Automated filtering with Snorby and Suricata
Since a long time I’m running Suricata on a few Internet facing boxes, just to see what’s attempted to access these boxes unauthorized. It brings a great deal of new information, however there are limits what people should be allowed to do. Politely asking them to stop does not work, nor emailing the abuse address …