NAME

ThreatDetector::Handlers::RateLimiter - Detects rate-based abuse by tracking burst activity

SYNOPSIS

use ThreatDetector::Handlers::RateLimiter qw(handle_rate_burst);

handle_rate_burst($entry);

DESCRIPTION

Monitors how frequently a given IP sends requests. If the number of requests in a short time window exceeds a configured threshold, it emits an alert. This is useful for detecting denial-of-service attempts, scraping bots, or brute-force login attempts spread across different endpoints.

AUTHOR

Jason Hall <jason.kei.hall@gmail.com>