How to prevent your WordPress blog from DDOS attacks

Security company Sucuri said in March 9 that hackers used more than 162000 WordPress websites to launch DDoS attacks to the target website. all requests were random values (such? 4137049643182 ?), Therefore, the cache is bypassed, forcing every page to be reloaded.

Security company Sucuri said in March 9 that hackers used more than 162000 WordPress websites to launch DDoS attacks to the target website. all requests were random values (such? 4137049 = 643182 ?), Therefore, the cache is bypassed, and every page is Reloaded. Therefore, the target server crashes quickly and becomes down for several hours.

XML-RPC and its pingbacks Port

The attacker was using the WordPress XML-RPC's pingbacks port for attacks, and the XML-RPC is the API interface WordPress uses for third-party clients (such as WordPress iPhone and Android client, Windows Writer, etc, XML-RPC can also be used for pingbacks and trackbacks ports, which can be used for communication between sites, but misuse may be used by attackers for DDoS attacks.

Sucuri has developed a DDoS scanning tool that allows you to detect whether your site has been exploited by attackers. in the input box, enter your domain name, the scan tool will find in their log files whether your website is in the log file of this attack. if your domain name does not appear, congratulations, your website has not attacked others.

How to prevent exploitation by attackers

At present, the WordPress official team is wondering whether the Akismet plug-in can be used to solve this problem, but we can still solve the problem using the following two methods:

Close the XML-RPC directly

The simplest way is to directly close the XML-RPC interface (the WPJAM Basic plug-in already provides options), but in this way, you won't be able to use a third-party client to publish articles, if you often use the client, it is inconvenient to use.

Only disable the Pingbacks Port

The following code allows you to just close the pingback port of the XML-RPC:

Add_filter ('xmlrpc _ methods ', 'remove _ xmlrpc_pingback_ping ');

Function remove_xmlrpc_pingback_ping ($ methods)

{

Unset ($ methods ['pingback. ping']);

Return $ methods ;}