{"id":1048,"date":"2019-02-06T10:39:54","date_gmt":"2019-02-06T03:39:54","guid":{"rendered":"https:\/\/www.whplus.com\/blog\/?p=1048"},"modified":"2019-02-06T10:39:54","modified_gmt":"2019-02-06T03:39:54","slug":"modsec-rule-to-stop-xmlrpc-attack","status":"publish","type":"post","link":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html","title":{"rendered":"modsec rule to stop xmlrpc attack"},"content":{"rendered":"<p>Lots of attacks are made towards\u00a0<strong>WordPress XML-RPC<\/strong>\u00a0(xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack:<\/p>\n<p><code>#Block requests to xmlrpc.php with no referring URL<br \/>\nSecRule REQUEST_METHOD \"POST\" \"deny,status:401,id:5000900,chain,msg:'xmlrpc request blocked, no referer'\"<br \/>\nSecRule &amp;HTTP_REFERER \"@eq 0\" \"chain\"<br \/>\nSecRule REQUEST_URI \"xmlrpc.php\"<br \/>\n<\/code><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lots of attacks are made towards\u00a0WordPress XML-RPC\u00a0(xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack: #Block requests to xmlrpc.php with no referring URL SecRule REQUEST_METHOD &#8220;POST&#8221; &#8220;deny,status:401,id:5000900,chain,msg:&#8217;xmlrpc request blocked, no referer'&#8221; SecRule &amp;HTTP_REFERER &#8220;@eq 0&#8221; &#8220;chain&#8221; SecRule REQUEST_URI &#8220;xmlrpc.php&#8221;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1048","post","type-post","status-publish","format-standard","hentry","category-tutorial"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Lots of attacks are made towards WordPress XML-RPC (xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack: #Block requests to xmlrpc.php with no referring URL SecRule REQUEST_METHOD &quot;POST&quot; &quot;deny,status:401,id:5000900,chain,msg:&#039;xmlrpc request blocked, no referer&#039;&quot; SecRule &amp;HTTP_REFERER &quot;@eq 0&quot; &quot;chain&quot; SecRule REQUEST_URI &quot;xmlrpc.php&quot;\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"whplus\"\/>\n\t<meta name=\"google-site-verification\" content=\"F5J0SGlaGQ2pp3SIm58KggrITtNTptKPB73P9hpRpfY\" \/>\n\t<meta name=\"keywords\" content=\"tutorial\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@whplus\" \/>\n\t\t<meta name=\"twitter:title\" content=\"modsec rule to stop xmlrpc attack | Whplus Blog\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Lots of attacks are made towards WordPress XML-RPC (xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack: #Block requests to xmlrpc.php with no referring URL SecRule REQUEST_METHOD &quot;POST&quot; &quot;deny,status:401,id:5000900,chain,msg:&#039;xmlrpc request blocked, no referer&#039;&quot; SecRule &amp;HTTP_REFERER &quot;@eq 0&quot; &quot;chain&quot; SecRule REQUEST_URI &quot;xmlrpc.php&quot;\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@whplus\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/www.whplus.com\/blog\/wp-content\/uploads\/2021\/03\/logo.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#article\",\"name\":\"modsec rule to stop xmlrpc attack | Whplus Blog\",\"headline\":\"modsec rule to stop xmlrpc attack\",\"author\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/author\\\/whplus#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/logo.png\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/#articleImage\",\"width\":150,\"height\":60},\"datePublished\":\"2019-02-06T10:39:54+07:00\",\"dateModified\":\"2019-02-06T10:39:54+07:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#webpage\"},\"articleSection\":\"Tutorial\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.whplus.com\\\/blog\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/category\\\/tutorial#listItem\",\"name\":\"Tutorial\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/category\\\/tutorial#listItem\",\"position\":2,\"name\":\"Tutorial\",\"item\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/category\\\/tutorial\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#listItem\",\"name\":\"modsec rule to stop xmlrpc attack\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#listItem\",\"position\":3,\"name\":\"modsec rule to stop xmlrpc attack\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/category\\\/tutorial#listItem\",\"name\":\"Tutorial\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/#organization\",\"name\":\"Whplus\",\"description\":\"Informasi Seputar Layanan Whplus\",\"url\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/logo.png\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html\\\/#organizationLogo\",\"width\":150,\"height\":60},\"image\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/whplus\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/author\\\/whplus#author\",\"url\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/author\\\/whplus\",\"name\":\"whplus\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5a5270c9fb35780ddadb175b96b0d198683692a2d67525ef5477ca2b11b18ad3?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"whplus\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#webpage\",\"url\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html\",\"name\":\"modsec rule to stop xmlrpc attack | Whplus Blog\",\"description\":\"Lots of attacks are made towards WordPress XML-RPC (xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack: #Block requests to xmlrpc.php with no referring URL SecRule REQUEST_METHOD \\\"POST\\\" \\\"deny,status:401,id:5000900,chain,msg:'xmlrpc request blocked, no referer'\\\" SecRule &HTTP_REFERER \\\"@eq 0\\\" \\\"chain\\\" SecRule REQUEST_URI \\\"xmlrpc.php\\\"\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/2019\\\/02\\\/06\\\/modsec-rule-to-stop-xmlrpc-attack.html#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/author\\\/whplus#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/author\\\/whplus#author\"},\"datePublished\":\"2019-02-06T10:39:54+07:00\",\"dateModified\":\"2019-02-06T10:39:54+07:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/\",\"name\":\"Whplus Blog\",\"description\":\"Informasi Seputar Layanan Whplus\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.whplus.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"modsec rule to stop xmlrpc attack | Whplus Blog","description":"Lots of attacks are made towards WordPress XML-RPC (xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack: #Block requests to xmlrpc.php with no referring URL SecRule REQUEST_METHOD \"POST\" \"deny,status:401,id:5000900,chain,msg:'xmlrpc request blocked, no referer'\" SecRule &HTTP_REFERER \"@eq 0\" \"chain\" SecRule REQUEST_URI \"xmlrpc.php\"","canonical_url":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html","robots":"max-image-preview:large","keywords":"tutorial","webmasterTools":{"google-site-verification":"F5J0SGlaGQ2pp3SIm58KggrITtNTptKPB73P9hpRpfY","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#article","name":"modsec rule to stop xmlrpc attack | Whplus Blog","headline":"modsec rule to stop xmlrpc attack","author":{"@id":"https:\/\/www.whplus.com\/blog\/author\/whplus#author"},"publisher":{"@id":"https:\/\/www.whplus.com\/blog\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.whplus.com\/blog\/wp-content\/uploads\/2021\/03\/logo.png","@id":"https:\/\/www.whplus.com\/blog\/#articleImage","width":150,"height":60},"datePublished":"2019-02-06T10:39:54+07:00","dateModified":"2019-02-06T10:39:54+07:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#webpage"},"isPartOf":{"@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#webpage"},"articleSection":"Tutorial"},{"@type":"BreadcrumbList","@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.whplus.com\/blog#listItem","position":1,"name":"Home","item":"https:\/\/www.whplus.com\/blog","nextItem":{"@type":"ListItem","@id":"https:\/\/www.whplus.com\/blog\/category\/tutorial#listItem","name":"Tutorial"}},{"@type":"ListItem","@id":"https:\/\/www.whplus.com\/blog\/category\/tutorial#listItem","position":2,"name":"Tutorial","item":"https:\/\/www.whplus.com\/blog\/category\/tutorial","nextItem":{"@type":"ListItem","@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#listItem","name":"modsec rule to stop xmlrpc attack"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.whplus.com\/blog#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#listItem","position":3,"name":"modsec rule to stop xmlrpc attack","previousItem":{"@type":"ListItem","@id":"https:\/\/www.whplus.com\/blog\/category\/tutorial#listItem","name":"Tutorial"}}]},{"@type":"Organization","@id":"https:\/\/www.whplus.com\/blog\/#organization","name":"Whplus","description":"Informasi Seputar Layanan Whplus","url":"https:\/\/www.whplus.com\/blog\/","logo":{"@type":"ImageObject","url":"https:\/\/www.whplus.com\/blog\/wp-content\/uploads\/2021\/03\/logo.png","@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html\/#organizationLogo","width":150,"height":60},"image":{"@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html\/#organizationLogo"},"sameAs":["https:\/\/twitter.com\/whplus"]},{"@type":"Person","@id":"https:\/\/www.whplus.com\/blog\/author\/whplus#author","url":"https:\/\/www.whplus.com\/blog\/author\/whplus","name":"whplus","image":{"@type":"ImageObject","@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/5a5270c9fb35780ddadb175b96b0d198683692a2d67525ef5477ca2b11b18ad3?s=96&d=mm&r=g","width":96,"height":96,"caption":"whplus"}},{"@type":"WebPage","@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#webpage","url":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html","name":"modsec rule to stop xmlrpc attack | Whplus Blog","description":"Lots of attacks are made towards WordPress XML-RPC (xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack: #Block requests to xmlrpc.php with no referring URL SecRule REQUEST_METHOD \"POST\" \"deny,status:401,id:5000900,chain,msg:'xmlrpc request blocked, no referer'\" SecRule &HTTP_REFERER \"@eq 0\" \"chain\" SecRule REQUEST_URI \"xmlrpc.php\"","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.whplus.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/www.whplus.com\/blog\/2019\/02\/06\/modsec-rule-to-stop-xmlrpc-attack.html#breadcrumblist"},"author":{"@id":"https:\/\/www.whplus.com\/blog\/author\/whplus#author"},"creator":{"@id":"https:\/\/www.whplus.com\/blog\/author\/whplus#author"},"datePublished":"2019-02-06T10:39:54+07:00","dateModified":"2019-02-06T10:39:54+07:00"},{"@type":"WebSite","@id":"https:\/\/www.whplus.com\/blog\/#website","url":"https:\/\/www.whplus.com\/blog\/","name":"Whplus Blog","description":"Informasi Seputar Layanan Whplus","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.whplus.com\/blog\/#organization"}}]},"twitter:card":"summary","twitter:site":"@whplus","twitter:title":"modsec rule to stop xmlrpc attack | Whplus Blog","twitter:description":"Lots of attacks are made towards WordPress XML-RPC (xmlrpc.php), which can cause a slowdown in the server. Below is the modsec rule to stop xmlrpc attack: #Block requests to xmlrpc.php with no referring URL SecRule REQUEST_METHOD &quot;POST&quot; &quot;deny,status:401,id:5000900,chain,msg:'xmlrpc request blocked, no referer'&quot; SecRule &amp;HTTP_REFERER &quot;@eq 0&quot; &quot;chain&quot; SecRule REQUEST_URI &quot;xmlrpc.php&quot;","twitter:creator":"@whplus","twitter:image":"https:\/\/www.whplus.com\/blog\/wp-content\/uploads\/2021\/03\/logo.png"},"aioseo_meta_data":{"post_id":"1048","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2021-03-09 02:17:33","updated":"2022-09-13 19:03:55","seo_analyzer_scan_date":null,"focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"_links":{"self":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts\/1048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/comments?post=1048"}],"version-history":[{"count":1,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts\/1048\/revisions"}],"predecessor-version":[{"id":1049,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/posts\/1048\/revisions\/1049"}],"wp:attachment":[{"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/media?parent=1048"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/categories?post=1048"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.whplus.com\/blog\/wp-json\/wp\/v2\/tags?post=1048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}