Hi PuzanovsP, it's both.We are seeing some malicious traffic though it looks like hackers attempting to gather logins (wp-login.php) rather than actual DDoS.We also have authors who distribute bad links. That's an organizational problem and not one that I can deal with (though we are working on it)...