inc-1789756102-7aa1
AUTOMATED REMEDIATION (BLOCKED)
Detected Threat: BruteForce from 198.51.100.99
Detected at: 2026-09-18 18:28:23 • Model Confidence: 89.2%
SHAP Feature Attribution Chart
Quantifies the positive/negative marginal contributions of network features toward this detection
+ Red: Drove Threat Classification
− Blue/Green: Pushed Toward Normal
Plain-Language Detection Rationale
Flagged as Brute Force Attack (100.0% confidence) due to unusually high count of contacted destination ports, distinctive average packet payload size, and abnormal number of outbound packets. Repeated connection attempts against specific authentication ports with elevated reject rates.
Autoencoder Reconstruction Profile
Flow Reconstruction Error (MSE)
0.0000
Baseline Anomaly Threshold
0.2488
Within Normal Range: Flow structure fits within learned latent space baselines.
Flow Log Extracted Telemetry
Flow Duration
1.00s
Total Packets (Fwd / Bwd)
0 / 40
Total Bytes Transferred
1600 B
Throughput (Bytes/s)
1600.0
Packet Rate (Packets/s)
40.0
Target Destination Port
20
Distinct Contacted Ports
40
Firewall Reject Ratio
100.0%