喜欢 0
派生 0

最后活跃于 1792323582

CrowdSec - Real-time community blocklist

ZZ's Avatar ZZ 修订了这个 Gist 1792323582. 转到此修订

1 file changed, 67 insertions, 1 deletion

cscli-decisions.md

@@ -9,7 +9,7 @@ docker compose exec -it crowdsec cscli alerts list
9 9 +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+
10 10
11 11 docker compose exec -it crowdsec cscli decisions list --all
12 - Sample Set
12 + Sample Set of 15,162 bans
13 13 +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+
14 14 | ID | Source | Scope:Value | Reason | Action | Country | AS | Events | expiration | Alert ID |
15 15 +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+
@@ -25,3 +25,69 @@ Sample Set
25 25 | 30010 | CAPI | Ip:175.206.113.91 | ssh:exploit | ban | | | 0 | 126h43m37s | 3 |
26 26 | 30011 | CAPI | Ip:140.246.137.102 | ssh:exploit | ban | | | 0 | 149h43m37s | 3 |
27 27 | 30012 | CAPI | Ip:58.49.26.202 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 |
28 + │ 30414 │ CAPI │ Ip:185.220.101.0 │ ssh:bruteforce │ ban │ │ │ 0 │ 157h49m46s │ 3 │
29 + │ 30415 │ CAPI │ Ip:185.220.101.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 87h49m46s │ 3 │
30 + │ 30416 │ CAPI │ Ip:104.152.52.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 42h49m46s │ 3 │
31 + │ 30417 │ CAPI │ Ip:198.235.24.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 147h49m46s │ 3 │
32 + │ 30418 │ CAPI │ Ip:49.51.47.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 87h49m46s │ 3 │
33 + │ 30419 │ CAPI │ Ip:205.210.31.200 │ ssh:bruteforce │ ban │ │ │ 0 │ 95h49m46s │ 3 │
34 + │ 30420 │ CAPI │ Ip:104.152.52.200 │ ssh:bruteforce │ ban │ │ │ 0 │ 44h49m46s │ 3 │
35 + │ 30421 │ CAPI │ Ip:103.86.180.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │
36 + │ 30422 │ CAPI │ Ip:136.232.11.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 164h49m46s │ 3 │
37 + │ 30423 │ CAPI │ Ip:185.129.61.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 83h49m46s │ 3 │
38 + │ 30424 │ CAPI │ Ip:147.185.132.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 105h49m46s │ 3 │
39 + │ 30425 │ CAPI │ Ip:93.185.162.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 104h49m46s │ 3 │
40 + │ 30426 │ CAPI │ Ip:198.235.24.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 155h49m46s │ 3 │
41 + │ 30427 │ CAPI │ Ip:207.90.244.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 43h49m46s │ 3 │
42 + │ 30428 │ CAPI │ Ip:211.53.58.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 72h49m46s │ 3 │
43 + │ 30429 │ CAPI │ Ip:185.220.101.110 │ ssh:bruteforce │ ban │ │ │ 0 │ 147h49m46s │ 3 │
44 + │ 34840 │ CAPI │ Ip:66.132.172.209 │ ssh:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │
45 + │ 34841 │ CAPI │ Ip:144.76.22.100 │ http:scan │ ban │ │ │ 0 │ 48h49m46s │ 3 │
46 + │ 34842 │ CAPI │ Ip:147.185.132.100 │ http:scan │ ban │ │ │ 0 │ 46h49m46s │ 3 │
47 + │ 34843 │ CAPI │ Ip:144.76.23.100 │ http:scan │ ban │ │ │ 0 │ 159h49m46s │ 3 │
48 + │ 34844 │ CAPI │ Ip:104.219.236.100 │ http:scan │ ban │ │ │ 0 │ 163h49m46s │ 3 │
49 + │ 34845 │ CAPI │ Ip:35.209.99.100 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │
50 + │ 34846 │ CAPI │ Ip:193.189.100.200 │ http:scan │ ban │ │ │ 0 │ 150h49m46s │ 3 │
51 + │ 34847 │ CAPI │ Ip:144.76.22.200 │ http:scan │ ban │ │ │ 0 │ 86h49m46s │ 3 │
52 + │ 34848 │ CAPI │ Ip:144.76.23.200 │ http:scan │ ban │ │ │ 0 │ 162h49m46s │ 3 │
53 + │ 34849 │ CAPI │ Ip:198.235.24.200 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │
54 + │ 34840 │ CAPI │ Ip:66.132.172.209 │ ssh:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │
55 + │ 34841 │ CAPI │ Ip:144.76.22.100 │ http:scan │ ban │ │ │ 0 │ 48h49m46s │ 3 │
56 + │ 34842 │ CAPI │ Ip:147.185.132.100 │ http:scan │ ban │ │ │ 0 │ 46h49m46s │ 3 │
57 + │ 34843 │ CAPI │ Ip:144.76.23.100 │ http:scan │ ban │ │ │ 0 │ 159h49m46s │ 3 │
58 + │ 34844 │ CAPI │ Ip:104.219.236.100 │ http:scan │ ban │ │ │ 0 │ 163h49m46s │ 3 │
59 + │ 34845 │ CAPI │ Ip:35.209.99.100 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │
60 + │ 34846 │ CAPI │ Ip:193.189.100.200 │ http:scan │ ban │ │ │ 0 │ 150h49m46s │ 3 │
61 + │ 34847 │ CAPI │ Ip:144.76.22.200 │ http:scan │ ban │ │ │ 0 │ 86h49m46s │ 3 │
62 + │ 34848 │ CAPI │ Ip:144.76.23.200 │ http:scan │ ban │ │ │ 0 │ 162h49m46s │ 3 │
63 + │ 34849 │ CAPI │ Ip:198.235.24.200 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │
64 + │ 44780 │ CAPI │ Ip:103.47.217.22 │ http:exploit │ ban │ │ │ 0 │ 145h49m46s │ 3 │
65 + │ 44781 │ CAPI │ Ip:103.47.217.26 │ http:exploit │ ban │ │ │ 0 │ 140h49m46s │ 3 │
66 + │ 44782 │ CAPI │ Ip:198.12.33.246 │ http:exploit │ ban │ │ │ 0 │ 97h49m46s │ 3 │
67 + │ 44783 │ CAPI │ Ip:118.193.58.20 │ generic:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │
68 + │ 44784 │ CAPI │ Ip:152.32.159.180 │ generic:scan │ ban │ │ │ 0 │ 80h49m46s │ 3 │
69 + │ 44785 │ CAPI │ Ip:118.194.251.141 │ generic:scan │ ban │ │ │ 0 │ 45h49m46s │ 3 │
70 + │ 44786 │ CAPI │ Ip:152.32.185.141 │ generic:scan │ ban │ │ │ 0 │ 145h49m46s │ 3 │
71 + │ 44787 │ CAPI │ Ip:118.193.40.191 │ generic:scan │ ban │ │ │ 0 │ 78h49m46s │ 3 │
72 + │ 44788 │ CAPI │ Ip:165.154.162.102 │ generic:scan │ ban │ │ │ 0 │ 157h49m46s │ 3 │
73 + │ 44789 │ CAPI │ Ip:165.154.12.82 │ generic:scan │ ban │ │ │ 0 │ 45h49m46s │ 3 │
74 + │ 44790 │ CAPI │ Ip:118.193.32.92 │ generic:scan │ ban │ │ │ 0 │ 92h49m46s │ 3 │
75 + │ 44791 │ CAPI │ Ip:152.32.227.23 │ generic:scan │ ban │ │ │ 0 │ 96h49m46s │ 3 │
76 + │ 44792 │ CAPI │ Ip:104.152.52.143 │ generic:scan │ ban │ │ │ 0 │ 72h49m46s │ 3 │
77 + │ 44793 │ CAPI │ Ip:152.32.206.64 │ generic:scan │ ban │ │ │ 0 │ 44h49m46s │ 3 │
78 + │ 44794 │ CAPI │ Ip:165.154.36.245 │ generic:scan │ ban │ │ │ 0 │ 87h49m46s │ 3 │
79 + │ 44795 │ CAPI │ Ip:152.32.233.95 │ generic:scan │ ban │ │ │ 0 │ 135h49m46s │ 3
80 + │ 44836 │ CAPI │ Ip:88.149.153.106 │ generic:scan │ ban │ │ │ 0 │ 57h49m46s │ 3 │
81 + │ 44837 │ CAPI │ Ip:154.144.255.210 │ generic:scan │ ban │ │ │ 0 │ 42h49m46s │ 3 │
82 + │ 44838 │ CAPI │ Ip:109.226.27.227 │ generic:scan │ ban │ │ │ 0 │ 158h49m46s │ 3 │
83 + │ 44839 │ CAPI │ Ip:165.154.221.151 │ generic:scan │ ban │ │ │ 0 │ 41h49m46s │ 3 │
84 + │ 44840 │ CAPI │ Ip:91.134.33.89 │ http:bruteforce │ ban │ │ │ 0 │ 149h49m46s │ 3 │
85 + │ 44841 │ CAPI │ Ip:202.108.14.225 │ http:bruteforce │ ban │ │ │ 0 │ 111h49m46s │ 3 │
86 + │ 44842 │ CAPI │ Ip:188.59.178.27 │ http:bruteforce │ ban │ │ │ 0 │ 104h49m46s │ 3 │
87 + │ 44843 │ CAPI │ Ip:178.159.37.98 │ http:bruteforce │ ban │ │ │ 0 │ 45h49m46s │ 3 │
88 + │ 44844 │ CAPI │ Ip:77.41.156.64 │ http:bruteforce │ ban │ │ │ 0 │ 92h49m46s │ 3 │
89 + │ 44845 │ CAPI │ Ip:111.26.67.36 │ http:bruteforce │ ban │ │ │ 0 │ 164h49m46s │ 3 │
90 + │ 44846 │ CAPI │ Ip:45.148.10.36 │ http:bruteforce │ ban │ │ │ 0 │ 154h49m46s │ 3 │
91 + │ 44847 │ CAPI │ Ip:45.148.10.30 │ http:bruteforce │ ban │ │ │ 0 │ 161h49m46s │ 3 │
92 + │ 44848 │ CAPI │ Ip:45.148.10.25 │ http:bruteforce │ ban │ │ │ 0 │ 161h49m46s │ 3 │
93 + │ 44849 │ CAPI │ Ip:45.148.10.37 │ http:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │

ZZ's Avatar ZZ 修订了这个 Gist 1792322231. 转到此修订

1 file changed, 2 insertions, 6 deletions

cscli-decisions.md

@@ -8,7 +8,8 @@ docker compose exec -it crowdsec cscli alerts list
8 8 | 1 | crowdsecurity/community-blocklist (78 Ips) | update : +15000/-0 IPs | | | ban:78 | 2026-10-18T05:58:17Z | capi |
9 9 +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+
10 10
11 - docker compose exec -it crowdsec cscli decisions list --all | head -n 20
11 + docker compose exec -it crowdsec cscli decisions list --all
12 + Sample Set
12 13 +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+
13 14 | ID | Source | Scope:Value | Reason | Action | Country | AS | Events | expiration | Alert ID |
14 15 +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+
@@ -24,8 +25,3 @@ docker compose exec -it crowdsec cscli decisions list --all | head -n 20
24 25 | 30010 | CAPI | Ip:175.206.113.91 | ssh:exploit | ban | | | 0 | 126h43m37s | 3 |
25 26 | 30011 | CAPI | Ip:140.246.137.102 | ssh:exploit | ban | | | 0 | 149h43m37s | 3 |
26 27 | 30012 | CAPI | Ip:58.49.26.202 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 |
27 - | 30013 | CAPI | Ip:57.128.24.240 | ssh:exploit | ban | | | 0 | 113h43m37s | 3 |
28 - | 30014 | CAPI | Ip:218.149.235.152 | ssh:exploit | ban | | | 0 | 111h43m37s | 3 |
29 - | 30015 | CAPI | Ip:125.91.33.72 | ssh:exploit | ban | | | 0 | 162h43m37s | 3 |
30 - | 30016 | CAPI | Ip:218.56.160.82 | ssh:exploit | ban | | | 0 | 154h43m37s | 3 |
31 - | 30017 | CAPI | Ip:121.227.31.82 | ssh:exploit | ban | | | 0 | 164h43m37s | 3 |

ZZ's Avatar ZZ 修订了这个 Gist 1792322110. 转到此修订

1 file changed, 31 insertions

cscli-decisions.md(文件已创建)

@@ -0,0 +1,31 @@
1 + ```
2 + docker compose exec -it crowdsec cscli alerts list
3 + +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+
4 + | ID | value | reason | country | as | decisions | created_at | kind |
5 + +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+
6 + | 3 | crowdsecurity/community-blocklist (15000 Ips) | update : +15000/-0 IPs | | | ban:15000 | 2026-10-18T09:58:17Z | capi |
7 + | 2 | crowdsecurity/community-blocklist (80 Ips) | update : +15000/-0 IPs | | | ban:80 | 2026-10-18T07:58:17Z | capi |
8 + | 1 | crowdsecurity/community-blocklist (78 Ips) | update : +15000/-0 IPs | | | ban:78 | 2026-10-18T05:58:17Z | capi |
9 + +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+
10 +
11 + docker compose exec -it crowdsec cscli decisions list --all | head -n 20
12 + +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+
13 + | ID | Source | Scope:Value | Reason | Action | Country | AS | Events | expiration | Alert ID |
14 + +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+
15 + | 30001 | CAPI | Ip:14.29.198.130 | ssh:exploit | ban | | | 0 | 160h43m37s | 3 |
16 + | 30002 | CAPI | Ip:221.229.218.50 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 |
17 + | 30003 | CAPI | Ip:113.137.40.250 | ssh:exploit | ban | | | 0 | 150h43m37s | 3 |
18 + | 30004 | CAPI | Ip:121.227.152.250 | ssh:exploit | ban | | | 0 | 93h43m37s | 3 |
19 + | 30005 | CAPI | Ip:121.229.191.90 | ssh:exploit | ban | | | 0 | 48h43m37s | 3 |
20 + | 30006 | CAPI | Ip:61.155.106.101 | ssh:exploit | ban | | | 0 | 92h43m37s | 3 |
21 + | 30007 | CAPI | Ip:123.131.17.131 | ssh:exploit | ban | | | 0 | 154h43m37s | 3 |
22 + | 30008 | CAPI | Ip:61.153.184.151 | ssh:exploit | ban | | | 0 | 162h43m37s | 3 |
23 + | 30009 | CAPI | Ip:218.78.46.81 | ssh:exploit | ban | | | 0 | 111h43m37s | 3 |
24 + | 30010 | CAPI | Ip:175.206.113.91 | ssh:exploit | ban | | | 0 | 126h43m37s | 3 |
25 + | 30011 | CAPI | Ip:140.246.137.102 | ssh:exploit | ban | | | 0 | 149h43m37s | 3 |
26 + | 30012 | CAPI | Ip:58.49.26.202 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 |
27 + | 30013 | CAPI | Ip:57.128.24.240 | ssh:exploit | ban | | | 0 | 113h43m37s | 3 |
28 + | 30014 | CAPI | Ip:218.149.235.152 | ssh:exploit | ban | | | 0 | 111h43m37s | 3 |
29 + | 30015 | CAPI | Ip:125.91.33.72 | ssh:exploit | ban | | | 0 | 162h43m37s | 3 |
30 + | 30016 | CAPI | Ip:218.56.160.82 | ssh:exploit | ban | | | 0 | 154h43m37s | 3 |
31 + | 30017 | CAPI | Ip:121.227.31.82 | ssh:exploit | ban | | | 0 | 164h43m37s | 3 |

ZZ's Avatar ZZ 修订了这个 Gist 1792285831. 转到此修订

1 file changed, 1 insertion, 1 deletion

CrowdSec-Install.md

@@ -1,4 +1,4 @@
1 - CrowdSec terms to know before installing, configuring, and monitoring CrowdSec.
1 + CrowdSec terms to know before installing, configuring, and monitoring this Fail2Ban alternative service.
2 2
3 3 Core Architecture Concepts
4 4 - `LAPI` (Local API) - The local coordinate center of CrowdSec. It accepts signals from parsers and informs bouncers who to block. The air traffic control tower running on your server.

ZZ's Avatar ZZ 修订了这个 Gist 1792285781. 转到此修订

1 file changed, 1 insertion, 1 deletion

CrowdSec-Install.md

@@ -1,4 +1,4 @@
1 - Crowdsec terms to know before installing, configuring, and monitoring CrowdSec.
1 + CrowdSec terms to know before installing, configuring, and monitoring CrowdSec.
2 2
3 3 Core Architecture Concepts
4 4 - `LAPI` (Local API) - The local coordinate center of CrowdSec. It accepts signals from parsers and informs bouncers who to block. The air traffic control tower running on your server.

ZZ's Avatar ZZ 修订了这个 Gist 1792284624. 转到此修订

1 file changed, 1 insertion, 1 deletion

CrowdSec-Install.md

@@ -23,7 +23,7 @@ Essential `cscli` Monitoring Commands
23 23 - `cscli bouncers list` - Lists all remediation plugins connected to your system, showing their API keys and last active check-in times. Use this to verify that tools like your Caddy bouncer are successfully communicating.
24 24
25 25 Links
26 - - CrowdSec- https://docs.crowdsec.net/
26 + - CrowdSec - https://docs.crowdsec.net/
27 27 - CrowdSec - Docker Install - https://docs.crowdsec.net/u/getting_started/installation/docker/
28 28 - CrowdSec - Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs. - https://github.com/crowdsecurity/crowdsec
29 29 - CrowdSecurity/example-docker-compose - Example integration of CrowdSec in docker-compose - https://github.com/crowdsecurity/example-docker-compose

ZZ's Avatar ZZ 修订了这个 Gist 1792284616. 转到此修订

1 file changed, 1 insertion

CrowdSec-Install.md

@@ -23,6 +23,7 @@ Essential `cscli` Monitoring Commands
23 23 - `cscli bouncers list` - Lists all remediation plugins connected to your system, showing their API keys and last active check-in times. Use this to verify that tools like your Caddy bouncer are successfully communicating.
24 24
25 25 Links
26 + - CrowdSec- https://docs.crowdsec.net/
26 27 - CrowdSec - Docker Install - https://docs.crowdsec.net/u/getting_started/installation/docker/
27 28 - CrowdSec - Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs. - https://github.com/crowdsecurity/crowdsec
28 29 - CrowdSecurity/example-docker-compose - Example integration of CrowdSec in docker-compose - https://github.com/crowdsecurity/example-docker-compose

ZZ's Avatar ZZ 修订了这个 Gist 1792283141. 转到此修订

1 file changed, 0 insertions, 0 deletions

Crowdsec-Install.md 重命名为 CrowdSec-Install.md

文件已重命名，但内容与之前没有差异

ZZ's Avatar ZZ 修订了这个 Gist 1792283124. 转到此修订

1 file changed, 62 insertions

CrowdSec-Scenarios.md(文件已创建)

@@ -0,0 +1,62 @@
1 + ```sh
2 + docker compose exec crowdsec cscli scenarios list
3 + ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
4 + SCENARIOS
5 + ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
6 + Name 📦 Status Version Local Path
7 + ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
8 + crowdsecurity/apache_log4j2_cve-2021-44228 ✔ enabled 0.7 /etc/crowdsec/scenarios/apache_log4j2_cve-2021-44228.yaml
9 + crowdsecurity/CVE-2017-9841 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2017-9841.yaml
10 + crowdsecurity/CVE-2019-18935 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2019-18935.yaml
11 + crowdsecurity/CVE-2022-26134 ✔ enabled 0.4 /etc/crowdsec/scenarios/CVE-2022-26134.yaml
12 + crowdsecurity/CVE-2022-35914 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2022-35914.yaml
13 + crowdsecurity/CVE-2022-37042 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2022-37042.yaml
14 + crowdsecurity/CVE-2022-40684 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2022-40684.yaml
15 + crowdsecurity/CVE-2022-41082 ✔ enabled 0.4 /etc/crowdsec/scenarios/CVE-2022-41082.yaml
16 + crowdsecurity/CVE-2022-41697 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2022-41697.yaml
17 + crowdsecurity/CVE-2022-42889 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2022-42889.yaml
18 + crowdsecurity/CVE-2022-44877 ✔ enabled 0.4 /etc/crowdsec/scenarios/CVE-2022-44877.yaml
19 + crowdsecurity/CVE-2022-46169 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2022-46169.yaml
20 + crowdsecurity/CVE-2023-22515 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2023-22515.yaml
21 + crowdsecurity/CVE-2023-22518 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2023-22518.yaml
22 + crowdsecurity/CVE-2023-49103 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2023-49103.yaml
23 + crowdsecurity/CVE-2024-0012 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2024-0012.yaml
24 + crowdsecurity/CVE-2024-38475 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2024-38475.yaml
25 + crowdsecurity/CVE-2024-9474 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2024-9474.yaml
26 + crowdsecurity/f5-big-ip-cve-2020-5902 ✔ enabled 0.3 /etc/crowdsec/scenarios/f5-big-ip-cve-2020-5902.yaml
27 + crowdsecurity/fortinet-cve-2018-13379 ✔ enabled 0.4 /etc/crowdsec/scenarios/fortinet-cve-2018-13379.yaml
28 + crowdsecurity/grafana-cve-2021-43798 ✔ enabled 0.3 /etc/crowdsec/scenarios/grafana-cve-2021-43798.yaml
29 + crowdsecurity/http-admin-interface-probing ✔ enabled 0.5 /etc/crowdsec/scenarios/http-admin-interface-probing.yaml
30 + crowdsecurity/http-backdoors-attempts ✔ enabled 0.7 /etc/crowdsec/scenarios/http-backdoors-attempts.yaml
31 + crowdsecurity/http-bad-user-agent ✔ enabled 1.2 /etc/crowdsec/scenarios/http-bad-user-agent.yaml
32 + crowdsecurity/http-crawl-non_statics ✔ enabled 0.7 /etc/crowdsec/scenarios/http-crawl-non_statics.yaml
33 + crowdsecurity/http-cve-2021-41773 ✔ enabled 0.3 /etc/crowdsec/scenarios/http-cve-2021-41773.yaml
34 + crowdsecurity/http-cve-2021-42013 ✔ enabled 0.3 /etc/crowdsec/scenarios/http-cve-2021-42013.yaml
35 + crowdsecurity/http-cve-probing ✔ enabled 0.6 /etc/crowdsec/scenarios/http-cve-probing.yaml
36 + crowdsecurity/http-generic-bf ✔ enabled 0.9 /etc/crowdsec/scenarios/http-generic-bf.yaml
37 + crowdsecurity/http-generic-test ✔ enabled 0.2 /etc/crowdsec/scenarios/http-generic-test.yaml
38 + crowdsecurity/http-open-proxy ✔ enabled 0.5 /etc/crowdsec/scenarios/http-open-proxy.yaml
39 + crowdsecurity/http-path-traversal-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-path-traversal-probing.yaml
40 + crowdsecurity/http-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-probing.yaml
41 + crowdsecurity/http-sap-interface-probing ✔ enabled 0.1 /etc/crowdsec/scenarios/http-sap-interface-probing.yaml
42 + crowdsecurity/http-sensitive-files ✔ enabled 0.4 /etc/crowdsec/scenarios/http-sensitive-files.yaml
43 + crowdsecurity/http-sqli-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-sqli-probing.yaml
44 + crowdsecurity/http-technology-probing ✔ enabled 0.1 /etc/crowdsec/scenarios/http-technology-probing.yaml
45 + crowdsecurity/http-wordpress-scan ✔ enabled 0.4 /etc/crowdsec/scenarios/http-wordpress-scan.yaml
46 + crowdsecurity/http-xss-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-xss-probing.yaml
47 + crowdsecurity/jira_cve-2021-26086 ✔ enabled 0.4 /etc/crowdsec/scenarios/jira_cve-2021-26086.yaml
48 + crowdsecurity/netgear_rce ✔ enabled 0.4 /etc/crowdsec/scenarios/netgear_rce.yaml
49 + crowdsecurity/pulse-secure-sslvpn-cve-2019-11510 ✔ enabled 0.4 /etc/crowdsec/scenarios/pulse-secure-sslvpn-cve-2019-11510.yaml
50 + crowdsecurity/spring4shell_cve-2022-22965 ✔ enabled 0.3 /etc/crowdsec/scenarios/spring4shell_cve-2022-22965.yaml
51 + crowdsecurity/ssh-bf ✔ enabled 0.3 /etc/crowdsec/scenarios/ssh-bf.yaml
52 + crowdsecurity/ssh-cve-2024-6387 ✔ enabled 0.2 /etc/crowdsec/scenarios/ssh-cve-2024-6387.yaml
53 + crowdsecurity/ssh-generic-test ✔ enabled 0.3 /etc/crowdsec/scenarios/ssh-generic-test.yaml
54 + crowdsecurity/ssh-refused-conn ✔ enabled 0.1 /etc/crowdsec/scenarios/ssh-refused-conn.yaml
55 + crowdsecurity/ssh-slow-bf ✔ enabled 0.4 /etc/crowdsec/scenarios/ssh-slow-bf.yaml
56 + crowdsecurity/ssh-time-based-bf ✔ enabled 0.3 /etc/crowdsec/scenarios/ssh-time-based-bf.yaml
57 + crowdsecurity/thinkphp-cve-2018-20062 ✔ enabled 0.7 /etc/crowdsec/scenarios/thinkphp-cve-2018-20062.yaml
58 + crowdsecurity/vmware-cve-2022-22954 ✔ enabled 0.3 /etc/crowdsec/scenarios/vmware-cve-2022-22954.yaml
59 + crowdsecurity/vmware-vcenter-vmsa-2021-0027 ✔ enabled 0.3 /etc/crowdsec/scenarios/vmware-vcenter-vmsa-2021-0027.yaml
60 + ltsich/http-w00tw00t ✔ enabled 0.3 /etc/crowdsec/scenarios/http-w00tw00t.yaml
61 + ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────
62 + ```

ZZ's Avatar ZZ 修订了这个 Gist 1792282983. 转到此修订

没有任何变更

上一页 下一页

由 Opengist 强力驱动 ⋅ Load: 27ms⋅

中文