Content
- Log parsers1
- Attack scenarios1
vsftpd - Bruteforce Protection
Collection
- Version
- 0.2
- Name
- crowdsecurity/vsftpd
VSFTPD support : logs and brute-force scenarios
Install with a top-level collection
2 collections include itsudo cscli collections install crowdsecurity/apiscpInstalls 9 parsers and 56 scenarios.
View ApisCP →Installation
sudo cscli collections install crowdsecurity/vsftpdThen reload CrowdSec: sudo systemctl reload crowdsec
Sign in to see which of your engines run it →Configuration
Hover a line or a note to see what each field does.
name: crowdsecurity/vsftpdparsers:- crowdsecurity/vsftpd-logsscenarios:- crowdsecurity/vsftpd-bfdescription: "VSFTPD support : logs and brute-force scenarios"labels:label: "vsftpd - Bruteforce Protection"author: crowdsecuritytags:- security_engine- linux- ftp- bruteforce
Installed on
Know where it runs
Sign in to see the Security Engines that run this collection, the version they run and whether it was modified locally.
Documentation
VsFTPD collection
A collection to defend VSFTPD against common attacks :
- VSFTPD parser:
crowdsecurity/vsftpd-logs - bruteforce scenario :
crowdsecurity/vsftpd-bf
Acquisition template
Example acquisition for this collection :
1filenames:2 - /var/log/vsftpd/*.log3labels:4 type: vsftpd
notes :
- If you are using
syslog, set type tosysloginstead - Depending on your distribution/OS, paths to log files might change
- Only relevant if you are manually installing collection