288,493 Requests – How I Spotted an XML-RPC Brute Force from a Weird Cache Ratio

2 comments

• dwedge 1 hour ago
  I'm really quickly getting to the point where I can't read LLM posts. I tried because on the face of it this seemed interesting but after the third or fourth tell, I got sick of reading something that a) is 50% longer than it needs to be and b) the author didn't bother to write
• VladVladikoff 1 hour ago
  What’s the point of Cloudflare if it can’t even filter out the most basic of brute force Wordpress attacks? Also article is trash AI LLM gen content that makes it painful to read.
  [-]
  • dwedge 42 minutes ago
    > What’s the point of Cloudflare if it can’t even filter out the most basic of brute force Wordpress attacks

    Luckily for a one time payment of just $499 the author has a solution at the bottom of the article
  • eli 43 minutes ago
    They have rate limiting rules but they aren't on by default and are separate from the WAF which is mostly stateless.
  • faangguyindia 26 minutes ago
    here's the solution:

    static site generator + cf pages.