Logwatch logging monitor
--
PSAD (port scan detection)
This content is scheduled for migration. Check source: PSAD (port scan detection
PSAD Port Scan Detection
PSAD (Port Scan Attack Detector) is a host-based port scan detection tool for Linux that analyzes firewall logs (typically from Netfilter via iptables) to identify, classify, and optionally respond to reconnaissance activity such as port scans. It is commonly deployed on internet-facing servers to detect and alert on scanning behavior that may precede exploitation attempts.