Managed Sentinel – Alert 176

Alert IDMS-A176
Alert NamePassword Spraying to SonicWall Admin CLI
DescriptionThis alert generates when more than 50 different usernames fail to login to the SonicWall admin console from the same IP.
Severity LevelLow
Threat Indicator
MITRE ATT&CK TacticsInitial Access
Log sourcesCommonSecurityLog
False Positives
Recommendations