cscli scenarios install nicoh88/proxmox-backup-auth-bfDetects brute-force attacks against Proxmox Backup Server (PBS) authentication.
proxmox-backup-auth (failed auth).1type: leaky2name: nicoh88/proxmox-backup-auth-bf3description: "Detect failed PBS API authentications (bruteforce)"4filter: "evt.Meta.log_type == 'pbs_failed-auth'"5leakspeed: 10s6capacity: 57groupby: evt.Meta.source_ip8blackhole: 5m9labels:10 service: proxmox-backup11 remediation: true12 confidence: 313 classification:14 - attack.T111015 behavior: "vm-management:bruteforce"16