cscli scenarios install crowdsecurity/appsec-bot-challenge-too-many-requests1type: leaky2format: 3.03#debug: true4name: crowdsecurity/appsec-bot-challenge-too-many-requests5description: "Client made too many request to challenge page"6filter: "evt.Meta.log_type == 'appsec-challenge' && evt.Meta.challenge_event == 'requested'"7cancel_on: "evt.Meta.log_type == 'appsec-challenge' && evt.Meta.challenge_event == 'submitted'"8leakspeed: "20s"9capacity: 1010groupby: evt.Meta.source_ip11blackhole: 1m12labels:13 service: http14 confidence: 015 spoofable: 016 classification:17 - attack.T111018 label: "Blocked by CrowdSec AppSec"19 behavior: "http:likely-bot"20 remediation: true21