Block person who is accessing xmlrpc.php

Hello , i have same problem and very big prolem with japanese keywords hack.every morning they puts code of lines in my index.php and WordFence can block it.

How to clean my site . I bought you plugin but nothing is better.

https://prnt.sc/1w7ri6k – index.php

https://prnt.sc/1w7rn47 – xmlrpc.php

• This reply was modified 3 years, 5 months ago by startechdoo.

Hi @goanyash

The brute force login attack prevention rules protect against login attacks to the XML-RPC interface in the same way as they protect the login page:

https://www.wordfence.com/help/firewall/brute-force/

If you don’t use the XML-RPC interface to log in to your site, using the WordPress application on a smartphone or tablet for example, then you can disable access using the option Disable XML-RPC authentication on the Login Security >> Settings page.

Hi @startechdoo

As per forum guidelines below can you open your own topic please:

“Unless users have the exact same version of WordPress on the same physical server hosted by the same hosts with the same plugins, theme, and configurations, then the odds are the solution for one user will not be the same for another. For this reason, we recommend people start their own topics.”

Thanks, Its work like charm Thanks a lot.

Hi @goanyash

Thanks for the good news.