Credential Stuffing Attempt
Informational
Open
ALR-00394 · 2026-07-06T15:39:57Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Attack Surface Scanner.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
15:39:57
Event ingested by SOC365 Engine
15:40:02
EmilyAI triage started — correlation enrichment
15:40:08
EmilyAI confidence: 88% — escalated to human analyst
15:40:31
Alert assigned to analyst: EmilyAI (auto)
15:41:21
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00113 | 45m ago | Credential Stuffing Attempt | Medium | Open | SRV-DC-01 |
| ALR-00090 | 2h ago | Credential Stuffing Attempt | Informational | Escalated | WS-PC-002 |
| ALR-00399 | 3h ago | Brute Force SSH | Medium | False Positive | WS-MAC-005 |
| ALR-00260 | 7h ago | Data Exfiltration Attempt | High | Open | WS-MAC-005 |
| ALR-00444 | 9h ago | Credential Stuffing Attempt | Low | Investigating | SRV-BACKUP-01 |