Wordpress/server help? Very strange situtation..

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • jact
    Confirmed User
    • Sep 2002
    • 9134

    #1

    Wordpress/server help? Very strange situtation..

    My blog server recently started dying at random, and then it started getting worse, and getting worse, faster and faster... (Sounds like sex don't it?)

    Anyhow, after a lot of tracking (between load times on the server getting above 200) I was able to find an average of 70 queries a second on the MySQL db, but not the traffic coming in to any of the blogs to support that.

    Finally I started manually tailing apache log files and came across this...

    Code:
    ::1 - - [01/May/2007:21:50:06 -0700] "GET / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:06 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:07 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:07 -0700] "POST / HTTP/1.0" 200 1179
    ::1 - - [01/May/2007:21:50:07 -0700] "GET / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:07 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:08 -0700] "POST / HTTP/1.0" 200 1179
    ::1 - - [01/May/2007:21:50:08 -0700] "GET / HTTP/1.0" 200 1179
    ::1 - - [01/May/2007:21:50:10 -0700] "GET / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:11 -0700] "POST / HTTP/1.0" 200 1179
    ::1 - - [01/May/2007:21:50:11 -0700] "GET / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:06 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:12 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:12 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:12 -0700] "POST / HTTP/1.0" 200 1179
    ::1 - - [01/May/2007:21:50:12 -0700] "GET / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:13 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:13 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:13 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:13 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:14 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:11 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:14 -0700] "POST / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:14 -0700] "POST / HTTP/1.0" 200 1179
    ::1 - - [01/May/2007:21:50:15 -0700] "GET / HTTP/1.0" 200 1179
    127.0.0.1 - - [01/May/2007:21:50:15 -0700] "POST / HTTP/1.0" 200 1179
    WTF is ::1 as an IP, and why is my localhost hitting one of my sites with a POST every second or so? I grepped and found over 25,000 of these posts, no wonder my server was throwing a fit.

    Anyone have any ideas how to track this down? I've removed the site from my httpd.conf for now, but that's hardly a solution, more of a bandaid...
    Free agent
  • uno
    RIP Dodger. BEST.CAT.EVER
    • Dec 2002
    • 18450

    #2
    What site is this on?
    -uno
    icq: 111-914
    CrazyBabe.com - porn art
    MojoHost - For all your hosting needs, present and future. Tell them I sent ya!

    Comment

    • JD
      Too lazy to set a custom title
      • Sep 2003
      • 22651

      #3
      wtf. never seen that before man. wish i could help

      Comment

      • jact
        Confirmed User
        • Sep 2002
        • 9134

        #4
        Originally posted by uno
        What site is this on?
        Just a domain I'd hosted, installed Wordpress on and forgotten about for a few weeks.
        Free agent

        Comment

        • darksoul
          Confirmed User
          • Apr 2002
          • 4997

          #5
          ::1 is the equiv for localhost in IPV6
          Those queries look like are comming from a script you're running on your server.
          1337 5y54|)m1n: 157717888
          BM-2cUBw4B2fgiYAfjkE7JvWaJMiUXD96n9tN
          Cambooth

          Comment

          • baddog
            So Fucking Banned
            • Apr 2001
            • 107089

            #6
            Originally posted by darksoul
            ::1 is the equiv for localhost in IPV6
            Those queries look like are comming from a script you're running on your server.

            Comment

            • nikooo
              Confirmed User
              • Apr 2007
              • 1199

              #7
              is the problem solved.............

              ----- Blog Themes for $49 -----
              ------ INSTANT DELIVERY ------

              Comment

              • jact
                Confirmed User
                • Sep 2002
                • 9134

                #8
                Originally posted by darksoul
                ::1 is the equiv for localhost in IPV6
                Those queries look like are comming from a script you're running on your server.
                There's nothing in crontab, and even after reboots it starts up immediately, it's nothing I'm running intentionally...
                Free agent

                Comment

                Working...