Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Pull Request for PyVerse 💡
Requesting to submit a pull request to the PyVerse repository.
Issue Title
Please enter the title of the issue related to your pull request.
Add an Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) tool
Info about the Related Issue
What's the goal of the project?
The aim of this IDS/IPS code is to detect suspicious network activity by analyzing packet payloads and automatically block malicious IPs in real-time. It enhances network security by providing intrusion detection and prevention.
Name
Please mention your name.
Deanne Vaz
GitHub ID
Please mention your GitHub ID.
https://github.com/djv554
Email ID
Please mention your email ID for further communication.
vazdeanne5@gmail.com
Identify Yourself
Mention in which program you are contributing (e.g., WoB, GSSOC, SSOC, SWOC).
Contributor at GSSoC-ext and Hacktoberfest
Closes
Enter the issue number that will be closed through this PR.
*Closes: #890
Describe the Add-ons or Changes You've Made
Give a clear description of what you have added or modified.
This tool is an Intrusion Detection and Prevention System (IDS/IPS) using Python and Scapy which:
Monitors network traffic in real-time to detect suspicious packets.
Scans packet payloads for specific keywords that indicate malicious intent.
Blocks IP addresses if they repeatedly send suspicious packets, after reaching a configurable threshold.
Supports both IPv4 and IPv6 traffic and works across platforms (Linux, macOS, and Windows).
Logs all activities such as detected threats and blocked IPs for further analysis.
This tool enhances network security by actively monitoring and responding to potential threats.
I have described my changes.
Type of Change
Select the type of change:
How Has This Been Tested?
Describe how your changes have been tested.
Ran it locally on my system
Checklist
Please confirm the following: