Color My Logs

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Handler on Duty: Didier Stevens

Threat Level: green

Copy and Paste a snippet from a log, or just enter IP addresses. We will try to annotate them with information from our various data feeds.

We do have a page explaining how we calculate risk here.

We have a tour video for this feature on YouTube.

copy/paste a log snippets, netstat output, or just enter IP addresses. (you need to log in to lookup more than 5 different IPs at a time)

Click here to parse. (it can take a while for all the data to be returned. give it a minute)

This page takes advantage of our API. Use it for scripted submissions.

Something went wrong? click here to submit your log for debugging.
Your e-mail address (optionally): any comments (please indicate what went wrong or what could be improved):

Top of page

Privacy Note: All IP addresses you enter (or what our script considers an IP address) will be sent to our web server. Other details should stay on the client unless you are using the debug feature to submit them.