I have the wordpress.com stats pugin installed in my site. Some of my visitors see this url /xmlrpc.php and this too /wp-content/themes/appzine/favicon.ico When i click on that link, i get a msg "NOT FOUND Sorry, but you are looking for something that isn't here." Rest of the visited url's are of the posts in my website. What exactly does those people visit in my site, is this a security issue or is it anything else. I am newbie here, so kindly forgive me if i had asked a stupid question
have you updated your wordpress? xmlrpc is i think you have to enable it and its from settings. i think its purpose is to do upload wordpress posts from your mobile or email.
xmlrpc is probably used by robots and such stuff but favicon is just a normal thing. Maybe you have deleted the favicon and it is still in the theme and so it loads up. Favicon should not be an issue. Anyways if you are updating wordpress and keeping it secure and using proper permissions in your web host then it should not be problem. xmlrpc might also be used for trackback so just make sure that your comments are properly moderated and trackbacks switched off if you do not need them.