今朝、WordPressにアクセスしたら、「データベースへの接続エラー」で、接続できない。プロセスを見ると

#ps aux
www-data 9215 1.9 2.9 115044 30724 ? S 07:11 0:07 /usr/sbin/apache2 -k start
www-data 9216 0.4 2.2 113856 23192 ? S 07:11 0:01 /usr/sbin/apache2 -k start
www-data 9217 0.5 2.4 114748 25476 ? S 07:11 0:02 /usr/sbin/apache2 -k start
www-data 9238 0.7 2.3 113888 24380 ? S 07:12 0:02 /usr/sbin/apache2 -k start

apacheへ大量のアクセスがある模様。うーん、だけどAnalyticsによれば大したアクセスないんだけどなぁと思ってアクセスログを確認したら

#/less/var/log/apache/access.log
185.130.5.165 - - [02/Apr/2016:07:04:05 +0900] "POST /xmlrpc.php HTTP/1.0" 500 561 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
185.130.5.165 - - [02/Apr/2016:07:04:07 +0900] "POST /xmlrpc.php HTTP/1.0" 500 561 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
185.130.5.165 - - [02/Apr/2016:07:04:08 +0900] "POST /xmlrpc.php HTTP/1.0" 500 561 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
185.130.5.165 - - [02/Apr/2016:07:04:15 +0900] "POST /xmlrpc.php HTTP/1.0" 500 561 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
185.130.5.165 - - [02/Apr/2016:07:04:27 +0900] "POST /xmlrpc.php HTTP/1.0" 500 561 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
185.130.5.165 - - [02/Apr/2016:07:04:36 +0900] "POST /xmlrpc.php HTTP/1.0" 500 561 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"
185.130.5.165 - - [02/Apr/2016:07:04:45 +0900] "POST /xmlrpc.php HTTP/1.0" 500 561 "-" "Mozilla/4.0 (compatible: MSIE 7.0; Windows NT 6.0)"

/xmlrpc.phpへ大量のアクセスが(^^;

WordPressのxmlrpc.phpを狙ったアクセスらしい

.htaccessに

<Files "xmlrpc.php">
order deny,allow
deny from all
</Files>

を追加して急きょ対策。ホームページにアクセスして無事アクセスが拒否される事を確認

Forbidden

You don’t have permission to access /xmlrpc.php on this server.