• I’ve set-up a site for my small business using WordPress.

    As soon as it was up (and before the search engines indexed it), visitors from China, Taiwan, Brazil went to the site. I’m not sure if it’s automated, but the logs show they try to access stats, and type in things like ‘/drupal/xmlrpc’, ‘phpgroupware/xmlrpc’ , ‘sumthin/’ etc.

    My question is do I have anything to really worry about? Is it possible to ban users who try to visit these non-existent URLs on the site? Is there any tips or plugins out there for this problem?

Viewing 1 replies (of 1 total)
  • Welcome to the web!

    There are probably two answers here:

    1. You will probably see visits from search engines. If you don’t want to appear on the popular search engines, put a suitable robots.txt on your site – see for example https://www.searchengineworld.com/robots/robots_tutorial.htm
    2. You can expect dozens / hundreds of automated ‘probes’ of your site every day, trying to see if your server is unprotected against the hundreds of software vulernerabilities known to hackers. If your server is found to be vulnerable, you may expect a more serious attempt to take it over shortly ??

    There isn’t a great deal you can do to stop this if you want your site to be generally accessible over the net. The main thing is to make sure your server software is correctly confirgured, and regularly patched with the latest security releases.

    John

Viewing 1 replies (of 1 total)
  • The topic ‘How to stop hackers?’ is closed to new replies.