ZZ a révisé ce gist . Aller à la révision
1 file changed, 67 insertions, 1 deletion
cscli-decisions.md
| @@ -9,7 +9,7 @@ docker compose exec -it crowdsec cscli alerts list | |||
| 9 | 9 | +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+ | |
| 10 | 10 | ||
| 11 | 11 | docker compose exec -it crowdsec cscli decisions list --all | |
| 12 | - | Sample Set | |
| 12 | + | Sample Set of 15,162 bans | |
| 13 | 13 | +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+ | |
| 14 | 14 | | ID | Source | Scope:Value | Reason | Action | Country | AS | Events | expiration | Alert ID | | |
| 15 | 15 | +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+ | |
| @@ -25,3 +25,69 @@ Sample Set | |||
| 25 | 25 | | 30010 | CAPI | Ip:175.206.113.91 | ssh:exploit | ban | | | 0 | 126h43m37s | 3 | | |
| 26 | 26 | | 30011 | CAPI | Ip:140.246.137.102 | ssh:exploit | ban | | | 0 | 149h43m37s | 3 | | |
| 27 | 27 | | 30012 | CAPI | Ip:58.49.26.202 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 | | |
| 28 | + | │ 30414 │ CAPI │ Ip:185.220.101.0 │ ssh:bruteforce │ ban │ │ │ 0 │ 157h49m46s │ 3 │ | |
| 29 | + | │ 30415 │ CAPI │ Ip:185.220.101.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 87h49m46s │ 3 │ | |
| 30 | + | │ 30416 │ CAPI │ Ip:104.152.52.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 42h49m46s │ 3 │ | |
| 31 | + | │ 30417 │ CAPI │ Ip:198.235.24.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 147h49m46s │ 3 │ | |
| 32 | + | │ 30418 │ CAPI │ Ip:49.51.47.100 │ ssh:bruteforce │ ban │ │ │ 0 │ 87h49m46s │ 3 │ | |
| 33 | + | │ 30419 │ CAPI │ Ip:205.210.31.200 │ ssh:bruteforce │ ban │ │ │ 0 │ 95h49m46s │ 3 │ | |
| 34 | + | │ 30420 │ CAPI │ Ip:104.152.52.200 │ ssh:bruteforce │ ban │ │ │ 0 │ 44h49m46s │ 3 │ | |
| 35 | + | │ 30421 │ CAPI │ Ip:103.86.180.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │ | |
| 36 | + | │ 30422 │ CAPI │ Ip:136.232.11.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 164h49m46s │ 3 │ | |
| 37 | + | │ 30423 │ CAPI │ Ip:185.129.61.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 83h49m46s │ 3 │ | |
| 38 | + | │ 30424 │ CAPI │ Ip:147.185.132.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 105h49m46s │ 3 │ | |
| 39 | + | │ 30425 │ CAPI │ Ip:93.185.162.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 104h49m46s │ 3 │ | |
| 40 | + | │ 30426 │ CAPI │ Ip:198.235.24.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 155h49m46s │ 3 │ | |
| 41 | + | │ 30427 │ CAPI │ Ip:207.90.244.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 43h49m46s │ 3 │ | |
| 42 | + | │ 30428 │ CAPI │ Ip:211.53.58.10 │ ssh:bruteforce │ ban │ │ │ 0 │ 72h49m46s │ 3 │ | |
| 43 | + | │ 30429 │ CAPI │ Ip:185.220.101.110 │ ssh:bruteforce │ ban │ │ │ 0 │ 147h49m46s │ 3 │ | |
| 44 | + | │ 34840 │ CAPI │ Ip:66.132.172.209 │ ssh:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │ | |
| 45 | + | │ 34841 │ CAPI │ Ip:144.76.22.100 │ http:scan │ ban │ │ │ 0 │ 48h49m46s │ 3 │ | |
| 46 | + | │ 34842 │ CAPI │ Ip:147.185.132.100 │ http:scan │ ban │ │ │ 0 │ 46h49m46s │ 3 │ | |
| 47 | + | │ 34843 │ CAPI │ Ip:144.76.23.100 │ http:scan │ ban │ │ │ 0 │ 159h49m46s │ 3 │ | |
| 48 | + | │ 34844 │ CAPI │ Ip:104.219.236.100 │ http:scan │ ban │ │ │ 0 │ 163h49m46s │ 3 │ | |
| 49 | + | │ 34845 │ CAPI │ Ip:35.209.99.100 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │ | |
| 50 | + | │ 34846 │ CAPI │ Ip:193.189.100.200 │ http:scan │ ban │ │ │ 0 │ 150h49m46s │ 3 │ | |
| 51 | + | │ 34847 │ CAPI │ Ip:144.76.22.200 │ http:scan │ ban │ │ │ 0 │ 86h49m46s │ 3 │ | |
| 52 | + | │ 34848 │ CAPI │ Ip:144.76.23.200 │ http:scan │ ban │ │ │ 0 │ 162h49m46s │ 3 │ | |
| 53 | + | │ 34849 │ CAPI │ Ip:198.235.24.200 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │ | |
| 54 | + | │ 34840 │ CAPI │ Ip:66.132.172.209 │ ssh:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │ | |
| 55 | + | │ 34841 │ CAPI │ Ip:144.76.22.100 │ http:scan │ ban │ │ │ 0 │ 48h49m46s │ 3 │ | |
| 56 | + | │ 34842 │ CAPI │ Ip:147.185.132.100 │ http:scan │ ban │ │ │ 0 │ 46h49m46s │ 3 │ | |
| 57 | + | │ 34843 │ CAPI │ Ip:144.76.23.100 │ http:scan │ ban │ │ │ 0 │ 159h49m46s │ 3 │ | |
| 58 | + | │ 34844 │ CAPI │ Ip:104.219.236.100 │ http:scan │ ban │ │ │ 0 │ 163h49m46s │ 3 │ | |
| 59 | + | │ 34845 │ CAPI │ Ip:35.209.99.100 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │ | |
| 60 | + | │ 34846 │ CAPI │ Ip:193.189.100.200 │ http:scan │ ban │ │ │ 0 │ 150h49m46s │ 3 │ | |
| 61 | + | │ 34847 │ CAPI │ Ip:144.76.22.200 │ http:scan │ ban │ │ │ 0 │ 86h49m46s │ 3 │ | |
| 62 | + | │ 34848 │ CAPI │ Ip:144.76.23.200 │ http:scan │ ban │ │ │ 0 │ 162h49m46s │ 3 │ | |
| 63 | + | │ 34849 │ CAPI │ Ip:198.235.24.200 │ http:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │ | |
| 64 | + | │ 44780 │ CAPI │ Ip:103.47.217.22 │ http:exploit │ ban │ │ │ 0 │ 145h49m46s │ 3 │ | |
| 65 | + | │ 44781 │ CAPI │ Ip:103.47.217.26 │ http:exploit │ ban │ │ │ 0 │ 140h49m46s │ 3 │ | |
| 66 | + | │ 44782 │ CAPI │ Ip:198.12.33.246 │ http:exploit │ ban │ │ │ 0 │ 97h49m46s │ 3 │ | |
| 67 | + | │ 44783 │ CAPI │ Ip:118.193.58.20 │ generic:scan │ ban │ │ │ 0 │ 47h49m46s │ 3 │ | |
| 68 | + | │ 44784 │ CAPI │ Ip:152.32.159.180 │ generic:scan │ ban │ │ │ 0 │ 80h49m46s │ 3 │ | |
| 69 | + | │ 44785 │ CAPI │ Ip:118.194.251.141 │ generic:scan │ ban │ │ │ 0 │ 45h49m46s │ 3 │ | |
| 70 | + | │ 44786 │ CAPI │ Ip:152.32.185.141 │ generic:scan │ ban │ │ │ 0 │ 145h49m46s │ 3 │ | |
| 71 | + | │ 44787 │ CAPI │ Ip:118.193.40.191 │ generic:scan │ ban │ │ │ 0 │ 78h49m46s │ 3 │ | |
| 72 | + | │ 44788 │ CAPI │ Ip:165.154.162.102 │ generic:scan │ ban │ │ │ 0 │ 157h49m46s │ 3 │ | |
| 73 | + | │ 44789 │ CAPI │ Ip:165.154.12.82 │ generic:scan │ ban │ │ │ 0 │ 45h49m46s │ 3 │ | |
| 74 | + | │ 44790 │ CAPI │ Ip:118.193.32.92 │ generic:scan │ ban │ │ │ 0 │ 92h49m46s │ 3 │ | |
| 75 | + | │ 44791 │ CAPI │ Ip:152.32.227.23 │ generic:scan │ ban │ │ │ 0 │ 96h49m46s │ 3 │ | |
| 76 | + | │ 44792 │ CAPI │ Ip:104.152.52.143 │ generic:scan │ ban │ │ │ 0 │ 72h49m46s │ 3 │ | |
| 77 | + | │ 44793 │ CAPI │ Ip:152.32.206.64 │ generic:scan │ ban │ │ │ 0 │ 44h49m46s │ 3 │ | |
| 78 | + | │ 44794 │ CAPI │ Ip:165.154.36.245 │ generic:scan │ ban │ │ │ 0 │ 87h49m46s │ 3 │ | |
| 79 | + | │ 44795 │ CAPI │ Ip:152.32.233.95 │ generic:scan │ ban │ │ │ 0 │ 135h49m46s │ 3 | |
| 80 | + | │ 44836 │ CAPI │ Ip:88.149.153.106 │ generic:scan │ ban │ │ │ 0 │ 57h49m46s │ 3 │ | |
| 81 | + | │ 44837 │ CAPI │ Ip:154.144.255.210 │ generic:scan │ ban │ │ │ 0 │ 42h49m46s │ 3 │ | |
| 82 | + | │ 44838 │ CAPI │ Ip:109.226.27.227 │ generic:scan │ ban │ │ │ 0 │ 158h49m46s │ 3 │ | |
| 83 | + | │ 44839 │ CAPI │ Ip:165.154.221.151 │ generic:scan │ ban │ │ │ 0 │ 41h49m46s │ 3 │ | |
| 84 | + | │ 44840 │ CAPI │ Ip:91.134.33.89 │ http:bruteforce │ ban │ │ │ 0 │ 149h49m46s │ 3 │ | |
| 85 | + | │ 44841 │ CAPI │ Ip:202.108.14.225 │ http:bruteforce │ ban │ │ │ 0 │ 111h49m46s │ 3 │ | |
| 86 | + | │ 44842 │ CAPI │ Ip:188.59.178.27 │ http:bruteforce │ ban │ │ │ 0 │ 104h49m46s │ 3 │ | |
| 87 | + | │ 44843 │ CAPI │ Ip:178.159.37.98 │ http:bruteforce │ ban │ │ │ 0 │ 45h49m46s │ 3 │ | |
| 88 | + | │ 44844 │ CAPI │ Ip:77.41.156.64 │ http:bruteforce │ ban │ │ │ 0 │ 92h49m46s │ 3 │ | |
| 89 | + | │ 44845 │ CAPI │ Ip:111.26.67.36 │ http:bruteforce │ ban │ │ │ 0 │ 164h49m46s │ 3 │ | |
| 90 | + | │ 44846 │ CAPI │ Ip:45.148.10.36 │ http:bruteforce │ ban │ │ │ 0 │ 154h49m46s │ 3 │ | |
| 91 | + | │ 44847 │ CAPI │ Ip:45.148.10.30 │ http:bruteforce │ ban │ │ │ 0 │ 161h49m46s │ 3 │ | |
| 92 | + | │ 44848 │ CAPI │ Ip:45.148.10.25 │ http:bruteforce │ ban │ │ │ 0 │ 161h49m46s │ 3 │ | |
| 93 | + | │ 44849 │ CAPI │ Ip:45.148.10.37 │ http:bruteforce │ ban │ │ │ 0 │ 165h49m46s │ 3 │ | |
ZZ a révisé ce gist . Aller à la révision
1 file changed, 2 insertions, 6 deletions
cscli-decisions.md
| @@ -8,7 +8,8 @@ docker compose exec -it crowdsec cscli alerts list | |||
| 8 | 8 | | 1 | crowdsecurity/community-blocklist (78 Ips) | update : +15000/-0 IPs | | | ban:78 | 2026-10-18T05:58:17Z | capi | | |
| 9 | 9 | +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+ | |
| 10 | 10 | ||
| 11 | - | docker compose exec -it crowdsec cscli decisions list --all | head -n 20 | |
| 11 | + | docker compose exec -it crowdsec cscli decisions list --all | |
| 12 | + | Sample Set | |
| 12 | 13 | +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+ | |
| 13 | 14 | | ID | Source | Scope:Value | Reason | Action | Country | AS | Events | expiration | Alert ID | | |
| 14 | 15 | +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+ | |
| @@ -24,8 +25,3 @@ docker compose exec -it crowdsec cscli decisions list --all | head -n 20 | |||
| 24 | 25 | | 30010 | CAPI | Ip:175.206.113.91 | ssh:exploit | ban | | | 0 | 126h43m37s | 3 | | |
| 25 | 26 | | 30011 | CAPI | Ip:140.246.137.102 | ssh:exploit | ban | | | 0 | 149h43m37s | 3 | | |
| 26 | 27 | | 30012 | CAPI | Ip:58.49.26.202 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 | | |
| 27 | - | | 30013 | CAPI | Ip:57.128.24.240 | ssh:exploit | ban | | | 0 | 113h43m37s | 3 | | |
| 28 | - | | 30014 | CAPI | Ip:218.149.235.152 | ssh:exploit | ban | | | 0 | 111h43m37s | 3 | | |
| 29 | - | | 30015 | CAPI | Ip:125.91.33.72 | ssh:exploit | ban | | | 0 | 162h43m37s | 3 | | |
| 30 | - | | 30016 | CAPI | Ip:218.56.160.82 | ssh:exploit | ban | | | 0 | 154h43m37s | 3 | | |
| 31 | - | | 30017 | CAPI | Ip:121.227.31.82 | ssh:exploit | ban | | | 0 | 164h43m37s | 3 | | |
ZZ a révisé ce gist . Aller à la révision
1 file changed, 31 insertions
cscli-decisions.md(fichier créé)
| @@ -0,0 +1,31 @@ | |||
| 1 | + | ``` | |
| 2 | + | docker compose exec -it crowdsec cscli alerts list | |
| 3 | + | +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+ | |
| 4 | + | | ID | value | reason | country | as | decisions | created_at | kind | | |
| 5 | + | +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+ | |
| 6 | + | | 3 | crowdsecurity/community-blocklist (15000 Ips) | update : +15000/-0 IPs | | | ban:15000 | 2026-10-18T09:58:17Z | capi | | |
| 7 | + | | 2 | crowdsecurity/community-blocklist (80 Ips) | update : +15000/-0 IPs | | | ban:80 | 2026-10-18T07:58:17Z | capi | | |
| 8 | + | | 1 | crowdsecurity/community-blocklist (78 Ips) | update : +15000/-0 IPs | | | ban:78 | 2026-10-18T05:58:17Z | capi | | |
| 9 | + | +----+-----------------------------------------------+------------------------+---------+----+-----------+----------------------+------+ | |
| 10 | + | ||
| 11 | + | docker compose exec -it crowdsec cscli decisions list --all | head -n 20 | |
| 12 | + | +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+ | |
| 13 | + | | ID | Source | Scope:Value | Reason | Action | Country | AS | Events | expiration | Alert ID | | |
| 14 | + | +-------+--------+-----------------------------------------+-----------------+--------+---------+----+--------+------------+----------+ | |
| 15 | + | | 30001 | CAPI | Ip:14.29.198.130 | ssh:exploit | ban | | | 0 | 160h43m37s | 3 | | |
| 16 | + | | 30002 | CAPI | Ip:221.229.218.50 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 | | |
| 17 | + | | 30003 | CAPI | Ip:113.137.40.250 | ssh:exploit | ban | | | 0 | 150h43m37s | 3 | | |
| 18 | + | | 30004 | CAPI | Ip:121.227.152.250 | ssh:exploit | ban | | | 0 | 93h43m37s | 3 | | |
| 19 | + | | 30005 | CAPI | Ip:121.229.191.90 | ssh:exploit | ban | | | 0 | 48h43m37s | 3 | | |
| 20 | + | | 30006 | CAPI | Ip:61.155.106.101 | ssh:exploit | ban | | | 0 | 92h43m37s | 3 | | |
| 21 | + | | 30007 | CAPI | Ip:123.131.17.131 | ssh:exploit | ban | | | 0 | 154h43m37s | 3 | | |
| 22 | + | | 30008 | CAPI | Ip:61.153.184.151 | ssh:exploit | ban | | | 0 | 162h43m37s | 3 | | |
| 23 | + | | 30009 | CAPI | Ip:218.78.46.81 | ssh:exploit | ban | | | 0 | 111h43m37s | 3 | | |
| 24 | + | | 30010 | CAPI | Ip:175.206.113.91 | ssh:exploit | ban | | | 0 | 126h43m37s | 3 | | |
| 25 | + | | 30011 | CAPI | Ip:140.246.137.102 | ssh:exploit | ban | | | 0 | 149h43m37s | 3 | | |
| 26 | + | | 30012 | CAPI | Ip:58.49.26.202 | ssh:exploit | ban | | | 0 | 161h43m37s | 3 | | |
| 27 | + | | 30013 | CAPI | Ip:57.128.24.240 | ssh:exploit | ban | | | 0 | 113h43m37s | 3 | | |
| 28 | + | | 30014 | CAPI | Ip:218.149.235.152 | ssh:exploit | ban | | | 0 | 111h43m37s | 3 | | |
| 29 | + | | 30015 | CAPI | Ip:125.91.33.72 | ssh:exploit | ban | | | 0 | 162h43m37s | 3 | | |
| 30 | + | | 30016 | CAPI | Ip:218.56.160.82 | ssh:exploit | ban | | | 0 | 154h43m37s | 3 | | |
| 31 | + | | 30017 | CAPI | Ip:121.227.31.82 | ssh:exploit | ban | | | 0 | 164h43m37s | 3 | | |
ZZ a révisé ce gist . Aller à la révision
1 file changed, 1 insertion, 1 deletion
CrowdSec-Install.md
| @@ -1,4 +1,4 @@ | |||
| 1 | - | CrowdSec terms to know before installing, configuring, and monitoring CrowdSec. | |
| 1 | + | CrowdSec terms to know before installing, configuring, and monitoring this Fail2Ban alternative service. | |
| 2 | 2 | ||
| 3 | 3 | Core Architecture Concepts | |
| 4 | 4 | - `LAPI` (Local API) - The local coordinate center of CrowdSec. It accepts signals from parsers and informs bouncers who to block. The air traffic control tower running on your server. | |
ZZ a révisé ce gist . Aller à la révision
1 file changed, 1 insertion, 1 deletion
CrowdSec-Install.md
| @@ -1,4 +1,4 @@ | |||
| 1 | - | Crowdsec terms to know before installing, configuring, and monitoring CrowdSec. | |
| 1 | + | CrowdSec terms to know before installing, configuring, and monitoring CrowdSec. | |
| 2 | 2 | ||
| 3 | 3 | Core Architecture Concepts | |
| 4 | 4 | - `LAPI` (Local API) - The local coordinate center of CrowdSec. It accepts signals from parsers and informs bouncers who to block. The air traffic control tower running on your server. | |
ZZ a révisé ce gist . Aller à la révision
1 file changed, 1 insertion, 1 deletion
CrowdSec-Install.md
| @@ -23,7 +23,7 @@ Essential `cscli` Monitoring Commands | |||
| 23 | 23 | - `cscli bouncers list` - Lists all remediation plugins connected to your system, showing their API keys and last active check-in times. Use this to verify that tools like your Caddy bouncer are successfully communicating. | |
| 24 | 24 | ||
| 25 | 25 | Links | |
| 26 | - | - CrowdSec- https://docs.crowdsec.net/ | |
| 26 | + | - CrowdSec - https://docs.crowdsec.net/ | |
| 27 | 27 | - CrowdSec - Docker Install - https://docs.crowdsec.net/u/getting_started/installation/docker/ | |
| 28 | 28 | - CrowdSec - Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs. - https://github.com/crowdsecurity/crowdsec | |
| 29 | 29 | - CrowdSecurity/example-docker-compose - Example integration of CrowdSec in docker-compose - https://github.com/crowdsecurity/example-docker-compose | |
ZZ a révisé ce gist . Aller à la révision
1 file changed, 1 insertion
CrowdSec-Install.md
| @@ -23,6 +23,7 @@ Essential `cscli` Monitoring Commands | |||
| 23 | 23 | - `cscli bouncers list` - Lists all remediation plugins connected to your system, showing their API keys and last active check-in times. Use this to verify that tools like your Caddy bouncer are successfully communicating. | |
| 24 | 24 | ||
| 25 | 25 | Links | |
| 26 | + | - CrowdSec- https://docs.crowdsec.net/ | |
| 26 | 27 | - CrowdSec - Docker Install - https://docs.crowdsec.net/u/getting_started/installation/docker/ | |
| 27 | 28 | - CrowdSec - Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs. - https://github.com/crowdsecurity/crowdsec | |
| 28 | 29 | - CrowdSecurity/example-docker-compose - Example integration of CrowdSec in docker-compose - https://github.com/crowdsecurity/example-docker-compose | |
ZZ a révisé ce gist . Aller à la révision
1 file changed, 0 insertions, 0 deletions
Crowdsec-Install.md renommé en CrowdSec-Install.md
Fichier renommé sans modifications
ZZ a révisé ce gist . Aller à la révision
1 file changed, 62 insertions
CrowdSec-Scenarios.md(fichier créé)
| @@ -0,0 +1,62 @@ | |||
| 1 | + | ```sh | |
| 2 | + | docker compose exec crowdsec cscli scenarios list | |
| 3 | + | ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── | |
| 4 | + | SCENARIOS | |
| 5 | + | ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── | |
| 6 | + | Name 📦 Status Version Local Path | |
| 7 | + | ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── | |
| 8 | + | crowdsecurity/apache_log4j2_cve-2021-44228 ✔ enabled 0.7 /etc/crowdsec/scenarios/apache_log4j2_cve-2021-44228.yaml | |
| 9 | + | crowdsecurity/CVE-2017-9841 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2017-9841.yaml | |
| 10 | + | crowdsecurity/CVE-2019-18935 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2019-18935.yaml | |
| 11 | + | crowdsecurity/CVE-2022-26134 ✔ enabled 0.4 /etc/crowdsec/scenarios/CVE-2022-26134.yaml | |
| 12 | + | crowdsecurity/CVE-2022-35914 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2022-35914.yaml | |
| 13 | + | crowdsecurity/CVE-2022-37042 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2022-37042.yaml | |
| 14 | + | crowdsecurity/CVE-2022-40684 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2022-40684.yaml | |
| 15 | + | crowdsecurity/CVE-2022-41082 ✔ enabled 0.4 /etc/crowdsec/scenarios/CVE-2022-41082.yaml | |
| 16 | + | crowdsecurity/CVE-2022-41697 ✔ enabled 0.2 /etc/crowdsec/scenarios/CVE-2022-41697.yaml | |
| 17 | + | crowdsecurity/CVE-2022-42889 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2022-42889.yaml | |
| 18 | + | crowdsecurity/CVE-2022-44877 ✔ enabled 0.4 /etc/crowdsec/scenarios/CVE-2022-44877.yaml | |
| 19 | + | crowdsecurity/CVE-2022-46169 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2022-46169.yaml | |
| 20 | + | crowdsecurity/CVE-2023-22515 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2023-22515.yaml | |
| 21 | + | crowdsecurity/CVE-2023-22518 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2023-22518.yaml | |
| 22 | + | crowdsecurity/CVE-2023-49103 ✔ enabled 0.3 /etc/crowdsec/scenarios/CVE-2023-49103.yaml | |
| 23 | + | crowdsecurity/CVE-2024-0012 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2024-0012.yaml | |
| 24 | + | crowdsecurity/CVE-2024-38475 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2024-38475.yaml | |
| 25 | + | crowdsecurity/CVE-2024-9474 ✔ enabled 0.1 /etc/crowdsec/scenarios/CVE-2024-9474.yaml | |
| 26 | + | crowdsecurity/f5-big-ip-cve-2020-5902 ✔ enabled 0.3 /etc/crowdsec/scenarios/f5-big-ip-cve-2020-5902.yaml | |
| 27 | + | crowdsecurity/fortinet-cve-2018-13379 ✔ enabled 0.4 /etc/crowdsec/scenarios/fortinet-cve-2018-13379.yaml | |
| 28 | + | crowdsecurity/grafana-cve-2021-43798 ✔ enabled 0.3 /etc/crowdsec/scenarios/grafana-cve-2021-43798.yaml | |
| 29 | + | crowdsecurity/http-admin-interface-probing ✔ enabled 0.5 /etc/crowdsec/scenarios/http-admin-interface-probing.yaml | |
| 30 | + | crowdsecurity/http-backdoors-attempts ✔ enabled 0.7 /etc/crowdsec/scenarios/http-backdoors-attempts.yaml | |
| 31 | + | crowdsecurity/http-bad-user-agent ✔ enabled 1.2 /etc/crowdsec/scenarios/http-bad-user-agent.yaml | |
| 32 | + | crowdsecurity/http-crawl-non_statics ✔ enabled 0.7 /etc/crowdsec/scenarios/http-crawl-non_statics.yaml | |
| 33 | + | crowdsecurity/http-cve-2021-41773 ✔ enabled 0.3 /etc/crowdsec/scenarios/http-cve-2021-41773.yaml | |
| 34 | + | crowdsecurity/http-cve-2021-42013 ✔ enabled 0.3 /etc/crowdsec/scenarios/http-cve-2021-42013.yaml | |
| 35 | + | crowdsecurity/http-cve-probing ✔ enabled 0.6 /etc/crowdsec/scenarios/http-cve-probing.yaml | |
| 36 | + | crowdsecurity/http-generic-bf ✔ enabled 0.9 /etc/crowdsec/scenarios/http-generic-bf.yaml | |
| 37 | + | crowdsecurity/http-generic-test ✔ enabled 0.2 /etc/crowdsec/scenarios/http-generic-test.yaml | |
| 38 | + | crowdsecurity/http-open-proxy ✔ enabled 0.5 /etc/crowdsec/scenarios/http-open-proxy.yaml | |
| 39 | + | crowdsecurity/http-path-traversal-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-path-traversal-probing.yaml | |
| 40 | + | crowdsecurity/http-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-probing.yaml | |
| 41 | + | crowdsecurity/http-sap-interface-probing ✔ enabled 0.1 /etc/crowdsec/scenarios/http-sap-interface-probing.yaml | |
| 42 | + | crowdsecurity/http-sensitive-files ✔ enabled 0.4 /etc/crowdsec/scenarios/http-sensitive-files.yaml | |
| 43 | + | crowdsecurity/http-sqli-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-sqli-probing.yaml | |
| 44 | + | crowdsecurity/http-technology-probing ✔ enabled 0.1 /etc/crowdsec/scenarios/http-technology-probing.yaml | |
| 45 | + | crowdsecurity/http-wordpress-scan ✔ enabled 0.4 /etc/crowdsec/scenarios/http-wordpress-scan.yaml | |
| 46 | + | crowdsecurity/http-xss-probing ✔ enabled 0.4 /etc/crowdsec/scenarios/http-xss-probing.yaml | |
| 47 | + | crowdsecurity/jira_cve-2021-26086 ✔ enabled 0.4 /etc/crowdsec/scenarios/jira_cve-2021-26086.yaml | |
| 48 | + | crowdsecurity/netgear_rce ✔ enabled 0.4 /etc/crowdsec/scenarios/netgear_rce.yaml | |
| 49 | + | crowdsecurity/pulse-secure-sslvpn-cve-2019-11510 ✔ enabled 0.4 /etc/crowdsec/scenarios/pulse-secure-sslvpn-cve-2019-11510.yaml | |
| 50 | + | crowdsecurity/spring4shell_cve-2022-22965 ✔ enabled 0.3 /etc/crowdsec/scenarios/spring4shell_cve-2022-22965.yaml | |
| 51 | + | crowdsecurity/ssh-bf ✔ enabled 0.3 /etc/crowdsec/scenarios/ssh-bf.yaml | |
| 52 | + | crowdsecurity/ssh-cve-2024-6387 ✔ enabled 0.2 /etc/crowdsec/scenarios/ssh-cve-2024-6387.yaml | |
| 53 | + | crowdsecurity/ssh-generic-test ✔ enabled 0.3 /etc/crowdsec/scenarios/ssh-generic-test.yaml | |
| 54 | + | crowdsecurity/ssh-refused-conn ✔ enabled 0.1 /etc/crowdsec/scenarios/ssh-refused-conn.yaml | |
| 55 | + | crowdsecurity/ssh-slow-bf ✔ enabled 0.4 /etc/crowdsec/scenarios/ssh-slow-bf.yaml | |
| 56 | + | crowdsecurity/ssh-time-based-bf ✔ enabled 0.3 /etc/crowdsec/scenarios/ssh-time-based-bf.yaml | |
| 57 | + | crowdsecurity/thinkphp-cve-2018-20062 ✔ enabled 0.7 /etc/crowdsec/scenarios/thinkphp-cve-2018-20062.yaml | |
| 58 | + | crowdsecurity/vmware-cve-2022-22954 ✔ enabled 0.3 /etc/crowdsec/scenarios/vmware-cve-2022-22954.yaml | |
| 59 | + | crowdsecurity/vmware-vcenter-vmsa-2021-0027 ✔ enabled 0.3 /etc/crowdsec/scenarios/vmware-vcenter-vmsa-2021-0027.yaml | |
| 60 | + | ltsich/http-w00tw00t ✔ enabled 0.3 /etc/crowdsec/scenarios/http-w00tw00t.yaml | |
| 61 | + | ──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── | |
| 62 | + | ``` | |
ZZ a révisé ce gist . Aller à la révision
Aucun changement
Plus récent
Plus ancien