The discovery was made by security firm Sucuri that counted more than 162,000 legitimate WordPress sites. The attack targets the XML-RPC implemented by web sites running WordPress and many other Web applications that offer services such as pingbacks, trackbacks, and remote access to some users. A similar attack is considerable as an application DDoS conducted with ISO/OSI application layer requests, exactly like HTTP DDoS attack, but its magnitude is significantly lower respect DNS amplification DDoS attacks or an NTP based DDoS.”]