Questions tagged [xmlrpc]
The xmlrpc tag has no usage guidance.
16
questions
2
votes
1
answer
795
views
Enabling xml-rpc on Digital Ocean marketplace Wordpress app
I've installed the Wordpress app from the Digital Ocean marketplace and want to enable xml-rpc to use with the Wordpress app (through JetPack), which requires the xml-rpc endpoint. But I'm having ...
- 23
2
votes
1
answer
4k
views
How to block xmlrpc.php POST requests
I noticed my apache server was down today, and going to my hosting dashboard I see a spike in disk throughput and IOPS. At the same time, my log is full of these lines:
108.162.215.47 - - [03/Feb/...
- 153
0
votes
0
answers
1k
views
How to fix 403 error on xmlrpc.php in nginx?
I am using nginx on my server. Now i am trying to allow ip to access xmlrpc.php file in wordpress nginx.conf file using below code.
location = /xmlrpc.php {
allow XXX.XXX.XXX.XX; #example ip
...
- 101
2
votes
0
answers
533
views
Fail 2 ban seems to block ip but requests still get through
I have a rule for blocking excessive calls to wordpress xml-rpc:
Filter:
failregex = ^<HOST> .*POST .*xmlrpc\.php.*
ignoreregex =
Jail:
enabled = true
port = http,https
filter = php-...
- 127
2
votes
1
answer
7k
views
Nginx deny all for location block not working as expected
I have a wordpress blog setup with nginx. I keep seeing this
80.82.64.220 - - [10/Nov/2016:08:21:48 +0000] "POST /xmlrpc.php HTTP/1.0" 499 0 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
...
- 227
1
vote
1
answer
437
views
How to properly debug XMLRPC fails
I have an Odoo instance runing on Ubuntu server and I want to query the XMLRPC api from a Windows machine in the same subnet. The two can normally communicate and it all works ok, but if I set the ...
- 107
0
votes
1
answer
1k
views
How to prevent DOS attack on xmlrpc.php
We've been having trouble recently with a DOS attack on our main website, which is run using Apache httpd 2.2.9 and Drupal 6.35. The attack is a post to Dupal's xmlrpc.php, which is a known exploit ...
- 194
-1
votes
1
answer
295
views
can't block IP that is attacking one of my sites with xmlrpc.php attack
I'm at my wits end right now. I have a wordpress site that thankfull is still just a blank template. Last week I saw it was being hammered by an IP 185.130.5.180 from Lithuania and has been flagged ...
- 15
1
vote
3
answers
2k
views
Bots hitting xmlrpc.php and causing high load on the server
Recently we are having a lot of hits to wordpress xmlrpc.php which in end causes high load on the servers.
We tried rewriting all xmlrpc.php to 127.0.0.1 but didn't help much. Since apache was ...
3
votes
1
answer
7k
views
Apache 2.4: Block access to xmlrpc.php of all domains
I would like to block the access to xmlrpc.php
I created a file in
/etc/apache2/conf.d/block.conf
and added the following content:
<FilesMatch "(^\.|wp-config\.php|xmlrpc\.php|(?<!robots)\....
- 913
-1
votes
1
answer
468
views
Slow loading WordPress site because of pingback
I have a site running on WordPress that has a very high loading time. When I check tools.pingdom.com this is the result:
I've updated all plugins and WordPress, blocked xmlrpc.php and still the site ...
- 99
-1
votes
1
answer
378
views
Wordpress Pingback / XML-RPC Attacks
I have a website setup on IIS 7 hosted on a Windows Virtual Private Server and I've noticed that it's being attacked using the Wordpress Pingback/XML-RPC method which is causing my website to go ...
- 11
1
vote
1
answer
561
views
squirrelmail postfixadmin plugin - failed login to xmlrpc instance
I have installed postfixadmin 2.3.6 and im using squirrelmail vacation plugin. Postfixadmin is working good i can add/edit/delete email accounts and vacation or forwards / aliases. I have problems ...
- 11
1
vote
1
answer
1k
views
XenCenter can't connect to server; missing methodResponse element
I'm trying to connect to the server (which I can ping successfully) in XenCenter but I keep getting an error that states "Response XML not valid XML-RPC - missing methodResponse element" . I tried ...
- 21
0
votes
1
answer
464
views
Wordpress XML-RPC doesn't work on shared hosting?
I have a script that auto posts to wordpress using the XML-RPC option.
I have two blogs set up (on different servers, both Linode VPS's) and a third Linode VPS.
The third server submits the XML RPC ...
- 47
0
votes
1
answer
780
views
Protect all XML-RPC calls with HTTP basic auth but one
I set up a Django project for smartphone serving XML-RPC methods over HTTPS and using basic auth. All XML-RPC methods require username and password.
I would like to implement a XML-RPC method to ...
bodom_lx