1.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+403 stars
from 15,074 · score 6.00
Trending repositories
Ranked by Attention Score: stars gained over the last 30 complete days
8 repositories by Attention Score · Oct 7, 2026 – Nov 5, 2026 (UTC)
2.stamparm / maltrail
Malicious traffic detection system
+43 stars
from 8,612 · score 3.78
3.OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
- hunting
- dfir
- +3 more
+24 stars
from 4,683 · score 3.22
+15 stars
from 2,166 · score 2.77
5.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+10 stars
from 981 · score 2.40
6.jasonish / docker-suricata
A Suricata Docker image.
+4 stars
from 334 · score 1.61
+1 stars
from 330 · score 0.69
8.Flowtriq / nethawk
Real-time network traffic analysis in your terminal.
- cli
- ddos
- ddos-detection
- go
- network-monitoring
- network-security
- +8 more
+1 stars
from 15 · score 0.69