Quantcast
Channel: BulletProof Security Forum » All Posts
Viewing all articles
Browse latest Browse all 12461

Reply To: WordPress XML-RPC DDoS Protection – protect xmlrpc.php, block xmlrpc.php, forbid xmlrpc.php

$
0
0

[Topic moved to this relevant topic]

I am receiving the following in my logs from an autoposting service that I want to be able to post on my site but looks like BPS is blocking it:

[403 GET / HEAD Request: October 3, 2014 7:48 am]
Event Code: PSBR-HPR
Solution: http://forum.ait-pro.com/forums/topic/security-log-event-codes/
REMOTE_ADDR: x.x.x.x
Host Name: [removed for privacy]
SERVER_PROTOCOL: HTTP/1.1
HTTP_CLIENT_IP:
HTTP_FORWARDED:
HTTP_X_FORWARDED_FOR:
HTTP_X_CLUSTER_CLIENT_IP:
REQUEST_METHOD: GET
HTTP_REFERER:
REQUEST_URI: /wp-content/plugins/bulletproof-security/403.php
QUERY_STRING:
HTTP_USER_AGENT: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

I have added the IP address to be allowed in the XML-RPC DDoS Protection code in .htaccess

# XML-RPC DDoS PROTECTION
# You can whitelist your IP address if you use A Weblog Client
# or want to whitelist your IP address for any other reasons.
# Example: uncomment #Allow from x.x.x. by deleting the # sign and
# replace the x's with your actual IP address. Allow from 99.88.77.
# Note: It is recommended that you use 3 octets x.x.x. of your IP address
# instead of 4 octets x.x.x.x of your IP address.

<FilesMatch "^(xmlrpc\.php)">
Order Deny,Allow
Deny from all
Allow from x.x.x.  <---Note: I have the first 3 octets of the IP address entered
</FilesMatch>

Is this all that needs to be done to rectify this issue?

  • This reply was modified 22 hours, 25 minutes ago by  AITpro Admin.
  • This reply was modified 22 hours, 19 minutes ago by  AITpro Admin.
  • This reply was modified 22 hours, 18 minutes ago by  AITpro Admin.

Viewing all articles
Browse latest Browse all 12461

Trending Articles