Differences

This shows you the differences between two versions of the page.

--- wordpress_xmlrpc [2016/04/29 13:34] – luke7858
+++ wordpress_xmlrpc [2024/05/23 07:26] (current) – external edit 127.0.0.1
@@ Line 35: / Line 35: @@
 \\
 <sxh bash>
-awk '/xmlrpc.php/ {REQ[$1" "$6" "$7]++}END{for (i in REQ) print REQ[i],i}' /var/log/httpd/*access*log | sort -n | tail -25
+ awk '/xmlrpc.php/ {REQ[$1" "$6" "$7]++}END{for (i in REQ) print REQ[i],i}' /var/log/httpd/*access*log | sort -n | tail -25
-</sxh>
-or to check every log file on the device:
-<sxh bash>
-LOGS=$(lsof -ln | awk '$4 ~ /[0-9]w/ && $5 ~ /REG/ {FILE[$NF]++}END{for (i in FILE) print i}'); awk '/xmlrpc.php/ {REQ[$1" "$6" "$7]++}END{for (i in REQ) print REQ[i],i}' $(echo "$LOGS" | grep access) | sort -n | tail -25
 </sxh>
 \\
@@ Line 45: / Line 41: @@
 <sxh bash>
 To prevent xmlrpc attacks add the following to a .htaccess
-<sxh bash>
 <Files "xmlrpc.php">
 Order Allow,Deny
@@ Line 55: / Line 50: @@
 **__Apache .htaccess:__**
 <sxh bash>
-<files xmlrpc.php="">
+<Files "xmlrpc.php">
 Order Deny,Allow
 Deny from all