Hub configuration

Name: discord-crawler-whitelist
Author: crowdsecurity

More info

discord-crawler-whitelist Postoverflow by crowdsecurity | CrowdSec Hub

« discord-crawler-whitelist »
v0.1 by crowdsecurity
Attack scenario

Discord PTR whitelist

Installation

cscli postoverflows install crowdsecurity/discord-crawler-whitelist

Description

Dicord Crawler Whitelist

Whitelist for Discord crawlers based on RDNS to 'XXX.ptr.discord.com.'.

Requirements if installing outside of collection

This postoverflow uses RDNS enricher, please ensure this is installed and enabled.

YAML Configuration

1name: crowdsecurity/discord-crawler-whitelist
2description: Discord PTR whitelist
3whitelist:
4  reason: Discord PTR domain
5  expression:
6    - evt.Enriched.reverse_dns endsWith '.ptr.discord.com.'

Hub configuration

« discord-crawler-whitelist »v0.1 by crowdsecurityAttack scenario

Dicord Crawler Whitelist

Requirements if installing outside of collection

« discord-crawler-whitelist »
v0.1 by crowdsecurity
Attack scenario