cscli scenarios install crowdsecurity/appsec-bot-challenge-too-many-submissions1type: leaky2format: 3.03#debug: true4name: crowdsecurity/appsec-bot-challenge-too-many-submissions5description: "Client made too many submissions for challenge"6filter: "evt.Meta.log_type == 'appsec-challenge' && evt.Meta.challenge_event == 'submitted'"7leakspeed: "20s"8capacity: 59groupby: evt.Meta.source_ip10blackhole: 1m11labels:12 service: http13 confidence: 014 spoofable: 015 classification:16 - attack.T111017 label: "Blocked by CrowdSec AppSec"18 behavior: "http:likely-bot"19 remediation: true20