
10 active alerts across monitored network
| Timestamp | Threat Type | Source IP | Dest IP | Severity | Confidence | Actions |
|---|---|---|---|---|---|---|
| DoS | 192.168.1.47 | 10.0.0.5 | critical | 96.4% | ||
| Probe | 203.0.113.22 | 10.0.3.18 | high | 91.2% | ||
| R2L | 198.51.100.14 | 10.0.2.7 | critical | 88.7% | ||
| DoS | 172.16.0.33 | 10.0.0.5 | high | 84.3% | ||
| Anomaly | 10.0.1.112 | 10.0.4.200 | medium | 72.6% | ||
| U2R | 192.168.5.88 | 10.0.0.1 | critical | 94.1% | ||
| Probe | 203.0.113.55 | 10.0.3.22 | medium | 67.8% | ||
| DoS | 198.51.100.41 | 10.0.0.12 | high | 89.5% | ||
| Anomaly | 10.0.2.44 | 10.0.5.100 | low | 54.2% | ||
| R2L | 192.168.8.17 | 10.0.1.3 | medium | 76.9% |
Detected attacks and anomalies over the last 24 hours
SYN flood detected from 192.168.1.47 targeting port 443 — 2,340 packets/sec sustained over 45 seconds.
Sequential port scan from external IP 203.0.113.22 across ports 20-1024 on subnet 10.0.3.x.
Brute-force SSH login attempts from 172.16.0.88 — 847 failed authentications in 3 minutes.
Privilege escalation attempt detected — buffer overflow payload on local service (pid 4821).
UDP amplification traffic spike from multiple sources targeting DNS resolver at 10.0.1.2.
Unusual outbound data pattern on port 8443 — ML model flagged anomalous byte distribution.
ICMP echo sweep detected from 192.168.5.100 across internal management VLAN.
FTP credential stuffing attempt from 45.33.32.156 — automated tool signature detected.
No comments yet. Be the first!