> Are you running Wordpress? > My company's Wordpress installation was getting hammered by an IP in the > same netblock, yesterday...look in your httpd logs for repeated POST > operations to xmlrpc.php. > yes that is it. Jerry On Thu, Oct 2, 2014 at 10:23 AM, Jerry Geis <geisj at pagestation.com> wrote: > I just got SLAMMED with accessed to httpd from > 91.230.121.156 > > I added the address to my firewall to drop it. > FYI > > host 91.230.121.156 > 156.121.230.91.in-addr.arpa domain name pointer > no-rdns.offshorededicated.net. > > > > Jerry >