---
title: "Discussion on \"Coordinated Login Attack Detection with a Custom Alert Action (Splunk)\" | Hashnode"
description: "Discussion on \"Coordinated Login Attack Detection with a Custom Alert Action (Splunk)\". This lab pushed me a bit outside my comfort zone.\nUntil now, most of my Splunk work was about searches, dashboards, and alerts. Here, I wanted to answer a tougher question:\n\nWhat if the attack is distributed and doesn’t come from a single IP?\n\nThat’s..."
url: "https://hashnode.com/posts/coordinated-login-attack-detection-with-a-custom-alert-action-splunk/6948ae65ba8c47f61f2f4b37"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Coordinated Login Attack Detection with a Custom Alert Action (Splunk)](https://abishekvengeri.hashnode.dev/coordinated-login-attack-detection-with-a-custom-alert-action-splunk?utm_source=hashnode&utm_medium=feed)

This lab pushed me a bit outside my comfort zone. Until now, most of my Splunk work was about searches, dashboards, and alerts. Here, I wanted to answer a tougher question: What if the attack is distributed and doesn’t come from a single IP? That’s...

Dec 22, 2025 · 3 min read · abishekvengeri.hashnode.dev  
Read the article

## Written by

[abishekvengeri](https://hashnode.com/@abishekvengei)

@abishekvengei · kozhikode ,kerala

  
[View profile](https://hashnode.com/@abishekvengei)

Hacking, Learning, Growing – My Cybersecurity Path.

Cybersecurity Enthusiast | CTF Creator | Ethical Hacking Learner Passionate about cybersecurity, CTF challenges, and ethical hacking. Sharing my journey, experiences, and lessons as I explore the world of security.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.