Intelligently block brute-force attacks by aggregating system logs
SSHGuard protects hosts from brute-force attacks against SSH and other services. It aggregates system logs and blocks repeat offenders using several firewall backends, including iptables, ipfw, and pf.
Simple Event Correlator (SEC) is a lightweight event correlator for network management, log file monitoring, security management, fraud detection, and other tasks which involve event correlation.
DenyHosts is a python program that automatically blocks ssh attacks by adding entries to /etc/hosts.deny.
DenyHosts will also inform Linux administrators about offending hosts, attacked users and suspicious logins.
This project is being actively developed on GitHub (https://github.com/denyhosts)
ATTENTION: Snare Lite is unsupported legacy software. While it will remain a part of the SourceForge community, it is no longer secure and compliant. For up to date Snare software check out Snare Enterprise.
https://www.snaresolutions.com/try-snare-for-free/
Snare Enterprise was created to keep up with the fast paced security software market. It started with the desire to create premium logging and SIEM tools that were agnostic by nature so they could be used to boost any SIEM...
BigBrotherBot (B3) is a cross-platform, cross-game game administration bot. Features in-game administration of game servers, multiple user access levels, and database storage. Currently include parsers for: Call of Duty, Urban Terror and more!
GoAccess is a real-time Apache web log analyzer and interactive viewer that runs in a terminal and provides fast and valuable HTTP statistics for system administrators that require a visual report on the fly.
Logdigest mails interesting lines from log files to the system administrator. Non-relevant lines are filtered out by customizable regular expressions. Logdigest comes with a set of such regexps to provide a good starting point.
A PHP application to search for matching strings in log files. It was mainly designed for usage in a syslog server environment with big log files, where you cannot log to databases due to the size, but to plain text files which will be searched.
Deploy in 115+ regions with the modern database for every enterprise.
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
LogsZilla is a logs analyzer of the FTP server Filezilla, showing reports for the control of the activity of the server. Exports reports to HTML, and can to realize automated reports.
Open Asset Logger is the next logical step in the evolution of WMI Asset Logger, a freeware product I started several years back to help manage and maintain LAN connected assets, located here: http://johnjthomas.net
Nuhe Client is a project related to the Nuhe Action Capable Log Monitor. This GUI client simplifies the administration of sensors and node managers, making it easier to control and monitor the network. Comes with a rule editor as well as a log monitor.
monitors logfiles and displays in realtime. log messages may be formatted with different fonts and colors, contents can be parsed, reformated, may even trigger actions playing sounds or executing shell commands. Log can be viewed remotely via webbrowser.
It's a powerfull environment to easy administrate a web-page including many tools like visitor-statistics, forum- and guestbook management...
Anything you need for your homepage in one tool.
PyIDS is an intrusion detection system whose aim is to provide concise information to administrators about some parts of the system i.e filesystem checksums, unknown connections to the machine, access control lists of special files, log revision...
SrvReport is a simple and featurefull server monitoring and reporting
system. It will send every day a mail with the latest
state of the server including traffic (via /proc/net/dev and/or iptables), cpu, mail, http, ftp reports
and other logs.
Squeezer is a multi-dimensional logfile analyzer for Squid web cache server. It measures transfer speed from Squid, source servers and other caches and gives an information useful for tuning Squid and web cache hierarchy or mesh.
LogCop is a set of turn-key bash/firewall/awk scripts for enhancing an IDS. It monitors system logs and blocks IP addresses based on such criteria as illegal user names from repeated attacks. In production under Linux, FreeBSD, OS X, Solaris.
IP Traffic Volume: Logs (counts) in- & outgoing bytes through network device(s) using kernel iptables. Highly configurable as to which bytes are logged, e.g. to/from specific ports or ip-addresses. Data displayed in html via cgi or plain ascii to console
Scripts written in php/mysql/bash aimed to provide control over volume of traffic downloaded with users through squid proxy server. Users are identified with ip addresses or computers names. Current version of squid-traffic contains an installer that sim
The Titan Firewall is an interface Web to manage firewall based on Linux with iptables. It supports filtrate of packages, NAT, logs, VPN's... Implemented in Java and jsp.
RJStats assists in network and host monitoring by creating many graphs of your servers using rrdtool. These graphs can be viewed using a web browser in any combination you would like to see them.