-dubai-uae-today-tomorrow/. (after post bottom), check from mobile device too

I have found the fonts/ez-toc-icomoon.woff2 in wp-rocket preload font section, I have removed it now

I will check the request again and update you soon

I have cleared all the cached files, still, it is requesting after installing this plugin, almost 2 months now, see the apache log

“GET /wp-content/plugin s/easy-table-of-contents/vendor/icomoon/fonts/ez-toc-icomoon.woff2 HTTP/1.1” 301

I can’t find any folder related to easy-table-of-contents in the directory

due to this request, my server resources are consuming to very high

• This reply was modified 2 years, 9 months ago by manukkd.

Finally, I have applied this code on function.php
The hosting provider share this link to follow and apply to block unauthorized accces

https://stackoverflow.com/questions/41191655/safely-disable-wp-rest-api

add_filter( 'rest_authentication_errors', function( $result ) {
    // If a previous authentication check was applied,
    // pass that result along without modification.
    if ( true === $result || is_wp_error( $result ) ) {
        return $result;
    }

    // No authentication has been performed yet.
    // Return an error if user is not logged in.
    if ( ! is_user_logged_in() ) {
        return new WP_Error(
            'rest_not_logged_in',
            __( 'You are not currently logged in.' ),
            array( 'status' => 401 )
        );
    }

    // Our custom authentication check should have no effect
    // on logged-in requests
    return $result;
});

thank you for your help,

currently, the request from the unauthenticated users is protected with the help of Disable REST API Plugin and the request gets 401 for unauthenticated users. Now the server consuming fair resources. I think someone embeds my site to another WordPress website is the main cause of the issue.

I have bypassed the wordfence from the list Disable REST API Plugin

see some more hittings to the server

/wp-json/wp/v2/posts?_embed&per_page=10
598

/wp-json/wp/v2/posts?_embed=1&search=carifour%20job&orderby=date&per_page=5
1
/wp-json/wp/v2/posts?_embed=1&search=restuarant%20supervisor%20in%20uAe&orderby=date&per_page=5
1

/wp-json/wp/v2/posts?_embed=1&search=restuarant%20job%20in%20dubai&orderby=date&per_page=5
1
/wp-json/wp/v2/posts?_embed=1&search=souschef%20vacancy&orderby=date&per_page=5
1

//wp-json/wp/v2/users/`

• This reply was modified 3 years ago by manukkd.

I haven’t tried that

Shall I try with switch to Twenty Twenty One theme?

I have deactivated all the plugins, still it is hitting

does this continue if Wordfence is deactivated?

yes

It is not related to Easy Table of Contents. Still hitting after the deactivation.

My hosting provider warn me about over CPU usage and they have shared a Get request hitting to my server, I will share the request here hitting to my server. currently, I have disabled all Rest API requests by using a plugins. but still hitting the request and currently, it’s accessible to public

some requests are as follows, now it is hitting more than 300 requests per 15 minute

“GET /wp-json/wp/v2/posts?_embed&per_page=10 H TTP/1.0” 401 935 “-” “Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36”

“GET /wp-json/wp/v2/posts?_embed&per_page=10 HT TP/1.0” 401 935 “-” “okhttp/4.9.2”

Any Solution on this?

It is not related Easy Table of Contents

After the uninstall , still loading

Hi Sir,

I have tested my website through the above link. I can see the updated version of my website. Home page is updated.

It is working now after couple of restart my PC and browser.

From there i can see the updated version of my website ( https://www.browserling.com/)

I am viewing my website as admin login access from chrome.