Magento collection

This Magento collection supports :

• Parser for the CrowdSec Magento Extension
• Web authentication bruteforce detection
• Credit card stuffing detection from a single IP
• Distributed Credit card stuffing from same country

Acquisition template

Example acquisition for this collection :

1filenames:
2  - /var/www/html/magento2/var/log/crowdsec-events.log
3labels:
4  type: magento-extension

notes :

• If you are using syslog, set type to syslog instead
• Depending on your distribution/OS, paths to log files might change
• Only relevant if you are manually installing collection

Here is the documentation to enable Event Logging in your Magento Bouncer.