Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a debian server with plesk panel, this server is used for a wordpress mu installation with 10k blogs, from apache status I see a unexplained behavior, the same server send 5/10 GET continuous requests (5/10 every second) to root url of some blogs, this is example of access_log apache - - [30/Jul/2012:22:43:58 +0200] "GET / HTTP/1.0" 200 49152 "-" "WordPress/2.9.2; http: subdomainblog .maindomain. it"

I must restart apache for solve problem but after a few minutes the problem reappears I verified my crontab and this is not problem

nb: the requests are coming from himself

share|improve this question

While a connection is open, you can use netstat -anp (run as root) to see what program opened the connection. That may help identify the where to look to find the cause.

I notice from your Apache log line that the User-Agent header of the request is WordPress. Perhaps you have a plugin that is configured to connect back to your server?

share|improve this answer

Are these requests always coming from the same IP? If so, just block that IP using iptables:

$ iptables -A INPUT -s -j DROP

Replace with the IP address the requests are coming from.

Keep in mind that this rule is not persistent between reboots. You'll need to use iptables-save and iptables-restore to save your rules on shutdown and reload them on boot.

share|improve this answer
I badly explained, the requests are coming from himself – Alessio D'Annibale Jul 30 '12 at 21:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.