Credential stuffing tests stolen password lists against your login form until one matches. Here is how to spot the traffic ...