[CentOS] slammed

[Mike Burger]

On 2014-10-02 10:23 am, Jerry Geis wrote:
> I just got SLAMMED with accessed to httpd from
> 91.230.121.156
> 
> I added the address to my firewall to drop it.
> FYI
> 
> host 91.230.121.156
> 156.121.230.91.in-addr.arpa domain name pointer
> no-rdns.offshorededicated.net.

Are you running Wordpress?

My company's Wordpress installation was getting hammered by an IP in the 
same netblock, yesterday...look in your httpd logs for repeated POST 
operations to xmlrpc.php.

-- 
Mike Burger
http://www.bubbanfriends.org

"It's always suicide-mission this, save-the-planet that. No one ever 
just stops by to say 'hi' anymore." --Colonel Jack O'Neill, SG1