wp2shell Coordinated Mass Scanning Against WordPress REST Batch Endpoint - Volume Threshold
Detects high-volume, threshold-based scanning/exploitation attempts against the WordPress REST API batch endpoint from a single source, consistent with mass wp2shell PoC-driven exploitation.
Suricata

