Intrusion Prevention

fail2banPython

A daemon that scans log files and bans IP addresses with too many failed authentication attempts using firewall rules.

CrowdSecGo

An open-source, participative security engine that detects and blocks malicious IPs using crowdsourced threat intelligence.

pigC

A Linux packet crafting tool for generating attack signatures to test IDS/IPS and network security.

docker-suricataShell

A Docker image for Suricata, enabling easy deployment of the network intrusion detection and prevention system.

opnsense-suricata-nmaps

A set of Suricata IDS/IPS detection rules specifically designed to identify NMAP port scans across various scan types and speeds.

sshwatchPython

An Intrusion Prevention System (IPS) for SSH that blocks brute force attacks using iptables and optional nmap/dig probes.