Large number of requests for two ips to hosting wordpress (Possible attack?)

Navigation
0

Very good, I have two ips in the webpage hosting in wordpress that make requests to me practically every second. The server is maintained but when I give it a reed or there is a slight peak of visits the server is overloaded.

This is a vps in which I only have 1 wordpress and I have 2 GB of ram and a single core for this web, so the lack of resources must come from somewhere and I think these are the following requests:

  

Ip1 - - [20 / Dec / 2018: 12: 07: 05 +0100] "HEAD / HTTP / 1.1" 301 0 "-" "-"   52

     

Ip2 - - [20 / Dec / 2018: 12: 07: 05 +0100] "HEAD / HTTP / 1.1" 301 0 "-" "-"   52

     

Ip1 - - [20 / Dec / 2018: 12: 07: 05 +0100] "HEAD / HTTP / 1.1" 301 0 "-" "-"   52

     

Ip2 - - [20 / Dec / 2018: 12: 07: 06 +0100] "HEAD / HTTP / 1.1" 301 0 "-" "-"   52

     

Ip2 - - [20 / Dec / 2018: 12: 07: 06 +0100] "HEAD / HTTP / 1.1" 301 0 "-" "-"   52

     

Ip2 - - [20 / Dec / 2018: 12: 07: 07 +0100] "HEAD / HTTP / 1.1" 301 0 "-" "-"   52

     

Ip1 - - [20 / Dec / 2018: 12: 07: 07 +0100] "HEAD / HTTP / 1.1" 301 0 "-" "-"   52

This is repeated without rest all day, for a few weeks now.

Can someone confirm that it could be an attack or scrape of the web? And what steps should I take to stop these requests from being carried out?

Greetings and thanks,

    
asked by Manuel SAN 20.12.2018 в 12:41
source

2 answers

2

I do not know if it is an attack. What I can tell you is that you are trying to access a resource that has moved from location, and that is the response message. It is possible that someone (or something) is trying to repeatedly access a resource that is no longer where it was.

If it is always the same IP, a boat soon it occurs to me that you block requests from that IP from your server. I leave this link that tells you about the requests 301 and how to treat and manage them:

link

    
answered by 20.12.2018 в 12:52
-1

It's probably hotlinking

Add the following to your .htacces 

RewriteEngine on
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^http://(www\.)example.com/.*$ [NC]
RewriteRule \.(gif|jpg|jpeg|bmp|zip|rar|mp3|flv|swf|xml|php|png|css|pdf)$ - [F]
  

Do not forget to replace your domain.

    
answered by 20.12.2018 в 17:00
Problem when selecting elements within other elements with JQuery Hover by Jquery does not work when I change display to mobile in chrome