Apparently, this attack is straining WPE resources. I have a client whose site went down with 502/504 errors on Saturday, and only was back up today at noon after rolling it back, and it's still not 100%. They have a dedicated server and of course pay a hefty premium for their service, and I still haven't gotten an explanantion.