I'm running a php application on a VPS. Recently I started a blog for my app on the same server, using wordpress and nginx.
Everything was running fine, until today server was returning error 502 and extremely slow. After some research, I found out I was having a ton of requests to wordpress xmlrpc.php
file, so, yeah, my server is under attack.
I have renamed the file to keep it from being accessed, and installed a security plugin on wordpress, it's ok now, but I'm still receiving a ton of post requests to the nonexistent xmlrpc.php
file.
It's the first time I'm dealing with this, my questions are:
- Would this repeated traffic to an inexistend file still hurt my server performance or memory?
- Is there a way to block it (or setup something that would block it) before reaching nginx?
Any help or insight would be greatly appreciated.