Defensive security · Log analysis

See the signals in your logs.

Explore SSH authentication events, spot repeated failures, and inspect the source records. Start with synthetic sample data or load a log file.

Your logs stay private: Files are read and analyzed in this browser; they are not sent to a server or saved. Use only logs you’re authorized to inspect. The included sample is synthetic and uses documentation-only IP addresses.

Analyze your own SSH logDrop a .log or .txt file here, or choose one from your device. Maximum file size: 5 MB.

Events parsed ▤

—

Recognized SSH records

Failed logins ↘

—

Successful logins ↗

—

Accepted authentication events

IPs over threshold !

—

Repeated failures to review

Failed attempts by source

Top sources in the loaded records

Flag at

Sources to review

A threshold is a review signal, not proof of an attack

0 flagged

Authentication events

Synthetic sample · sample_auth.log

Timestamp	Result	User	Source IP	Service

0 events