# Excessive requests to /patreon-webhooks **URL:** \ **Category:** Wordpress Plugin\ **Created:** [December 12, 2023, 2:12am UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397 "2023-12-12T02:12:40Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Erin\_Ptah](https://yyz2.discourse-cdn.com/flex036/user_avatar/www.patreondevelopers.com/erin_ptah/32/1296_2.png) [@Erin\_Ptah](https://www.patreondevelopers.com/u/Erin_Ptah)\ **Post date:** [December 12, 2023, 2:12am UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397/1 "2023-12-12T02:12:40Z")
My site [leifandthorn.com](http://leifandthorn.com) has had a spike in CPU usage recently, and when tech support pulled a sample log for December 9, the top 5 requested URLs were: **10746 /patreon-webhooks** 3426 /wp-admin/admin-ajax.php?action=f2\_tumblr\_dynamic\_css&ver=6.4.2 3167 /wp-content/uploads/2019/12/leifandthorn-headerlink.png 1469 /feed 698 [main page] Where are all these demands for patreon-webhooks coming from? The amount of traffic on my paywalled content is tiny. I have less than 100 patrons total, and the number logged-in on my Wordpress site is in the single digits. What gives? Copy/pasted plugin info: WP 6.4.2 with PHP 7.4.33 Patreon WordPress 1.8.8 with API v2 ---
**Author:** ![Erin\_Ptah](https://yyz2.discourse-cdn.com/flex036/user_avatar/www.patreondevelopers.com/erin_ptah/32/1296_2.png) [@Erin\_Ptah](https://www.patreondevelopers.com/u/Erin_Ptah)\ **Post date:** [December 13, 2023, 9:46pm UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397/2 "2023-12-13T21:46:23Z")
Additional info: The “Health Check” page is generating a new version of this error (different UUID each time) every few seconds: add\_post\_webhook - API v2 Class - UUID 821ab7d3-8abf-51f1-b500-25743da82903 - Response code: 401 Response :{“errors”:[{“challenge\_metadata”:null,“code”:1,“code\_name”:“Unauthorized”,“detail”:“The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn’t understand how to supply the credentials required.”,“id”:“821ab7d3-8abf-51f1-b500-25743da82903”,“status”:“401”,“title”:“Unauthorized”}]} add\_post\_webhook - API v2 Class - UUID be545c31-929d-5f38-94fa-3d0e347dda25 - Response code: 401 Response :{“errors”:[{“challenge\_metadata”:null,“code”:1,“code\_name”:“Unauthorized”,“detail”:“The server could not verify that you are authorized to access the URL requested. You either supplied the wrong credentials (e.g. a bad password), or your browser doesn’t understand how to supply the credentials required.”,“id”:“be545c31-929d-5f38-94fa-3d0e347dda25”,“status”:“401”,“title”:“Unauthorized”}]} It only stops while the plugin is deactivated. I tried disconnecting (it didn’t work), deleting the client application on the [Patreon.com](http://Patreon.com) side, and uninstalling/reinstalling the plugin. Even after all that, once I reactivate the plugin, the errors start right back up again. How do I get this plugin to be functional again? ---
**Author:** ![codebard](https://yyz2.discourse-cdn.com/flex036/user_avatar/www.patreondevelopers.com/codebard/32/14_2.png) [@codebard](https://www.patreondevelopers.com/u/codebard)\ **Post date:** [December 14, 2023, 6:50pm UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397/3 "2023-12-14T18:50:41Z")
Have you enabled post sync? ---
**Author:** ![Erin\_Ptah](https://yyz2.discourse-cdn.com/flex036/user_avatar/www.patreondevelopers.com/erin_ptah/32/1296_2.png) [@Erin\_Ptah](https://www.patreondevelopers.com/u/Erin_Ptah)\ **Post date:** [December 14, 2023, 7:51pm UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397/4 "2023-12-14T19:51:21Z")
No posts have ever actually synced, but I checked settings and “Sync Patreon posts” was set to “Yes”… Switched it to “No” and the add\_post\_webhook errors disappeared! I’m still getting these, though, and it only took about 5 minutes for 50+ of them to push the latest add\_post\_webhook error off the Health Check list: > **0 days ago** > > Response code: 401 Response :{“error”: “invalid\_grant”} Any further advice? (And thank you!) ---
**Author:** ![Chatfic\_Lab](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@Chatfic\_Lab](https://www.patreondevelopers.com/u/Chatfic_Lab)\ **Post date:** [December 16, 2023, 11:19am UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397/5 "2023-12-16T11:19:48Z")
Now I’m not using wordpress but, if I was a pirate trying to gain access to patreon benefits and publish or sell this content on the internet, I would definitely create some bots to send hundreds of fake requests to patreon webhook endpoints that can be detected in the wild. Hoping some won’t be doing signature validations and register my patreon member accounts as premium users. I don’t know how technical you are, but can you see the IP addresses of the request origins? ---
**Author:** ![Erin\_Ptah](https://yyz2.discourse-cdn.com/flex036/user_avatar/www.patreondevelopers.com/erin_ptah/32/1296_2.png) [@Erin\_Ptah](https://www.patreondevelopers.com/u/Erin_Ptah)\ **Post date:** [December 17, 2023, 4:09am UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397/6 "2023-12-17T04:09:14Z")
For the original add\_post\_webhook errors, it didn’t look like those were coming from an external IP – in the logs from December 9, the top user agent was just “WordPress/6.4.2; [https://leifandthorn.com](https://leifandthorn.com)” (10762 hits). So it sure looks like it was WP in an infinite loop of sending bad requests to itself. The only IP address that accessed the site more than 10K times on December 9 was [34.174.37.58 (Google)](https://www.whois.com/whois/34.174.37.58) (14037 hits). Which seems excessive (what was it doing, re-crawling the entire site that day?), but not malicious, unless I’m missing something. The shorter errors I posted about on the 11th don’t match with entries in the site access logs at all – so, no idea who/what/where those are from. ---
**Author:** ![codebard](https://yyz2.discourse-cdn.com/flex036/user_avatar/www.patreondevelopers.com/codebard/32/14_2.png) [@codebard](https://www.patreondevelopers.com/u/codebard)\ **Post date:** [December 19, 2023, 6:25pm UTC](https://www.patreondevelopers.com/t/excessive-requests-to-patreon-webhooks/8397/7 "2023-12-19T18:25:42Z")
Those are not relevant to your initial query. Do try refreshing your site’s connection to Patreon by using the below steps: > [@bulb How to upgrade your Patreon WordPress to use API v2](https://www.patreondevelopers.com/t/how-to-upgrade-your-patreon-wordpress-to-use-api-v2/3249): > > You can follow the below simple steps to upgrade your Patreon WordPress installation to use API v2, which is required by many advanced features like post sync. 1 - Visit “Patreon settings” menu in your WP admin 2 - Click ‘Connection details’ button 3 - Clear all fields which you can clear, and click Save. 4 - Visit the below page that lists the apps you have at Patreon: 5 - Find the app for your website. You can confirm the app by checking the ‘Redirect uri’ value for the app, visible in …