Why is the nginx server itself the most frequent guest in the nginx logs?

Question

Nginx

There is a load on the server. I look at the logs. I see:
The most frequent guest is the server itself.
Those. The IP of the server on which the sites are spinning is the one who loads it the most. And the links that he tries to visit are not the links that he should visit by cron (does something).

How to actually determine "why is he hammering on sites?". The links he tries to visit depend on the site's engine.
For example:
"POST /wp-cron.php?doing_wp_cron=1597576299.8987009525299072265625 HTTP/1.1" 403 146 " http://site.ru/wp-cron.php?doing_wp_cron=159757629... "

The fact of the 403 error is not important. Important: why is he pounding there at all? How to find?

Answer 1

Try replacing Wordpress's "WP Cron" scheduler with a server-side cron scheduler. The instruction is at the link:
https://seoblog.life/funktsii/wp-cron.html