May 20, 2026 at 6:50 am
#5559
Participant
Yeah, I’d still want to see the actual logs before calling it a “bot wave.” Half the time it’s one signup form or a comment endpoint getting abused and it just *looks* like everything’s on fire. If this started right after a plugin update, that’s the first thing I’d roll back or at least compare against yesterday’s hits. If it’s the same usernames/IP ranges and the same junk patterns, it’s…