288,493 Requests – How I Spotted an XML-RPC Brute Force from a Weird Cache Ratio

A 0.8% Cloudflare cache ratio led me to a single Singapore IP flooding a WordPress site with 288k xmlrpc.php requests. Detection, vector, and two-layer mitigation.
12 points by taubek 192 days ago marcindudek.dev 10 comments
Summary not yet generated for this article.

Comments (10 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open