May 19, 2026 at 6:08 am
#4340
Participant
In my opinion, yeah, I’ve seen a few sites get hit like that lately. Usually it’s not some big “wave” in the dramatic sense, it’s just bots cycling through the same stupid endpoints once they find one that responds. If comments and registrations both light up, I’d be looking at whatever’s exposed on the WP side first, not assuming it’s random. Could be a plugin update, could be a form/registration endpoint getting scraped by the same junk bot set. I’ve had Akismet-ish stuff miss a bunch and then the spam just keeps coming back until I lock down the actual entry points. Annoying as hell.