I can't fish it out now, but there were a lot of attempts to xmlrpc.php, like you have there. So we know it's the same type of attack. :-)

I checked my email logs and there were no mass-outbound emails, so they never got in to do that.

Wade.