On Monday 23. October we experienced the most extensive attack on WordPress installations. The “Indonesian botnet” has fully awakened and started massively attacking the files of xmlrpc.php. Although the attack tried to look inconspicuous, the result was truly massive.
When 162,000 unique IPs attack 143,000 websites
