Hello,
So recently a "script kiddie" tried to exploit one of my websites running on wordpress / myarcadeplugin by uploading a exploited .js file to which I removed and redirected them via .htaccess to an external MP3 of "You are an idiot", that might of triggered them. Since after that they brute forced the file xmlrpc.php dispite me having the plugins to have it disabled but to be honest xmlrpc.php isn't really a big required file, so what I did next is pretty epic. the plugin used to stop bad enquries
https://en-gb.wordpress.org/plugins/block-bad-queries/
The exploit:
The brute force attacks towards xmlrpc.php
My Response:
Sure enough after I did this, my load on my hosting dropped and I was free to do as I please again.
Thanks script kiddies.
https://www.youtube.com/watch?v=Um_ZEFwlWV4
Thanks & have an epic day,
Antz