Authentication Anomaly Analyzer

Spot repeated failures and many IPs in pasted login lines.

Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.

Authentication Anomaly Analyzer

How to use this tool

  1. Enter your values in the fields above.
  2. Press Generate to see the result.
  3. Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.

Worked example

The sample has 5 attempts, 4 failures, 3 users and 5 IPs, and alice is flagged with 3 failures from 3 IPs.

What this tool does not do / Limits

This analyzes only the lines you paste. It does not connect to any login system, account, or live log source.

Frequently asked questions

What counts as flagged?

Any user with 3 or more failed attempts in the pasted lines.

What line format is expected?

Date, user, IP address and result, separated by spaces.

Related tools