Patent ID: 9699203
Date: 2017-07-04
CPC Classifications: H04L

Claim:
1. A method comprising: receiving, at a server computer, a first plurality of login requests, each comprising a username and a password; identifying a first internet protocol (IP) address and a first request time associated with each of the first plurality of login requests; determining that a total number of login requests from the first IP address within a threshold time period is above a credential security threshold; determining that a number of usernames associated with the first plurality of login requests is above a username threshold; determining that a login success ratio is below a threshold login success ratio after determining that the total number of login requests from the first IP address is above the credential security threshold; and in response to determining the login success ratio is below the threshold login success ratio and determining that the number of usernames is above the username threshold, automatically performing a security action using the server computer; wherein determining the number of usernames associated with the total number of login requests comprises: