Mastodawn

288,493 Requests – How I Spotted an XML-RPC Brute Force from a Weird Cache Ratio

https://marcindudek.dev/blog/xmlrpc-brute-force-cache-rate/

#HackerNews #XMLRPC #BruteForce #CacheRatio #Security #Analysis #Cybersecurity #TechInsights

288,493 Requests in 24 Hours — How I Spotted an XML-RPC Brute Force via Cache Rate

A 0.8% Cloudflare cache ratio led me to a single Singapore IP flooding a WordPress site with 288k xmlrpc.php requests. Detection, vector, and two-layer mitigation.

OTX Bot 4d ago

Q1 2026 Malware Statistics Report for Windows Database Servers

During the first quarter of 2026, Windows-based MS-SQL and MySQL database servers experienced consistent malicious attacks with a temporary decrease in February before rising again in March. The primary threat actor, Larva-26002, leveraged various utilities including BCP, curl, bitsadmin, and PowerShell to deploy a Go-based scanner called ICE Cloud, which contained Turkish language strings and C&C-based scanning capabilities. This tool attempted MS-SQL authentication using predefined credentials. Attack methods primarily consisted of brute force attacks, dictionary attacks, and exploitation of unpatched systems with misconfigured accounts stemming from inadequate account management practices.

Pulse ID: 69de00aae91f11a6bf2fbe68
Pulse Link: https://otx.alienvault.com/pulse/69de00aae91f11a6bf2fbe68
Pulse Author: AlienVault
Created: 2026-04-14 08:54:02

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#BruteForce #CandC #Cloud #CyberSecurity #ICS #InfoSec #MSSQL #Malware #MySQL #OTX #OpenThreatExchange #PowerShell #RCE #SQL #Turkish #Windows #bot #AlienVault

LevelBlue - Open Threat Exchange

Learn about the latest cyber threats. Research, collaborate, and share threat intelligence in real time. Protect yourself and the community against today's emerging threats.

LevelBlue Open Threat Exchange

-=Kernel-Error=-Jan 7

SSH-Bruteforce, DigitalOcean und AbuseIPDB – warum Blocken das Problem nicht löst

Aus gegebenem Anlass möchte ich ein paar Gedanken zu DigitalOcean aufschreiben. Nicht, weil ich glaube, dass DigitalOcean ein grundsätzliches Problem hat oder etwas falsch macht. Sondern weil DigitalOcean in meinen Logs seit Jahren besonders auffällt. Am Ende steht DigitalOcean hier eher sinnbildlich für ein größeres Thema. Wer Systeme im Internet betreibt, kennt das Spiel. Server werden dauerhaft von außen angefasst. SSH-Ports werden gescannt, Login-Versuche laufen durch, Webseiten […]

https://www.kernel-error.de/2026/01/07/ssh-bruteforce-digitalocean-und-abuseipdb-warum-blocken-das-problem-nicht-loest/

Analyst207 Apr 8

GPU Price Doesn't Dictate Password Cracking Success

You don't need to break the bank on cutting-edge AI hardware to crack weak passwords - a recent study found that a $30,000 GPU doesn't outperform readily available consumer cards, proving that attackers can succeed with everyday tech.

https://osintsights.com/gpu-price-doesnt-dictate-password-cracking-success?utm_source=mastodon&utm_medium=social

#PasswordCracking #BruteForce #WeakCredentials #EmergingThreats #AiHardware

GPU Price Doesn't Dictate Password Cracking Success

Discover how GPU price doesn't dictate password cracking success. Learn why attackers don't need expensive hardware to crack weak passwords, read now and strengthen your security.

OSINTSights

Wulfy—Speaker to the machines Apr 8

So I didn't write down the password to one of my new routers and for shits and giggles I'm trying to #bruteforce it on my network with #hydra
I've never used it before but it looks superb, the way it multi threads and does not overload the server.
I didn't want to factory default because I want the port data for diagnostic.

C.Apr 5

When trying to solve a difficult problem, do not under-estimate the power of brute force & ignorance.

#solve #solution #problem #BruteForce #Ignorance #BruteForceAndIgnorance

Turbo Learn PHP Apr 1

Stop IP-based attacks with sliding windows.

#php #python #login #bruteforce #ip #ratelimiting #security #backendsafety #reliability #viralcoding

https://www.youtube.com/watch?v=fZ8sx2zoF5c

Login IP Bruteforce Window #Python

YouTube

French Cinema & Subtitles Mar 31

📝 Plot: In the harsh confines of Westgate Penitentiary, Joe Collins and fellow inmates endure brutality under Captain Munsey’s sadistic regime. As tensions rise and punishments intensify, Collins plots a dangerous escape. Loyalty, desperation, and the quest for freedom collide in this gripping prison noir that leaves no room for compromise or mercy.

#BruteForce #Crime #Drama #FilmNoir #PrisonDrama #EscapePlot #ClassicFilm #1940s #Intensity

French Cinema & Subtitles Mar 31

🎭 Cast: Burt Lancaster, Hume Cronyn, Charles Bickford, Yvonne De Carlo, Ann Blyth, Ella Raines, Anita Colby, Sam Levene, Jeff Corey, John Hoyt, Whit Bissell, Art Smith…

#BruteForce #sousTitres #Crime #Drama #FilmNoir #PrisonDrama #ClassicFilm #EscapePlot #Intensity