Hi, Thanks for the response. On 04/11/2019 18:12, ed-bitfolk(a)s5h.net wrote: The website is hosted on the VPS, however it was being accessed via an SSH link. The website appears to be on localhost:8080 to those with the SSH link open. There were a large number of POSTS to /xmlrpc.php which is part of wordpress. I thought nothing of it, until I googled it. Seemingly xmlrpc.php is used to post remotely to your site. Curently it is more used for DDOS attacks. The IP was from china. So xmlrpc will be disabled on all my wordpress sites. It works great. Regards Ian -- Ian Hobson Tel (+351) 910 418 473 -- This email has been checked for viruses by AVG. https://www.avg.com

** Jon Spriggs &lt;jon(a)sprig.gs&gt; [2019-11-04 19:51]: <snip> ** end quote [Jon Spriggs] I have had issues with RPC and WordPress, and still get regular probes/connections. I did have the Disable XML-RPC Pingback plugin for a while, but I've removed it now as I have Fail2ban doing the job. It seems to be kept quite busy, but is clearly doing its job, and has the benefit of allowing Jetpack to function if you want to connect with that. -- Paul Tansom | Aptanet Ltd. | https://www.aptanet.com/ | 023 9238 0001 ============================================================================= Registered in England | Company No: 4905028 | Registered Office: Ralls House, Parklands Business Park, Forrest Road, Denmead, Waterlooville, Hants, PO7 6XP

** Gavin Westwood &lt;bitfolk-lists-2015(a)gavinwestwood.uk&gt; [2019-11-05 16:11]: ** end quote [Gavin Westwood] I set this up in 2014 by the looks of it. I can't remember where I got the reference info from, but I've got a file I ended up calling wp-xmlrpc.conf in the /etc/fail2ban/filter.d directory (Ubuntu 18.04). That may be unecessary detail. The content is: -- # Fail2Ban configuration file [INCLUDES] # Read common prefixes. If any customizations available -- read them from # common.local before = common.conf [Definition] _daemon = wp-xmlrpc # Option: failregex # Notes.: regex to match repeated xmlrpc attacks. The # host must be matched by a group named "host". The tag "" can # be used for standard IP/hostname matching and is only an alias for # (?:::f{4,6}:)?(?P[\w\-.^_]+) # Values: TEXT # failregex = \s.*\s.POST /xmlrpc.php HTTP/1.1"*.\s.* # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. # Values: TEXT # ignoreregex = and /etc/fail2ban/jail.local [wp-xmlrpc] enabled = true filter = wp-xmlrpc action = iptables-multiport[name=wp-xmlrpc, port="80,443", protocol=tcp] sendmail-whois[name=wp-xmlrpc, dest=email(a)domain.net] logpath = /home/*/logs/access_log maxretry = 10 findtime = 60 bantime = 3600 -- I am no expecting somebody to point out an error :-) -- Paul Tansom | Aptanet Ltd. | https://www.aptanet.com/ | 023 9238 0001 ============================================================================= Registered in England | Company No: 4905028 | Registered Office: Ralls House, Parklands Business Park, Forrest Road, Denmead, Waterlooville, Hants, PO7 6XP

Hello, On Mon, Nov 04, 2019 at 07:52:39PM +0000, ed-bitfolk(a)s5h.net wrote: Which static site generator do you like? Which have you tried? Cheers, Andy -- https://bitfolk.com/ -- No-nonsense VPS hosting

If people want the advantages of WordPress with the speed and security of a static site, there are at least a couple of plugins that will create a static site from a WordPress one. I am responsible for a string of event sites - after the thing is over, they get transformed into static site archives in about a minute. Ian

On Tue, 5 Nov 2019 at 11:52, Andy Smith &lt;andy(a)bitfolk.com&gt; wrote: I've used a lot of Jekyll (and not much else!) I ported lug.org.uk from Drupal to Jekyll. It's hosted on a Bitfolk VPS, but the code that creates it is here: https://github.com/lugorguk/lug.org.uk-website I also ported oggcamp.org to the same host: https://github.com/oggcamp/oggcamp.github.io I have a simple cron job that fires on lug.org.uk to poll the git repo. That's here: https://github.com/jontheniceguy/git-autoupdate For sites which are not hosted at lug.org.uk, I've been a part of the team who host technw.uk, who use github pages to host their site: https://github.com/manchester-tech-events/manchester-tech-events.github.io And, a while ago, I was part of the team who updated vagrantbox.es, although this has seen very little love since Hashicorp started running their own index: https://github.com/garethr/vagrantboxes-heroku All the best, -- Jon "The Nice Guy" Spriggs @jontheniceguy everywhere... https://jon.sprig.gs

I use Hugo (https://gohugo.io/). Seems to do what I need, and doesn’t require java or anything much else installed for it to run. cheers, David