Viewing 5 replies - 1 through 5 (of 5 total)
  • Hello IslandWoman,
    can you try blocking only the non domain part of the URL? So in “Immediately block IP’s that access these URLs” put in “/xmlrpc.php”.

    Thread Starter IslandWoman

    (@islandwoman)

    Ok I will give it a try. But should it not also block the user “admin”?

    It will block “admin” unless there is a user account with that name.

    Just as an interesting side note/clue, I have found that a lot of attempted hackers are using the user agent string:
    Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:23.0) Gecko/20100101 Firefox/23.0

    I have not seen any legitimate requests that use this user agent string. So, I went ahead and blocked this string using the “Advanced Blocking” settings page.

    Not sure why so many hackers are using this user agent string. Perhaps the plugin author has some insight?

    Cheers,
    -Mike D.

    Island, remember that the file you are attempting to block can’t exist on your server in the specified location. For example, if /xmprpc.php is in your site route folder, the Wordfence blocking function won’t work. It’s confusing. MTN

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘"Immediately block IP's that access these URLs" not working’ is closed to new replies.