@GibsonResearch There are 90,000 IPs involved in the attack on WordPress logins, not 90,000 websites which have been compromised.