A collection to defend Zoraxy against common attacks :

• Zoraxy parser
• base http scenarios (crawl, 404 scan, bf)

Example acquisition for this collection (/etc/crowdsec/acquis.d/zoraxy.yaml) :

Local install...

1---
2filenames:
3  - "/opt/zoraxy/log/zr_*.log" ## Wildcard all logs. Logs rollover each month.
4labels:
5  type: "zoraxy" ## Type defined in the parser

Docker install...

1source: docker
2container_name:
3  - zoraxy
4labels:
5  type: zoraxy