Cloud Management Console Brute Force Attempt

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•2

This rule detects a brute force attempt against a cloud management console. It triggers when a source IP address makes 10 or more HTTP POST requests to a URI containing 'signin' within a 30-second window. This pattern is indicative of an automated attempt to guess credentials for a login page.