So I have an e-commerce site on a subsite shop.thebrewkettle.com using wordpress template.
My site was taken down due to the message below. (was running perfectly for about a year now)
Things started getting slow last week so I added jet pack and a wp super cache to the wp admin, after that is when i got this message.
I dont know how to read that message below.
Is this a wordpress thing? Or is it coming from any of this ecom software? Did I get a bug or malware?
I have replied to the email that I deleted the plugins. I only have 1 plug in and theme running now on this subdomain.
Site is down so you cannot check it live.
Any insight is appreciated.



Attachments
2:57 PM (1 hour ago)
to me

Hello,

We have temporarily disabled {shop.thebrewkettle.com} because it was causing performance issues on the server. Generally, we attempt to resolve these issues without disabling sites; however, this site began to affect the performance for all users on the system. In this case, we acted to preserve the overall server stability. The report at the end of this ticket provides additional information about the site activity during this period.

Please reply to this ticket with your public IP address and we will enable HTTP access for you. This allows you to safely work on the website without causing additional disruptions. If your IP address changes often, simply let us know and we can provide you with password based access. Once you have evaluated and optimized the website, please reply to this email with a brief summary of your changes. Upon review, we can re-enable general access to the site.

Attached website summary of problematic activity and traffic sample output


ref:_00D36qEW6._5001Q13ZsTz:ref
...

[Message clipped] View entire message
Attachments area

Attachments area

207.46.13.202 "GET /pxb.kp shop.thebrewkettle.com
207.46.13.202 "GET /pxb.kp shop.thebrewkettle.com
207.46.13.202 "GET /lkrek shop.thebrewkettle.com
207.46.13.202 "GET /lkrek shop.thebrewkettle.com
207.46.13.202 "GET /quhaf shop.thebrewkettle.com
207.46.13.202 "GET /quhaf shop.thebrewkettle.com
207.46.13.202 "GET /wys.gm shop.thebrewkettle.com
207.46.13.202 "GET /wys.gm shop.thebrewkettle.com
207.46.13.202 "GET /ulqp shop.thebrewkettle.com
207.46.13.202 "GET /ulqp shop.thebrewkettle.com
207.46.13.202 "GET /ygpwen shop.thebrewkettle.com
207.46.13.202 "GET /ygpwen shop.thebrewkettle.com
207.46.13.202 "GET /stg.jo shop.thebrewkettle.com
207.46.13.202 "GET /stg.jo shop.thebrewkettle.com
207.46.13.202 "GET /zxl.ad shop.thebrewkettle.com
207.46.13.202 "GET /zxl.ad shop.thebrewkettle.com
207.46.13.202 "GET /qdx.ir shop.thebrewkettle.com
207.46.13.202 "GET /qdx.ir shop.thebrewkettle.com
207.46.13.202 "GET /gxuo.ne shop.thebrewkettle.com
207.46.13.202 "GET /gxuo.ne shop.thebrewkettle.com
207.46.13.202 "GET /bxbp shop.thebrewkettle.com
207.46.13.202 "GET /bxbp shop.thebrewkettle.com
207.46.13.202 "GET /mvnf.wtf shop.thebrewkettle.com
207.46.13.202 "GET /mvnf.wtf shop.thebrewkettle.com
207.46.13.202 "GET /pfjggg shop.thebrewkettle.com
207.46.13.202 "GET /pfjggg shop.thebrewkettle.com
207.46.13.202 "GET /vtxp shop.thebrewkettle.com
207.46.13.202 "GET /vtxp shop.thebrewkettle.com
207.46.13.202 "GET /ncrgub shop.thebrewkettle.com
207.46.13.202 "GET /ncrgub shop.thebrewkettle.com
207.46.13.202 "GET /ruq6 shop.thebrewkettle.com
207.46.13.202 "GET /ruq6 shop.thebrewkettle.com
207.46.13.202 "GET /euaisp shop.thebrewkettle.com
207.46.13.202 "GET /euaisp shop.thebrewkettle.com
207.46.13.202 "GET /idry shop.thebrewkettle.com
207.46.13.202 "GET /idry shop.thebrewkettle.com
207.46.13.202 "GET /ulqp shop.thebrewkettle.com
207.46.13.202 "GET /ulqp shop.thebrewkettle.com
207.46.13.202 "GET /qqc.do shop.thebrewkettle.com
207.46.13.202 "GET /qqc.do shop.thebrewkettle.com
207.46.13.202 "GET /bnibq.ck shop.thebrewkettle.com
207.46.13.202 "GET /bnibq.ck shop.thebrewkettle.com
207.46.13.202 "GET /hxp.re shop.thebrewkettle.com
207.46.13.202 "GET /hxp.re shop.thebrewkettle.com
207.46.13.202 "GET /kdwd shop.thebrewkettle.com
207.46.13.202 "GET /kdwd shop.thebrewkettle.com
207.46.13.202 "GET /ntn.tl shop.thebrewkettle.com
207.46.13.202 "GET /ntn.tl shop.thebrewkettle.com
207.46.13.202 "GET /yunpr shop.thebrewkettle.com
207.46.13.202 "GET /yunpr shop.thebrewkettle.com
207.46.13.202 "GET /wuiuz shop.thebrewkettle.com
207.46.13.202 "GET /wuiuz shop.thebrewkettle.com
207.46.13.202 "GET /tmpy shop.thebrewkettle.com
207.46.13.202 "GET /tmpy shop.thebrewkettle.com
207.46.13.202 "GET /kka.gd shop.thebrewkettle.com
207.46.13.202 "GET /kka.gd shop.thebrewkettle.com
207.46.13.202 "GET /veu4 shop.thebrewkettle.com
207.46.13.202 "GET /veu4 shop.thebrewkettle.com
207.46.13.202 "GET /hl/ shop.thebrewkettle.com
207.46.13.202 "GET /hl/ shop.thebrewkettle.com
207.46.13.174 "GET /vha.au shop.thebrewkettle.com
207.46.13.174 "GET /vha.au shop.thebrewkettle.com
66.249.65.19 "GET /sitemapimages70.xml shop.thebrewkettle.com
66.249.65.19 "GET /sitemapimages70.xml shop.thebrewkettle.com
40.77.167.168 "GET /r1y0flhq shop.thebrewkettle.com
40.77.167.168 "GET /r1y0flhq shop.thebrewkettle.com
40.77.167.168 "GET /mvwet shop.thebrewkettle.com
40.77.167.168 "GET /mvwet shop.thebrewkettle.com
207.46.13.29 "GET /1dd5yy.engineer shop.thebrewkettle.com
207.46.13.29 "GET /1dd5yy.engineer shop.thebrewkettle.com
207.46.13.29 "GET /yla shop.thebrewkettle.com
207.46.13.29 "GET /yla shop.thebrewkettle.com
207.46.13.29 "GET /cdrxno shop.thebrewkettle.com
207.46.13.29 "GET /cdrxno shop.thebrewkettle.com
40.77.167.168 "GET /hgug shop.thebrewkettle.com
40.77.167.168 "GET /hgug shop.thebrewkettle.com
157.55.39.221 "GET /hxb.ck shop.thebrewkettle.com
157.55.39.221 "GET /hxb.ck shop.thebrewkettle.com
157.55.39.221 "GET /adb.do shop.thebrewkettle.com
157.55.39.221 "GET /adb.do shop.thebrewkettle.com
157.55.39.221 "GET /0if4 shop.thebrewkettle.com
157.55.39.221 "GET /0if4 shop.thebrewkettle.com
40.77.167.168 "GET /tel:055-999-0166 shop.thebrewkettle.com
40.77.167.168 "GET /tel:055-999-0166 shop.thebrewkettle.com
40.77.167.168 "GET /bydupn shop.thebrewkettle.com
40.77.167.168 "GET /bydupn shop.thebrewkettle.com
40.77.167.168 "GET /zeoqx shop.thebrewkettle.com
40.77.167.168 "GET /zeoqx shop.thebrewkettle.com
207.46.13.29 "GET /m374p7w5x shop.thebrewkettle.com
207.46.13.29 "GET /m374p7w5x shop.thebrewkettle.com
40.77.167.35 "GET /jmu.uz shop.thebrewkettle.com
40.77.167.35 "GET /jmu.uz shop.thebrewkettle.com
40.77.167.35 "GET /vjkc shop.thebrewkettle.com
40.77.167.35 "GET /vjkc shop.thebrewkettle.com
40.77.167.35 "GET /jps.bw shop.thebrewkettle.com
40.77.167.35 "GET /jps.bw shop.thebrewkettle.com
207.46.13.174 "GET /index.php/2ry shop.thebrewkettle.com
207.46.13.174 "GET /index.php/2ry shop.thebrewkettle.com
207.46.13.174 "GET /kzhq shop.thebrewkettle.com
207.46.13.174 "GET /kzhq shop.thebrewkettle.com
40.77.167.168 "GET /bcs.um shop.thebrewkettle.com
40.77.167.168 "GET /bcs.um shop.thebrewkettle.com
207.46.13.202 "GET /chishiki/kankei03.htm shop.thebrewkettle.com
207.46.13.202 "GET /chishiki/kankei03.htm shop.thebrewkettle.com
207.46.13.202 "GET /d4bn5xw.sl shop.thebrewkettle.com
207.46.13.202 "GET /d4bn5xw.sl shop.thebrewkettle.com
207.46.13.202 "GET /zkn.km shop.thebrewkettle.com
207.46.13.202 "GET /zkn.km shop.thebrewkettle.com
207.46.13.202 "GET /qbqwid shop.thebrewkettle.com
207.46.13.202 "GET /qbqwid shop.thebrewkettle.com
207.46.13.202 "GET /csaj shop.thebrewkettle.com
207.46.13.202 "GET /csaj shop.thebrewkettle.com
157.55.39.221 "GET /c8x shop.thebrewkettle.com
157.55.39.221 "GET /c8x shop.thebrewkettle.com
157.55.39.221 "GET /mu72fn/bcd41gsnf7kx77ea6lbf16571y4mpyq913tow4bkos.design shop.thebrewkettle.com
157.55.39.221 "GET /mu72fn/bcd41gsnf7kx77ea6lbf16571y4mpyq913tow4bkos.design shop.thebrewkettle.com
157.55.39.221 "GET /f54c6h.cloud shop.thebrewkettle.com
157.55.39.221 "GET /f54c6h.cloud shop.thebrewkettle.com
157.55.39.221 "GET /uajc shop.thebrewkettle.com
157.55.39.221 "GET /uajc shop.thebrewkettle.com
157.55.39.221 "GET /473tb shop.thebrewkettle.com
157.55.39.221 "GET /473tb shop.thebrewkettle.com
40.77.167.168 "GET /887s0s.au shop.thebrewkettle.com
40.77.167.168 "GET /887s0s.au shop.thebrewkettle.com
157.55.39.221 "GET /h6aqsa/f9czgcakcvpo50k73.np shop.thebrewkettle.com
207.46.13.29 "GET /2ui8a08f8 shop.thebrewkettle.com
207.46.13.29 "GET /2ui8a08f8 shop.thebrewkettle.com
157.55.39.221 "GET /akhf shop.thebrewkettle.com
157.55.39.221 "GET /akhf shop.thebrewkettle.com
207.46.13.29 "GET /3w6p shop.thebrewkettle.com
207.46.13.29 "GET /3w6p shop.thebrewkettle.com
207.46.13.202 "GET /jegql shop.thebrewkettle.com
207.46.13.202 "GET /jegql shop.thebrewkettle.com
40.77.167.168 "GET /3lhwi shop.thebrewkettle.com
40.77.167.168 "GET /3lhwi shop.thebrewkettle.com
157.55.39.221 "GET /770s27 shop.thebrewkettle.com
157.55.39.221 "GET /770s27 shop.thebrewkettle.com
157.55.39.221 "GET /go7gyo/vq01shbla16420xu4fgt3l shop.thebrewkettle.com
157.55.39.221 "GET /go7gyo/vq01shbla16420xu4fgt3l shop.thebrewkettle.com
157.55.39.221 "GET /wlhg shop.thebrewkettle.com
157.55.39.221 "GET /wlhg shop.thebrewkettle.com
207.46.13.174 "GET /bqo.ec shop.thebrewkettle.com
207.46.13.174 "GET /bqo.ec shop.thebrewkettle.com
207.46.13.174 "GET /ssi.um shop.thebrewkettle.com
207.46.13.174 "GET /ssi.um shop.thebrewkettle.com
207.46.13.174 "GET /jyqbd shop.thebrewkettle.com
207.46.13.174 "GET /jyqbd shop.thebrewkettle.com
40.77.167.35 "GET /cpoem shop.thebrewkettle.com
40.77.167.35 "GET /cpoem shop.thebrewkettle.com
40.77.167.35 "GET /yae shop.thebrewkettle.com
40.77.167.35 "GET /yae shop.thebrewkettle.com
157.55.39.221 "GET /3opx7cvc shop.thebrewkettle.com
157.55.39.221 "GET /3opx7cvc shop.thebrewkettle.com
40.77.167.168 "GET /oaf5m60z shop.thebrewkettle.com
157.55.39.221 "GET /nvsstg shop.thebrewkettle.com
40.77.167.168 "GET /oaf5m60z shop.thebrewkettle.com
157.55.39.221 "GET /nvsstg shop.thebrewkettle.com
40.77.167.168 "GET /xgk.td shop.thebrewkettle.com
40.77.167.168 "GET /xgk.td shop.thebrewkettle.com
157.55.39.221 "GET /w1u7dt7v1.today shop.thebrewkettle.com
157.55.39.221 "GET /w1u7dt7v1.today shop.thebrewkettle.com
40.77.167.168 "GET /1kio4.comhk shop.thebrewkettle.com
40.77.167.168 "GET /1kio4.comhk shop.thebrewkettle.com
40.77.167.168 "GET /6cjc shop.thebrewkettle.com
40.77.167.168 "GET /6cjc shop.thebrewkettle.com
207.46.13.174 "GET /yskf shop.thebrewkettle.com
207.46.13.174 "GET /yskf shop.thebrewkettle.com
207.46.13.174 "GET /xzpy shop.thebrewkettle.com
207.46.13.174 "GET /xzpy shop.thebrewkettle.com
207.46.13.174 "GET /fusaz shop.thebrewkettle.com
207.46.13.174 "GET /fusaz shop.thebrewkettle.com
207.46.13.29 "GET /kokunai shop.thebrewkettle.com
207.46.13.29 "GET /kokunai shop.thebrewkettle.com
207.46.13.29 "GET /ss/arvr/ shop.thebrewkettle.com
207.46.13.29 "GET /ss/arvr/ shop.thebrewkettle.com
207.46.13.29 "GET /xh5p08ahl.asia shop.thebrewkettle.com
207.46.13.29 "GET /xh5p08ahl.asia shop.thebrewkettle.com
207.46.13.29 "GET /egtqd shop.thebrewkettle.com
207.46.13.29 "GET /egtqd shop.thebrewkettle.com
157.55.39.221 "GET /heuexpz shop.thebrewkettle.com
157.55.39.221 "GET /heuexpz shop.thebrewkettle.com
157.55.39.221 "GET /zxibp3/vkap8d7oshkfp7mt44yxu3 shop.thebrewkettle.com
157.55.39.221 "GET /zxibp3/vkap8d7oshkfp7mt44yxu3 shop.thebrewkettle.com
157.55.39.221 "GET /gppc shop.thebrewkettle.com
157.55.39.221 "GET /gppc shop.thebrewkettle.com
207.46.13.202 "GET /dofv shop.thebrewkettle.com
207.46.13.202 "GET /dofv shop.thebrewkettle.com
207.46.13.202 "GET /tefk shop.thebrewkettle.com
207.46.13.202 "GET /tefk shop.thebrewkettle.com
207.46.13.202 "GET /xbyp shop.thebrewkettle.com
207.46.13.202 "GET /xbyp shop.thebrewkettle.com
207.46.13.202 "GET /rbsgud shop.thebrewkettle.com
207.46.13.202 "GET /rbsgud shop.thebrewkettle.com
207.46.13.202 "GET /prah shop.thebrewkettle.com
207.46.13.202 "GET /prah shop.thebrewkettle.com
207.46.13.202 "GET /nzcs shop.thebrewkettle.com
207.46.13.202 "GET /nzcs shop.thebrewkettle.com
207.46.13.202 "GET /qmxyo.sc shop.thebrewkettle.com
207.46.13.202 "GET /qmxyo.sc shop.thebrewkettle.com
207.46.13.202 "GET /ndksn shop.thebrewkettle.com
207.46.13.202 "GET /ndksn shop.thebrewkettle.com
207.46.13.202 "GET /yjdpu shop.thebrewkettle.com
207.46.13.202 "GET /yjdpu shop.thebrewkettle.com
207.46.13.202 "GET /qrk.fo shop.thebrewkettle.com
207.46.13.202 "GET /qrk.fo shop.thebrewkettle.com
207.46.13.202 "GET /abyc shop.thebrewkettle.com
207.46.13.202 "GET /abyc shop.thebrewkettle.com
207.46.13.202 "GET /vil.sd shop.thebrewkettle.com
207.46.13.202 "GET /vil.sd shop.thebrewkettle.com
207.46.13.202 "GET /gxryz shop.thebrewkettle.com
207.46.13.202 "GET /gxryz shop.thebrewkettle.com
207.46.13.202 "GET /pvkne shop.thebrewkettle.com
207.46.13.202 "GET /pvkne shop.thebrewkettle.com
207.46.13.202 "GET /cjmbc shop.thebrewkettle.com
207.46.13.202 "GET /cjmbc shop.thebrewkettle.com
207.46.13.202 "GET /zsdlau shop.thebrewkettle.com
207.46.13.202 "GET /zsdlau shop.thebrewkettle.com
207.46.13.202 "GET /ozhyde shop.thebrewkettle.com
207.46.13.202 "GET /ozhyde shop.thebrewkettle.com
207.46.13.202 "GET /hnwm.do shop.thebrewkettle.com
207.46.13.202 "GET /hnwm.do shop.thebrewkettle.com
207.46.13.202 "GET /tmwy shop.thebrewkettle.com
207.46.13.202 "GET /tmwy shop.thebrewkettle.com
207.46.13.202 "GET /fvkv shop.thebrewkettle.com
207.46.13.202 "GET /fvkv shop.thebrewkettle.com
207.46.13.202 "GET /qkx.fj shop.thebrewkettle.com
207.46.13.202 "GET /qkx.fj shop.thebrewkettle.com
207.46.13.202 "GET /uqzpj shop.thebrewkettle.com
207.46.13.202 "GET /uqzpj shop.thebrewkettle.com
40.77.167.35 "GET /index.php/2mv6tj/8y8kp7ve.market shop.thebrewkettle.com
40.77.167.35 "GET /index.php/2mv6tj/8y8kp7ve.market shop.thebrewkettle.com
40.77.167.35 "GET /kzj shop.thebrewkettle.com
40.77.167.35 "GET /kzj shop.thebrewkettle.com
40.77.167.35 "GET /qni.at shop.thebrewkettle.com
157.55.39.221 "GET /h6aqsa/f9czgcakcvpo50k73.np shop.thebrewkettle.com
40.77.167.35 "GET /qni.at shop.thebrewkettle.com
157.55.39.221 "GET /uubbf shop.thebrewkettle.com
157.55.39.221 "GET /uubbf shop.thebrewkettle.com
40.77.167.168 "GET /index.php/b0hipr/4ivmdr7h0b.design shop.thebrewkettle.com
40.77.167.168 "GET /index.php/b0hipr/4ivmdr7h0b.design shop.thebrewkettle.com
207.46.13.202 "GET /xovqh.lv shop.thebrewkettle.com
207.46.13.202 "GET /xovqh.lv shop.thebrewkettle.com
207.46.13.202 "GET /lhbx shop.thebrewkettle.com
207.46.13.202 "GET /lhbx shop.thebrewkettle.com
207.46.13.202 "GET /zqfenz shop.thebrewkettle.com
207.46.13.202 "GET /zqfenz shop.thebrewkettle.com
207.46.13.202 "GET /zr6.za shop.thebrewkettle.com
207.46.13.202 "GET /zr6.za shop.thebrewkettle.com
207.46.13.202 "GET /eosi.cn shop.thebrewkettle.com
207.46.13.202 "GET /eosi.cn shop.thebrewkettle.com
207.46.13.202 "GET /cww.na shop.thebrewkettle.com
207.46.13.202 "GET /cww.na shop.thebrewkettle.com
207.46.13.202 "GET /hqzhd shop.thebrewkettle.com
207.46.13.202 "GET /hqzhd shop.thebrewkettle.com
207.46.13.202 "GET /znwfvv shop.thebrewkettle.com
207.46.13.202 "GET /znwfvv shop.thebrewkettle.com
207.46.13.202 "GET /460.bt shop.thebrewkettle.com
207.46.13.202 "GET /460.bt shop.thebrewkettle.com
66.249.65.23 "GET /sitemapimages116.xml shop.thebrewkettle.com
66.249.65.23 "GET /sitemapimages116.xml shop.thebrewkettle.com

shop.thebrewkettle.com.txt
Displaying shop.thebrewkettle.com.txt.

/home1/thebrewkettle/shop.thebrewkettle.com/index.php"
That script got a total hits of 67804

Anyone understand this?

It really looks to me like you have some kind of BOT hitting the site with different query strings trying to find a way to hack in probably. These things happen from time to time but generally those doing it get bored and move on. One way would be to have a look, tell your host you have done so and have fixed the problem and then see if it happens again and more than likely it won't.

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

thanks vince

quote:

---

Any insight is appreciated.

---

It's also a function of cheap, crappy hosting with overloaded servers. Aside from maybe the price, there is not anything to recommend about your provider, which as a company (EIG Group) is undoubtedly the worst in the US. Their low cost "unlimited" model only works for them if you don't really use any resources; as soon as you do you'll get shut down, as you see here. Quality hosting from one of the alternate providers suggested on this site, such as ourselves, will definitely yield better results.

Peter


Professional ecommerce web hosting services
Shared hosting Windows & Linux | Dedicated servers | Domains | SSL
Ecommerce Templates specialists since 2003
https://servelink.com

I will second that about Servelink.

Best move I made a few years ago. You can't go wrong.

If you do have an issue (very rare), their tech support is great.

Patrick

I can confirm what Peter said about EIG. They are notorious for not updating server software. I had a client hosted with them and the EIG company was using a free stats reporting software. After the site got hack hundreds of times, I determined the software was literally years out of date and there was even a notice on the software's site about the vulnerability. Of course, they said the hacks were my client's fault, but after I pointed out the vulnerability and they updated the software, the hack magically stopped.

Marshall
CENLYT Productions - ms designs
Affordable Web Design
Custom Ecommerce Designs
Responsive Websites
Cenlyt.com

Hey Vince, I couldnt figure it out, something in that site was making a mess, I am doing a fresh install on that subsite, I downloaded the database just before it crashed. I need a little help getting htis thing back up and running. Send me a link to where I can buy an hour of your time again. Thanks