In reply to Kelson.

Attackers target XMLRPC to get in. That's why there are so many attacks on Wordpress xmlrpc.php . Keeping you busy is a "side effect" ( that can overload a server ).

"They just require keeping you busy" is a different problem.