PortscanGeoinfo is a plugin for the powerful Prelude correlation engine. This plugin correlates alerts from Snort NIDS and OSSEC HIDS sensors regarding portscans. Geographical information (GeoIP) is included in the correlated alert.
Features
- GeoIP lookup
- correlation of IDMEF events (prelude-correlator)
- correlation of portscans
Categories
Network MonitoringLicense
GNU General Public License version 2.0 (GPLv2)Follow PortscanGeoinfo
Other Useful Business Software
Go from Code to Production URL in Seconds
Skip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of PortscanGeoinfo !