cscli scenarios install gilbsgilbs/qbittorrent-bfDetect several failed QBittorrent WebUI authentications.
leakspeed of 10s, capacity of 5
1# qBittorrent bruteforce2type: leaky3#debug: true4name: gilbsgilbs/qbittorrent-bf5description: "Detect QBittorrent WebUI bruteforce"6filter: evt.Meta.log_type == 'qbittorrent_failed_auth'7leakspeed: "10s"8capacity: 59groupby: evt.Meta.source_ip10blackhole: 5m11labels:12 confidence: 313 spoofable: 014 classification:15 - attack.T111016 behavior: "iot:bruteforce"17 label: "QBittorrent Bruteforce"18 service: qbittorrent19 remediation: true20