Hi guys,
I'm lucky to support some client's product created on ModX inherited from prev. developers. I have no any experience with that, but all looks not really hard to understand.
This days our server really loaded, constantly down and investigation of an access log file shows that a ModX makes a thousand and thousand internal requests like:
198.57.175.156 - - [05/Jun/2014:00:01:36 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:36 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:35 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:36 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:36 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:36 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:37 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:37 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:36 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:37 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:37 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:37 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:37 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:37 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:37 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:37 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:38 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:38 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:38 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:38 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:39 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:39 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:38 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:39 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:39 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:39 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:39 -0500] "GET /css/images/rss.png HTTP/1.0" 200 1305 "-" "-"
198.57.175.156 - - [05/Jun/2014:00:01:39 -0500] "GET /css/images/t.png HTTP/1.0" 200 973 "-" "-"
198.57.175.156 - - [04/Jun/2014:23:59:39 -0500] "GET /images/tagged-articles/logo.png HTTP/1.0" 200 6218 "-" "-"
I didn't any changes in plugins or core, maybe prev. developer did, but nobody knows.
If anyone have an idea what it can be, what going on or which way to search I should go, please don't ignore this post.
Mikalai.
P.S. Version: (MODX Revolution 2.2.5-pl (traditional))
Can you post examples of a few of the tags that produce those images?
Also, check the Resources on the site to see if they're marked as cacheable.