{"id":6641588,"date":"2015-10-13T02:33:25","date_gmt":"2015-10-13T02:33:25","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/xml-rpc-attack\/"},"modified":"2016-08-30T19:03:22","modified_gmt":"2016-08-30T19:03:22","slug":"xml-rpc-attack","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/xml-rpc-attack\/","title":{"rendered":"xml rpc attack"},"content":{"rendered":"<p>Hello,<\/p>\n<p>In plugin log files I consistently see invalid login attempts from particular IP range. I have added this IP range to plugin ban list and added deny directive to htaccess file; my login.php is password protected.<\/p>\n<p>I suspect the attack is using xmlrpc. I have disabled pingback and dos but cannot completely disable this feature as I use jetpack.<\/p>\n<p>I continue to see the attacks in log file. Any ideas what might be happening? Is there a way block\/allow xmlrpc only for specific ip range?<\/p>\n<p>Thanks for your help!<\/p>\n<p>https:\/\/wordpress.org\/plugins\/better-wp-security\/<\/p>\n","protected":false},"template":"","class_list":["post-6641588","topic","type-topic","status-publish","hentry","topic-tag-brute-force-attack","topic-tag-xmlrpc"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6641588","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/6641588\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=6641588"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}