HTTP Basic Auth Brute-Force via Repeated 401 Unauthorized Responses
Detects high-frequency HTTP 401 Unauthorized responses associated with Basic Authentication attempts within a short timeframe, indicating a potential credential brute-force attack.
Suricata

