Service Exhaustion via HTTP Request Flood

Darshan Thummar@Mighty

•updated Jun 12, 2026•0•0•2

This rule detects a denial-of-service attack characterized by a high volume of HTTP GET requests targeting a server within a short timeframe. Specifically, it triggers if a single destination IP address receives 500 or more HTTP GET requests within a 10-second window, indicating a potential HTTP request flood aimed at exhausting service resources.