Enginsight introduces server traffic analysis tool
Enginsight has launched a new feature, Netflow Threat Intelligence, allowing businesses to analyze server network traffic and identify potential attacks.
German cybersecurity firm Enginsight has introduced its Netflow Threat Intelligence feature, designed to help businesses analyze server network traffic and identify potential cyber threats. The company aims to address the misconception that smaller entities are not targets of automated attacks, emphasizing that such assaults are often systematic and widespread.
The Netflow Threat Intelligence tool enables organizations to pinpoint the origin and type of attacks, including SSH brute-force attempts, spam campaigns, and DDoS attacks. The insights gained from this analysis can be used to update firewall rules or directly block malicious IP addresses on the affected servers.
Enginsight demonstrated the tool's capability by analyzing traffic to its own company blog over a one-hour period. During this time, the blog was subjected to SSH login attempts from over 20 countries, with a significant portion originating from China and Vietnam. The firm suggests that if such attack volumes are observed on a blog, the intensity would likely be far greater for servers hosting critical services like online shops or corporate portals.
This feature is currently available for Linux-based systems and requires agent version 1.10.0 or higher. Enginsight also offers personalized demo sessions for companies seeking to enhance their IT infrastructure security.