Application Layer HTTP POST Flood for Exhaustion

Darshan Thummar@Mighty

•updated Jun 12, 2026•0•0•2

This rule detects an application layer HTTP POST flood, which is a type of Denial of Service (DoS) attack. It triggers when a single destination receives 200 or more HTTP POST requests within a 10-second window. This high volume of POST requests is indicative of an attempt to exhaust server resources or bandwidth.