1name: crowdsecurity/google-special-crawlers-whitelist
2description: "Whitelist events from Google special crawlers (e.g. Google-InspectionTool, GoogleOther)"
3whitelist:
4 reason: "Google special crawlers ip range"
5 expression:
6 - "any(File('google_special_crawlers_ipv4.txt'), { len(#) > 0 && IpInRange(evt.Overflow.Alert.Source.IP, #)})"
7 - "any(File('google_special_crawlers_ipv6.txt'), { len(#) > 0 && IpInRange(evt.Overflow.Alert.Source.IP, #)})"
8
9data:
10 - source_url: https://hub-data.crowdsec.net/whitelists/benign_bots/search_engine_crawlers/google_special_crawlers_ipv4.txt
11 dest_file: google_special_crawlers_ipv4.txt
12 type: string
13 - source_url: https://hub-data.crowdsec.net/whitelists/benign_bots/search_engine_crawlers/google_special_crawlers_ipv6.txt
14 dest_file: google_special_crawlers_ipv6.txt
15 type: string
16
