cscli scenarios install crowdsecurity/telnet-bfleakspeed of 10s, capacity of 5
1type: leaky2name: crowdsecurity/telnet-bf3description: "detect telnet bruteforce"4filter: evt.Meta.log_type == 'telnet_new_session'5groupby: evt.Meta.source_ip6capacity: 57leakspeed: "10s"8blackhole: 5m9labels:10 service: telnet11 confidence: 312 spoofable: 013 classification:14 - attack.T111015 behavior: "telnet:bruteforce"16 label: "Telnet Bruteforce"17 remediation: true18