Maltrail
A malicious traffic detection system that monitors network traffic for blacklisted threats and suspicious activities using public feeds and heuristics.
What is Maltrail?
Maltrail is a malicious traffic detection system that passively monitors network traffic to identify threats using publicly available blacklists, static malware trails, and heuristic mechanisms. It detects known malicious domains, IPs, URLs, and suspicious patterns like port scanning or data leakage, helping organizations spot compromised hosts and external attacks.
Network administrators, security analysts, and SOC teams responsible for monitoring and defending organizational networks against malware, scans, and intrusion attempts.
Developers choose Maltrail for its comprehensive threat intelligence aggregation, lightweight sensor-based architecture, and real-time web reporting interface that requires minimal dependencies and offers extensive customization for self-hosted deployments.
Overview
Malicious traffic detection system
Use Cases
Best For
- Detecting malware command-and-control (C&C) communications in network traffic
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
