cscli scenarios install crowdsecurity/pfsense-gui-bfDetects bruteforce attempts on the pfSense web portal :
1# pfsense web auth bruteforce2type: leaky3#debug: true4name: crowdsecurity/pfsense-gui-bf5description: "Detect bruteforce on pfsense web interface"6filter: evt.Meta.log_type == 'pfsense-gui-failed-auth'7leakspeed: "10s"8capacity: 59groupby: evt.Meta.source_ip10blackhole: 5m11labels:12 remediation: true13 confidence: 314 spoofable: 015 classification:16 - attack.T111017 behavior: "http:bruteforce"18 label: "pfSense GUI Bruteforce"19 service: pfsense20