Initial commit
This commit is contained in:
1
traefik-crowdsec-stack/crowdsec/config/patterns/smb
Normal file
1
traefik-crowdsec-stack/crowdsec/config/patterns/smb
Normal file
@@ -0,0 +1 @@
|
||||
SMB_AUTH_FAIL Auth:%{GREEDYDATA} user \[%{DATA:smb_domain}\]\\\[%{DATA:user}\]%{GREEDYDATA} status \[NT_STATUS_NO_SUCH_USER\]%{GREEDYDATA} remote host \[ipv4:%{IP:ip_source}
|
||||
Reference in New Issue
Block a user