2 Oct
2014
2 Oct
'14
4:39 p.m.
Are you running Wordpress?
My company's Wordpress installation was getting hammered by an IP in the same netblock, yesterday...look in your httpd logs for repeated POST >
operations to xmlrpc.php.
yes that is it.
Jerry
On Thu, Oct 2, 2014 at 10:23 AM, Jerry Geis geisj@pagestation.com wrote:
I just got SLAMMED with accessed to httpd from 91.230.121.156
I added the address to my firewall to drop it. FYI
host 91.230.121.156 156.121.230.91.in-addr.arpa domain name pointer no-rdns.offshorededicated.net.
Jerry