Client Denied by server - wp-json

Keywords: WordPress - AWS - Technical issue - Other

bnsupport ID: f9849aa2-974e-3fb8-79d2-a1f69727e9b7

bndiagnostic output:

? Apache: Found possible issues
https://docs.bitnami.com/general/apps/wordpress/troubleshooting/debug-errors-apache/

bndiagnostic failure reason: The documentation did not make any significant change

Description:
Every minute pretty much my instance is flagging the following error and i cant seem to find anything around wp-json?

[access_compat:error] [pid 7837:tid 140434646087424] [client 185.93.3.92:0] AH01797: client denied by server configuration: /opt/bitnami/wordpress/wp-json

Hi @craig-gigged,

It seems someone (185.93.3.92) is accessing your site trying to obtain a wp-json file. This may be a bot/attacker trying to access your site. Please take a look at this guide in our documentation

https://docs.bitnami.com/aws/apps/wordpress/troubleshooting/deny-connections-bots-apache/

Happy to help!


Was my answer helpful? Click on :heart:

1 Like

Hi @jota,

Thanks for getting back to me. So i agree it does look to be a bot or something. In the guide you sent me it shows you how to block IP’s but every minute it seems to be a different IP. Do you have any suggestions on how to stop all?

 [Mon Jan 10 13:39:50.601252 2022] [access_compat:error] [pid 1138:tid 139849084294912] [client 162.218.67.34:0] AH01797: client denied by server configuration: /opt/bitnami/wordpress/wp-json
[Mon Jan 10 13:40:50.977815 2022] [access_compat:error] [pid 1138:tid 139848958404352] [client 72.46.131.10:0] AH01797: client denied by server configuration: /opt/bitnami/wordpress/wp-json
[Mon Jan 10 13:41:50.456156 2022] [access_compat:error] [pid 22158:tid 139847649961728] [client 94.75.211.74:0] AH01797: client denied by server configuration: /opt/bitnami/wordpress/wp-json
[Mon Jan 10 13:42:50.544241 2022] [access_compat:error] [pid 22158:tid 139846995625728] [client 76.72.172.208:0] AH01797: client denied by server configuration: /opt/bitnami/wordpress/wp-json
[Mon Jan 10 13:43:50.522890 2022] [access_compat:error] [pid 22158:tid 139849472947968] [client 148.72.170.233:0] AH01797: client denied by server configuration: /opt/bitnami/wordpress/wp-json

Thanks

Hi @craig-gigged,

Please ensure those IPs are not Google/AWS IPs performing checks in your application. We do not have any guide to automatically block IPs based on the requests they perform but you can take a look at the mod_security documentation to perform that action.