Someone decided to throw a database of thousands of exploitable xmlrpc.php URLs at us this morning. It doesn’t work, but did create a couple performance hiccups in the timeline. This is why we use Hugo, so that hosted blogs are fast and mostly isolated from database code.