LtSich

Hi, Atm when you get the banlist on LAPI for the duration field you have something like 8h20min30.0002s It could be usefull to only get duration time in second, or...

### Describe the feature or change in detail The main idea here is to sign outgoing email from a website, but without hosting the mails account for this domain. Like...

Firewalld

1

Hi, After some test it seem that firewalld don't block IP from the IPSET if you add the IP with the ipset command.... This guy need that you add your...

Whitelist Good Actors - WP Rocket

1

Hi, It's not a bug, just a request, to add the IP list from wp-rocket to the whitelist good actors collections. You can find the IP list here : https://docs.wp-rocket.me/article/1628-which-ip-do-i-need-to-allow-for-wp-rocket...

The .less files triggers the http-crawl-non_statics scenarios.

PHPMyAdmin brute force

3

add scenarios for PHPMyAdmin brute force. I have a fail2ban filter on that : ^.*GET.*(?i)phpmyadmin/index.php\?pma_username=root.* ^.*GET.*(?i)phpmyadmin/index.php\?lang=en&pma_username=admin.* ^.*GET.*(?i)phpmyadmin/index.php\?lang=en&pma_username=root.* ^.*POST.*(?i)phpmyadmin/index.php.*

Enhancement: Add log files to acquis.yaml on cscli install

3

Hi, atm when you install a new scenario / collection with cscli install xxx the acquis.yaml file is not updated. You have to do it yourself. If you don't know...

I have made some change on the WP BrufteForce scenario to avoid blocking on reset pass or lost password. The leakspeed is increased, the default scenario don't detect a lot...

php-url-fopen

3

Based on the fail2ban filter I have make this one for crowdsec. Work fine. This will detect request with http_args containing =http:// who is generally used to inject code on...

I don't understand why we have 2 options here.... Why not just sync with crowdsec just before trying to sync with cloudflare ? Since few days / weeks it's really...