Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [xmlrpc]

16 questions
3
votes
1 answer

Apache 2.4: Block access to xmlrpc.php of all domains

I would like to block the access to xmlrpc.php I created a file in /etc/apache2/conf.d/block.conf and added the following content: Require all…
MyFault
  • 893
  • 3
  • 14
  • 35
2
votes
1 answer

How to block xmlrpc.php POST requests

I noticed my apache server was down today, and going to my hosting dashboard I see a spike in disk throughput and IOPS. At the same time, my log is full of these lines: 108.162.215.47 - - [03/Feb/2019:06:25:01 +0100] "POST /xmlrpc.php HTTP/1.1" 403…
Sulli
  • 153
  • 1
  • 6
2
votes
0 answers

Fail 2 ban seems to block ip but requests still get through

I have a rule for blocking excessive calls to wordpress xml-rpc: Filter: failregex = ^ .*POST .*xmlrpc\.php.* ignoreregex = Jail: enabled = true port = http,https filter = php-xmlrpc logpath = /var/log/httpd/access_log maxretry =…
Gus
  • 127
  • 2
  • 11
1
vote
1 answer

Enabling xml-rpc on Digital Ocean marketplace Wordpress app

I've installed the Wordpress app from the Digital Ocean marketplace and want to enable xml-rpc to use with the Wordpress app (through JetPack), which requires the xml-rpc endpoint. But I'm having trouble with figuring out how they have disabled…
kresten
  • 13
  • 4
1
vote
1 answer

Nginx deny all for location block not working as expected

I have a wordpress blog setup with nginx. I keep seeing this 80.82.64.220 - - [10/Nov/2016:08:21:48 +0000] "POST /xmlrpc.php HTTP/1.0" 499 0 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)" It's one request per second. So I tried denying…
nupac
  • 217
  • 1
  • 3
  • 11
1
vote
1 answer

How to properly debug XMLRPC fails

I have an Odoo instance runing on Ubuntu server and I want to query the XMLRPC api from a Windows machine in the same subnet. The two can normally communicate and it all works ok, but if I set the client script to run every 5 minutes in Windows…
user568021
  • 107
  • 1
  • 12
1
vote
3 answers

Bots hitting xmlrpc.php and causing high load on the server

Recently we are having a lot of hits to wordpress xmlrpc.php which in end causes high load on the servers. We tried rewriting all xmlrpc.php to 127.0.0.1 but didn't help much. Since apache was still handling the connections. In the end we blocked…
DasGjinovskaLignja
  • 21
  • 1
  • 7
1
vote
1 answer

squirrelmail postfixadmin plugin - failed login to xmlrpc instance

I have installed postfixadmin 2.3.6 and im using squirrelmail vacation plugin. Postfixadmin is working good i can add/edit/delete email accounts and vacation or forwards / aliases. I have problems with xmlrpc on squirrelmail plugin. I already…
Kenny
  • 11
  • 2
1
vote
1 answer

XenCenter can't connect to server; missing methodResponse element

I'm trying to connect to the server (which I can ping successfully) in XenCenter but I keep getting an error that states "Response XML not valid XML-RPC - missing methodResponse element" . I tried looking up the error, but all I figured out is that…
Lily Chavez
  • 21
  • 6
0
votes
0 answers

How to fix 403 error on xmlrpc.php in nginx?

I am using nginx on my server. Now i am trying to allow ip to access xmlrpc.php file in wordpress nginx.conf file using below code. location = /xmlrpc.php { allow XXX.XXX.XXX.XX; #example ip deny all; access_log off; log_not_found…
Addy
  • 101
0
votes
1 answer

How to prevent DOS attack on xmlrpc.php

We've been having trouble recently with a DOS attack on our main website, which is run using Apache httpd 2.2.9 and Drupal 6.35. The attack is a post to Dupal's xmlrpc.php, which is a known exploit which has been patched in recent versions of…
Jack BeNimble
  • 184
  • 9
0
votes
1 answer

Wordpress XML-RPC doesn't work on shared hosting?

I have a script that auto posts to wordpress using the XML-RPC option. I have two blogs set up (on different servers, both Linode VPS's) and a third Linode VPS. The third server submits the XML RPC post to both other servers and posts on both of…
jamm1ng
  • 47
  • 3
0
votes
1 answer

Protect all XML-RPC calls with HTTP basic auth but one

I set up a Django project for smartphone serving XML-RPC methods over HTTPS and using basic auth. All XML-RPC methods require username and password. I would like to implement a XML-RPC method to provide registration to the system. Obviously, this…
bodom_lx
-1
votes
1 answer

can't block IP that is attacking one of my sites with xmlrpc.php attack

I'm at my wits end right now. I have a wordpress site that thankfull is still just a blank template. Last week I saw it was being hammered by an IP 185.130.5.180 from Lithuania and has been flagged multiple times for spamming. I can't seem to block…
Tamerax
  • 15
  • 1
  • 4
-1
votes
1 answer

Slow loading WordPress site because of pingback

I have a site running on WordPress that has a very high loading time. When I check tools.pingdom.com this is the result: I've updated all plugins and WordPress, blocked xmlrpc.php and still the site is loading very slow. I don't know why this is.
iSenne
  • 99
  • 3
1
2