inc-1789760090-041a
AUTOMATED REMEDIATION (BLOCKED)
Detected Threat: BruteForce from 198.51.238.225
Detected at: 2026-09-18 19:34:50 • Model Confidence: 89.2%
SHAP Feature Attribution Chart
Quantifies the positive/negative marginal contributions of network features toward this detection
+ Red: Drove Threat Classification
− Blue/Green: Pushed Toward Normal
Plain-Language Detection Rationale
Flagged as Brute Force Attack (100.0% confidence) due to elevated data throughput rate, high total data transfer volume, and abnormal number of outbound packets. Repeated connection attempts against specific authentication ports with elevated reject rates.
Autoencoder Reconstruction Profile
Flow Reconstruction Error (MSE)
0.7228
Baseline Anomaly Threshold
0.2488
Anomaly Confirmed: The Autoencoder's reconstruction loss exceeded the 95th-percentile baseline normal threshold, confirming unfamiliar traffic behavior.
Flow Log Extracted Telemetry
Flow Duration
4.50s
Total Packets (Fwd / Bwd)
40 / 35
Total Bytes Transferred
8200 B
Throughput (Bytes/s)
1822.2
Packet Rate (Packets/s)
16.6
Target Destination Port
22
Distinct Contacted Ports
1
Firewall Reject Ratio
88.0%