question – will this plugin protect from xmlrpc attacks? | ww.wp.xz.cn

Resolved helloari
(@helloari)

11 years, 4 months ago

question – will this plugin protect from xmlrpc attacks?

i just got hammered on a dozen sites on my server and am trying to figure out if bruteprotect will be protection enough or if i should block access to the xmlrpc script.

thanks….

https://ww.wp.xz.cn/plugins/bruteprotect/

Viewing 4 replies - 1 through 4 (of 4 total)

3dpc
(@3dpc)

11 years, 4 months ago

Same thing happening to me. Anybody knows?

Plugin Contributor Sam Hotchkiss
(@samhotchkiss)

11 years, 4 months ago

Hey Ari!

BruteProtect does protect against XML-RPC– we monitor and block login attempts there.

By the way, I’m really enjoying my Yubikey– thanks for the hook up 🙂

Thread Starter helloari
(@helloari)

11 years, 4 months ago

glad you like it….
likewise I love your service… and loo forward to having it part of jetpack…

here’s more details on the attack that targets the xmlrpc.php page. It is a brute force attack against domain.com/xmlrpc.php.
see:
http://blog.sucuri.net/2014/07/new-brute-force-attacks-exploiting-xmlrpc-in-wordpress.html

that page says “none of the [plugins] we tried will protect you from the XMLRPC calls”

but you are saying the BruteProtect does protect from these attacks? maybe you want to leave a comment on that page…

Plugin Contributor Sam Hotchkiss
(@samhotchkiss)

11 years, 4 months ago

Hey Ari– I’d recommend you read the comments, in particular the one from me 🙂

http://blog.sucuri.net/2014/07/new-brute-force-attacks-exploiting-xmlrpc-in-wordpress.html#comment-1504041877

The whole premise of this article is not factual

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘question – will this plugin protect from xmlrpc attacks?’ is closed to new replies.

Tags

xmlrpc

4 replies
3 participants
Last reply from: Sam Hotchkiss
Last activity: 11 years, 4 months ago
Status: resolved