1.crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+1,069 stars
from 14,408 · score 6.98
Trending repositories
Ranked by Attention Score: stars gained over the last 90 complete days
10 repositories by Attention Score · Aug 8, 2026 – Nov 5, 2026 (UTC)
2.stamparm / maltrail
Malicious traffic detection system
+113 stars
from 8,542 · score 4.74
3.OTRF / ThreatHunter-Playbook
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
- hunting
- dfir
- +3 more
+87 stars
from 4,620 · score 4.48
+44 stars
from 2,137 · score 3.81
5.SpacehuhnTech / DeauthDetector
Detect deauthentication frames using an ESP8266
+25 stars
from 966 · score 3.26
6.Flowtriq / nethawk
Real-time network traffic analysis in your terminal.
- cli
- ddos
- ddos-detection
- go
- network-monitoring
- network-security
- +8 more
+9 stars
from 7 · score 2.30
7.jasonish / docker-suricata
A Suricata Docker image.
+8 stars
from 330 · score 2.20
8.aleksibovellan / opnsense-suricata-nmaps
OPNSense's Suricata IDS/IPS Detection Rules Against NMAP Scans
- crowdsec
- intrusion-detection
- intrusion-detection-system
- intrusion-prevention
- intrusion-prevention-system
- nmap
- +14 more
+3 stars
from 86 · score 1.39
+1 stars
from 330 · score 0.69
10.bad-antics / nullsec-logreaper
🪓 High-Speed Log Analysis & Forensics Tool - Part of NullSec Toolkit
- c
- forensics
- log-analysis
- security
- high-performance
- nullsec
- +5 more
+1 stars
from 82 · score 0.69