Identifying connections and sites

  • Every so often my multisite WP install is becoming unresponsive due to a high number of connection attempts (>6000 simultaneous connections). This manifests itself in an “Unable to connect to database” error. The strange part is that these connections are coming from my WP server. From the access_logs:

    10.0.0.123 blogs.mysite.edu – – 80 [10/Feb/2017:02:04:27 -0500] “GET /home-page/sample-page/mary/ HTTP/1.0” “” 500 251 “-” “-” 76 557 54484

    Where 10.0.0.123 is the IP address of my WP server. I’m getting tons of these messages. Obviously, there is no data being retrieved (500 error code), but there is so many of them that they are effectively DOS’ing my server.

    I’ve eliminated the possibility that the connections are coming from a CLI session. Therefore they must be coming from the WP install. Is there any way to tell on what site these connection attempts are originating from?

    Thanks,
    Mike

Viewing 3 replies - 1 through 3 (of 3 total)

  • WP Core doesnt do that. You must have some plugin that is extracting data. Possibly a caching type plugin. Scan through your list of plugins; maybe disable the suspects.

    Thread Starter 1337mirth

    (@1337mirth)

    Ok, that sounds like a good idea. Is there a way I can identify what sites have most recently been modified in a multisite install?

    > Is there a way I can identify what sites have most recently been modified in a multisite install?

    Not that I know of. I would just look at the Apache logs. If it contains the hostname and url, you should be able to narrow down which subsite is making those requests. It could be one subsite, or it could be coming from all sites. Scan through your list of plugins, visit the plugin support forums to see if anyone else is experiencing the same issue.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Identifying connections and sites’ is closed to new replies.

Tags