inc-1789831905-05fe
AUTOMATED REMEDIATION (BLOCKED)
Detected Threat: Botnet from 198.51.100.185
Detected at: 2026-09-19 15:31:45 • Model Confidence: 85.3%
SHAP Feature Attribution Chart
Quantifies the positive/negative marginal contributions of network features toward this detection
+ Red: Drove Threat Classification
− Blue/Green: Pushed Toward Normal
Plain-Language Detection Rationale
Flagged as Botnet Activity (85.3% confidence) driven by abnormal number of outbound packets, high packet transmission frequency, and high total data transfer volume. Periodic communication patterns and abnormal packet size distributions matching command-and-control behavior.
Autoencoder Reconstruction Profile
Flow Reconstruction Error (MSE)
0.2438
Baseline Anomaly Threshold
0.2488
Within Normal Range: Flow structure fits within learned latent space baselines.
Flow Log Extracted Telemetry
Flow Duration
9.84s
Total Packets (Fwd / Bwd)
18 / 17
Total Bytes Transferred
2970 B
Throughput (Bytes/s)
301.8
Packet Rate (Packets/s)
3.6
Target Destination Port
6667
Distinct Contacted Ports
4
Firewall Reject Ratio
22.2%