cscli scenarios install crowdsecurity/vsftpd-bfleakspeed of 10s, capacity of 5
1type: leaky2#debug: true3name: crowdsecurity/vsftpd-bf4description: "Detect FTP bruteforce (vsftpd)"5filter: evt.Meta.log_type == 'ftp_failed_auth'6leakspeed: "10s"7capacity: 58groupby: evt.Meta.source_ip9blackhole: 5m10labels:11 confidence: 312 spoofable: 013 classification:14 - attack.T111015 behavior: "ftp:bruteforce"16 label: "VSFTPD Bruteforce"17 remediation: true18 service: vsftpd19