Malicious traffic detection system

Since 2011, IPBan is the worlds most trusted, free security software to block hackers and botnets. With both Windows and Linux support, IPBan has your dedicated or cloud server protected. Upgrade to IPBan Pro today and get a discount. Learn more at ↓

Wazuh - Tools for packages creation

Managed app for the host-based intrusion detection agent Falco.

CoreDNS plugin exposing Prometheus metrics for malicious or prohibited requests

💻🔍 WIFI / LAN intruder detector. Scans for devices connected to your network and alerts you if new and unknown devices are found.

Jube is an open-source software designed for monitoring transactions and events. It offers a range of powerful features including real-time data wrangling, artificial intelligence, decision making, and case management. Jube's exceptional performance is particularly evident in its application to fraud prevention and abuse detection scenarios.

SQL powered operating system instrumentation, monitoring, and analytics.

This repository provides comprehensive guides, configurations, rules, and practical examples for Snort, the open-source intrusion detection system (IDS). Ideal for cybersecurity professionals and enthusiasts looking to enhance their network security skills.

Plugins for Wazuh Dashboard

Wazuh - Project documentation

Detect and warn about suspicious IPs logging into Nextcloud

Daemon to ban hosts that cause multiple authentication errors

Wazuh - Docker containers

Wazuh - Ansible playbook

why Individual Packet Features (IPF) should not be used for intrusion detection

Wazuh - Puppet module

This tool parses log data and allows to define analysis pipelines for anomaly detection. It was designed to run the analysis with limited resources and lowest possible permissions to make it suitable for production server use.

A comprehensive overview of datasets for research in host-based and/or network-based intrusion detection with a focus on enterprise networks

wolfSSL product manuals and documentation.