Disable XML-RPC-API

WordPress Only XML-RPC, or XML Remote Procedure Call is a protocol which uses XML to encode its calls and HTTP as a transport mechanism. Beginning in WordPress 3.5, XML-RPC is enabled by default. Hackers are known to use XML-RPC to crack wp-login.php, using zombie computers and servers scattering around the globe. Disable XML-RPC-API Disable XML-RPC-API …

Read more

All In One WP Security & Firewall – blocking bots

WordPress Only All In One WP Security & Firewall All-In-One Security (AIOS) – Security and Firewall Under Blacklist Manager Offending IP or IP ranges and bot UserAgents can be listed and banned

WP User Online – Detecting

WordPress Only WP-UserOnline By Lester ‘GaMerZ’ Chan WP-UserOnline This plugin is super helpful and a must tool in catching bot traffic. To get the underlying UserAgents, try “View Source” under various tools provided by the browsers.