I’m experiencing near constant downtime on mymydiy.com and other sites. SiteGround is telling me that the requests on mymydiy are principally caused by: wp-json/tdw/save_css
They told me:
“If you know which plugin, script or setting is causing the numerous requests for “wp-json/tdw/save_css” to be made, I would recommend disabling it or consulting its creators on how to reduce the amount of requests.”
Top 10 requested URLs:
188046 /wp-json/tdw/save_css
68831
5074 /wp-json
1733 /feed
1455 /robots.txt
1051 /wp-includes/js/jquery/jquery.min.js?ver=3.7.1
952 /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
926 /wp-includes/css/dist/block-library/style.min.css?ver=6.4.1
897 /wp-includes/js/comment-reply.min.js?ver=6.4.1
771 /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.2.5
These issues also seem to coincide with the WordPress 6.4.1 update that rolled out. Trying to figure out what to do- any insights since the excessive requests seem to be coming from Newspaper and its associated plugins.
Hello,
The “wp-json/tdw/save_css” I think it can be related to the bots that want to inject malwares in the theme live css, what I recommend is to install the Wordfence plugin and restrict that link and block the ip-s that attempt to inject those links.
I hope this will help you!
Thank you!
This is what SG is telling me:
I reviewed the matter and this particular type of request appears to be an attack to TagDiv Composer’s REST-API functionality. I will provide a breakdown with the requests made to this URL across your sites:
25175 chinchillabreeders.org
11001 mymydiy.com
10123 banneradviser.com
10097 walki-talki.com
9825 bronxnyhealthcare.com
9553 mightypricey.com
5515 thesavvyinsomniac.com
5472 buttersoda.com
5108 nichefacts.com
120 3dprintingpricecheck.com
1 beachrangers.com
Do note that due to the intensity of the requests leads to an overload of the MySQL service, which is why the automatic scaling did not help. I found an article on Sucuri’s site which explains the problem and how to approach it:
