Home SOC

SSH attack dashboard

  1. Log Hunterfinds attacks in SSH logs
  2. IOC Enricherchecks attackers against threat intel
  3. Dashboardthis page

Failed SSH logins

Failed logins over time

10-minute intervals. Hover a column for the exact count.

Top attacking IPs

Failed logins per source address

Most-targeted usernames

Accounts attackers tried to log in as

Attackers and threat intelligence

Failed logins by country

Brute-force sources looked up in AbuseIPDB

Alerts

Raised by Log Hunter's detection rules