My crowdsec filters
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
crowdsec/scenarios/freeswitch-bf.yaml

15 lines
326 B

# freeswitch bruteforce
type: leaky
debug: true
name: haileyxb/freeswitch-bf
description: "Detect freeswitch bruteforce"
filter: evt.Meta.log_type == 'freeswitch_failed_auth'
leakspeed: "5m"
capacity: 5
groupby: evt.Meta.source_ip
blackhole: 10m
labels:
service: freeswitch
type: bruteforce
remediation: true