inc-1789965948-c57e
AUTOMATED REMEDIATION (BLOCKED)
Detected Threat: DoS from 198.51.100.124
Detected at: 2026-09-21 04:45:48 • Model Confidence: 99.2%
SHAP Feature Attribution Chart
Quantifies the positive/negative marginal contributions of network features toward this detection
+ Red: Drove Threat Classification
− Blue/Green: Pushed Toward Normal
Plain-Language Detection Rationale
Flagged as Denial-of-Service (99.6% confidence) driven by abnormal number of outbound packets, high total data transfer volume, and elevated ratio of REJECT-action firewall/NACL drops. Characterized by an overwhelming burst of packet and byte rates intended to exhaust server resources.
Autoencoder Reconstruction Profile
Flow Reconstruction Error (MSE)
2.6371
Baseline Anomaly Threshold
0.2488
Anomaly Confirmed: The Autoencoder's reconstruction loss exceeded the 95th-percentile baseline normal threshold, confirming unfamiliar traffic behavior.
Flow Log Extracted Telemetry
Flow Duration
37.97s
Total Packets (Fwd / Bwd)
1391 / 23
Total Bytes Transferred
1648335 B
Throughput (Bytes/s)
43411.6
Packet Rate (Packets/s)
37.2
Target Destination Port
443
Distinct Contacted Ports
2
Firewall Reject Ratio
40.0%