Bulk Account Registration Pattern Detected

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•6

This rule detects a pattern of bulk account registration attempts by monitoring HTTP POST requests to URIs containing 'register'. It triggers an alert if 10 such requests are observed from the same source IP within a 60-second window, indicating potential automated account creation or abuse.