SSHesame - Honeypot Protection
thespad/sshesameCollection for sshesame ssh honeypot
v0.2
Install withor pressc
$ cscli collections install thespad/sshesame
Collections
Search by name
8 collections
- thespadv0.2
- crowdsecurityv0.3
OpenBSD - Generic Protection
crowdsecurity/openbsdCore openbsd support : syslog+geoip+ssh
v0.3Install withor pressc$ cscli collections install crowdsecurity/openbsd - crowdsecurityv0.4
Linux - Generic Protection
crowdsecurity/linuxCore linux support : syslog+geoip+ssh
v0.4Install withor pressc$ cscli collections install crowdsecurity/linux - crowdsecurityv0.5
FreeBSD - Generic Protection
crowdsecurity/freebsdCore freebsd support : syslog+geoip+ssh
v0.5Install withor pressc$ cscli collections install crowdsecurity/freebsd - crowdsecurityv0.3
UniFi - Generic Protection
crowdsecurity/unifiUnifi support: syslog + cef parsers + port scan + ssh bf detection
v0.3Install withor pressc$ cscli collections install crowdsecurity/unifi - PumbaLPv0.1
Cowrie Honeypot
PumbaLP/cowrieCowrie honeypot json logs: parser, honeypot interaction detection, ssh and telnet brute force
v0.1Install withor pressc$ cscli collections install PumbaLP/cowrie - crowdsecurityv0.9
SSHD - Bruteforce Protection
crowdsecurity/sshdSshd support : parser and brute-force detection
v0.9Install withor pressc$ cscli collections install crowdsecurity/sshd - crowdsecurityv0.2
SSHD - Impossible Travel Detection
crowdsecurity/sshd-impossible-travelSshd success: parser and impossible travel
v0.2Install withor pressc$ cscli collections install crowdsecurity/sshd-impossible-travel
1/1
1 to 8 of 8 results
About collections
To make user's life easier, "collections" are available, which are just a bundle of parsers and scenarios. In this way, if you want to cover basic use-cases of let's say "nginx", you can just install the crowdsecurity/nginx collection that is composed of crowdsecurity/nginx-logs parser, as well as generic http scenarios such as crowdsecurity/base-http-scenarios.
You can find more about this in the CrowdSec documentation.
You can find more about this in the CrowdSec documentation.