cscli scenarios install crowdsecurity/proftpd-bfDetect failed proftpd authentications :
1type: leaky2name: crowdsecurity/proftpd-bf3description: "Detect proftpd bruteforce"4filter: "evt.Meta.log_type == 'ftp_failed_auth'"5leakspeed: "10s"6capacity: 57groupby: evt.Meta.source_ip8blackhole: 1m9reprocess: true10labels:11 service: proftpd12 remediation: true13 confidence: 314 spoofable: 015 classification:16 - attack.T111017 behavior: "ftp:bruteforce"18 label: "Proftpd Bruteforce"19