Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 19:45:30 UTC

Credential Stuffing Attempt

Low Investigating
ALR-00395 · 2026-07-07T03:37:47Z

Description

Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Attack Surface Scanner.

Alert Metadata

Alert ID
ALR-00395
Timestamp
2026-07-07T03:37:47Z
Severity
Low
Status
Investigating
Detection Source
Attack Surface Scanner
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
AP-WIFI-03
User Account
k.brown
Source IP
185.219.220.156
Destination IP
10.0.196.246
Origin Country
FR France

MITRE ATT&CK Mapping

Tactic
Credential Access
Technique
T1110.004
Reference
attack.mitre.org/techniques/T1110.004

Investigation Timeline

03:37:47 Event ingested by SOC365 Engine
03:37:52 EmilyAI triage started — correlation enrichment
03:37:53 EmilyAI confidence: 78% — escalated to human analyst
03:38:04 Alert assigned to analyst: EmilyAI (auto)
03:38:36 Investigation started — querying SIEM and threat intelligence

Related Alerts

ID Time Alert Severity Status Host
ALR-00224 3h ago Lateral Movement Detected High Open AP-WIFI-03
ALR-00174 5h ago Insider Threat Indicator Informational Escalated AP-WIFI-03
ALR-00475 5h ago Credential Stuffing Attempt Informational False Positive SRV-MAIL-01
ALR-00352 5h ago Credential Stuffing Attempt Medium False Positive SRV-FILE-01
ALR-00276 8h ago Kerberoasting Attempt High Escalated AP-WIFI-03