Webserver load issues over the past week and wp-login attacks
As some users have noticed we’ve had some intermittent load issues with our webservers this week. After quite a bit of puzzling, I determined that the source appears to be an attack targeting WordPress blogs, specifically the wp-login.php page. Something about this attack seems to be causing a spill-over effect resulting in broader disruption.
Since that discovery I’ve been trying to find effective mitigation techniques, but have had to resort to periodic blocks of all requests to that URL. My apologies for any inconvenience this may have caused. As of yet I don’t have a complete resolution to the issue, but will post updates when possible.