DDOS Attack on Site
- Thread starter Kinky123
- Start date
-
- Tags
- virus virus attack virus scan
MikeyMikey13
BANNED
- May 25, 2014
- 2,340
- 1,024
cloudflare
validseo
Senior Member
- Jul 17, 2013
- 928
- 551
Check your web server's access_log file. If you see a flood of requests for xmlrpc.php then someone is trying to brute force your wordpress. There are security plugins that can block this activity. If you do not need xmlrpc for anything just rename that file and it will make the attack ineffective. Then ban the attacking IP in the security plugin.
iisark
Junior Member
- Dec 27, 2009
- 112
- 30
Cloudflare is a great way to stop the hackers as MikeyMikey13 suggested, but I personally prefer Incapsula. Anyway, both services will do the trick.
Kinky123
Newbie
- Feb 10, 2017
- 3
- 0
Thank you, I have renamed XMLRPC.php file. Is it enough or I need to do something else in file. How would I know that the website is out of Attack.
- Mar 21, 2013
- 24,764
- 31,552
Some hosting providers like Amazon show you the current bandwidth usage. If it continues high, then you're still getting blasted.
validseo
Senior Member
- Jul 17, 2013
- 928
- 551
You would have to look in your webserver access logs for requests to the file. If the requests are there then you are being attacked. Renaming the file makes the attack fail because the login attempts turn into 404 not found errors.
You do not need to do anything else and you can rename the file later if f you ever need to undo the change