Prague, Czech Republic / Pisa, Italy, May 29, 2024 – ELLIO, a provider of real-time, highly accurate intelligence for filtering of unwanted network traffic and cybernoise, and ntop, a provider of open-source and commercial high-speed traffic monitoring applications, have announced a partnership to enhance visibility into malicious traffic originating from opportunistic scans and attacks within the network traffic monitoring tool ntopng.
Realiable insights into mass exploitations, automated bots, and other mass attacks.
By integrating a highly accurate and real-time ELLIO: Threat List MAX, ntopng’s users gain deeper insights into their network traffic through real-time information on sources of mass exploitation, bot activity, and opportunistic attacks, even before traditional rule-based detections are available.
“Obtaining reliable and up-to-date information about mass exploits, botnets, and other widespread attacks is crucial for cybersecurity. These attacks easily disrupt normal network operations, affect service availability and performance, and overwhelm security teams,” said Vlad Iliushin, CEO at ELLIO.
Blocklists work best with high-quality, frequently updated data.
In today’s cybersecurity traffic analysis, the challenge is to anticipate problems before they happen. IP Blocklists are effective for blocking attackers, but they require high-quality, frequently updated data that is immune to false positives.
We’ve been using the ELLIO: IP Feed in live production, and it has proven highly effective at spotting threats. Compared to other security solutions such as IDSs, ELLIO doesn’t require constant supervision and handles zero-day attacks better,” said Luca Deri, ntop founder
ELLIO IP Blocking boosts detection of malicious traffic from opportunistic scans and attacks in ntopng.
ELLIO: Threat List MAX is a IP blocklist that is dynamically updated every minute and contains an average of up to 200,000 IP addresses currently associated with attackers, scans, and other malicious mass exploitation activities on the Internet. This database is constantly regenerated to ensure users have the most up-to-date information on emerging threats.
ELLIO’s threat feed is supported by a powerful combination of an extensive internet sensor network operated by ELLIO, advanced ML algorithms, and real-time data processing. This mechanism enables highly reliable and fully automated threat detection delivery.
This integration not only offers insight into malicious traffic coming from opportunistic scans and attacks targeting their network, but also helps early identify malicious actors using their services for illicit activities.
Free trial for all ntopng users.
ntopng users with the latest version can enjoy a 30-day free trial of ELLIO: Threat List MAX integration by visiting this address: https://ellio.tech/ntop-feed-trial

About ntop
ntop is an engineering-driven company that provides software for network traffic analysis, capture-to-disk and traffic generation applications optimizing the performance of Commercial Off-The-Shelf (COTS) hardware. As a recognized leader in its field, ntop has become an industry-standard application, serving a diverse customer base that spans from individuals to key players in networking. For more information, visit https://www.ntop.org/
ntopng is a network traffic monitoring tool that provides a web-based interface for real-time analysis and visualization of network usage. It helps users understand network performance, detect issues, and improve security by offering insights into traffic patterns, protocols, and active hosts.
About ELLIO
ELLIO is a leading expert on mass exploitation, cyber deception, and opportunistic reconnaissance, delivering real-time, accurate threat intelligence to automate triage and reduce alert fatigue in SIEM, SOAR, TIP, accelerate incident response and threat hunting. ELLIO also offers the largest and most dynamic threat lists (blocklists) and blocklist management platform to strengthen perimeter and firewall defences. https://ellio.tech
Useful links
- Explore ELLIO: Threat List MAX, the largest and most dynamic IP blocklist on the market, compatible with all popular next-gen firewalls.
- Use a free ELLIO IP Lookup to check suspicious IPs.
- Try ELLIO: Blocklist Management with a 7day trial.
- Download ELLIO Free Community IP Blocklist.
- Check out ELLIO: Threat Intelligence to reduce alert fatigue and speed up threat hunting.