Comment by dstu

That looks like pretty typical scanner traffic, especially the WP routes. I wouldn’t assume it’s necessarily specific to this exploit.