AI Assistant

Notifications

Clear all

update

Summarize Topic

How-to and Troubleshooting

Last Post by Asti 1 year ago

12 Posts

2 Users

2 Reactions

1,253 Views

RSS

Posts: 7

Vacate7939

Topic starter

Translate ▼

Dec 23, 2024 4:07 am

(@vacate7939)

Active Member

Joined: 2 years ago

[#9411]

Hi,

We had an increase in traffic to our site, which increased our CPU usage over the limit.

Investigating further, we found via Cloudflare that `/wp-json/wpdiscuz/v1/update` was getting pinged by the thousands from many different IPs.

So I disabled the live comment bubble entirely and cleared the cache but the requests kept coming. I then enabled the "I am under Attack" function via Cloudflare and it started mitigating all of those requests.

I then deactivated the wpDiscuz plugin and the requests are still coming in.

Is this an attack or is there something I am missing regarding the plugin?

Thanks and regards,

Tug

Website URL

https://t4gsports.com

Topic Tags

11 Replies

Posts: 8294

Asti

Support

Translate ▼

Dec 23, 2024 1:41 pm

(@asti)

Illustrious Member

Joined: 8 years ago

Hi,

You should deactivate the wpDiscuz Comment Bubble and the Live Update options and check again.

Both options can be found in the Dashboard > wpDiscuz > Settings > Live Commenting and Notifications admin page.

Please properly clear all kinds of caches before checking.

In case you want to say thank you! 🙂
We'd really appreciate if you leave a good review on the plugin page.
This is the best way to say thank you to this project and the support team.

Posts: 7

Vacate7939

Topic starter

Translate ▼

Dec 24, 2024 2:12 am

(@vacate7939)

Active Member

Joined: 2 years ago

I did that:

Posted by: @vacate7939

↑

I disabled the live comment bubble entirely and cleared the cache but the requests kept coming. I then enabled the "I am under Attack" function via Cloudflare and it started mitigating all of those requests.

I then deactivated the wpDiscuz plugin and the requests are still coming in.

I'm curious if those requests should still come in after deactivating the plugin. Is that normal behavior or is this an attack? It has been 24 hours and the requests are still coming in and the plugin is still deactivated.

Thanks!

Posts: 7

Vacate7939

Topic starter

Translate ▼

Dec 24, 2024 2:32 am

(@vacate7939)

Active Member

Joined: 2 years ago

Just to give an update, I added a custom rule to Cloudflare for /wp-json/* to use a JavaScript challenge. Is there anything wrong with doing that or should that be fine?

6 Replies

Asti

Support

(@asti)

Joined: 8 years ago

Illustrious Member

Posts: 8294

Dec 24, 2024 1:57 pm

Reply to

Vacate7939

Translate ▼

@vacate7939

his is likely just a cache issue. Please clear all caches before checking.

If you deactivate the wpDiscuz plugin, it will stop sending any requests.

In case you want to say thank you! 🙂
We'd really appreciate if you leave a good review on the plugin page.
This is the best way to say thank you to this project and the support team.

Vacate7939

(@vacate7939)

Joined: 2 years ago

Active Member

Posts: 7

Dec 25, 2024 3:45 am

Reply to

Asti

Translate ▼

@asti

Yeah, so I deactivated the plugin, cleared all cache, and got hit with thousands every 24 hours.

I now have it activated with the comment bubble on and I see on Cloudflare that there were 71.83K hits to /wp-json/wpdiscuz/v1/update in the past 24 hours.

Is this normal behavior?

Asti

Support

(@asti)

Joined: 8 years ago

Illustrious Member

Posts: 8294

Dec 25, 2024 1:29 pm

Reply to

Vacate7939

Translate ▼

@vacate7939

This depends on various factors, such as the settings you’ve configured for the bubble, the number of visitors to your website, and more. Unfortunately, there isn’t a definitive answer to this question.

In case you want to say thank you! 🙂
We'd really appreciate if you leave a good review on the plugin page.
This is the best way to say thank you to this project and the support team.

Vacate7939

(@vacate7939)

Joined: 2 years ago

Active Member

Posts: 7

Dec 26, 2024 10:34 pm

Reply to

Asti

Translate ▼

@asti

Gotcha. Thanks for the insight; I appreciate it. I have attached the settings for the comment bubble.

With the comment bubble settings, should we be getting any requests to /wp-json/wpdiscuz/v1/update? So far, the hits remain unchanged.

All cache has been cleared.

Vacate7939

(@vacate7939)

Joined: 2 years ago

Active Member

Posts: 7

Dec 26, 2024 10:35 pm

Reply to

Asti

Translate ▼

@asti

I also want to note that the hits are coming from different IP addresses. I can list them if you would like.

Asti

Support

(@asti)

Joined: 8 years ago

Illustrious Member

Posts: 8294

Dec 28, 2024 2:04 pm

Reply to

Vacate7939

Translate ▼

@vacate7939

The developers will add a new option. It monitors user interactions with the website and sends live updates accordingly. Once the new version is ready (no ETA yet), please check it and let us know how it works. It should function fine.

In case you want to say thank you! 🙂
We'd really appreciate if you leave a good review on the plugin page.
This is the best way to say thank you to this project and the support team.