+----------------------------------------------------------------------------------------------------------------------------+
| Acquisition Metrics |
+----------------------------------+------------+--------------+----------------+------------------------+-------------------+
| Source | Lines read | Lines parsed | Lines unparsed | Lines poured to bucket | Lines whitelisted |
+----------------------------------+------------+--------------+----------------+------------------------+-------------------+
| : | - | - | - | - | 4.94k |
| file:/var/log/traefik/access.log | 3.37M | 3.37M | 6 | 1.31M | 567 |
+----------------------------------+------------+--------------+----------------+------------------------+-------------------+
+-------------------------------------------------+
| Local API Decisions |
+-----------------------+--------+--------+-------+
| Reason | Origin | Action | Count |
+-----------------------+--------+--------+-------+
| generic:scan | CAPI | ban | 181 |
| http:crawl | CAPI | ban | 1152 |
| http:dos | CAPI | ban | 115 |
| http:exploit | CAPI | ban | 1139 |
| http:scan | CAPI | ban | 1797 |
| ssh:bruteforce | CAPI | ban | 408 |
| ssh:exploit | CAPI | ban | 74 |
| vm-management:exploit | CAPI | ban | 7 |
| http:bruteforce | CAPI | ban | 1206 |
+-----------------------+--------+--------+-------+
+---------------------------------------+
| Local API Metrics |
+--------------------+--------+---------+
| Route | Method | Hits |
+--------------------+--------+---------+
| /v1/alerts | GET | 3296 |
| /v1/decisions | GET | 2706857 |
| /v1/heartbeat | GET | 98656 |
| /v1/usage-metrics | POST | 3299 |
| /v1/watchers/login | POST | 4978 |
+--------------------+--------+---------+
+----------------------------------------------------------------+
| Local API Bouncers Metrics |
+-----------------------------+---------------+--------+---------+
| Bouncer | Route | Method | Hits |
+-----------------------------+---------------+--------+---------+
| bouncer-traefik@172.18.0.16 | /v1/decisions | GET | 2706479 |
+-----------------------------+---------------+--------+---------+
+-----------------------------------------------------------------+
| Local API Bouncers Decisions |
+-----------------------------+---------------+-------------------+
| Bouncer | Empty answers | Non-empty answers |
+-----------------------------+---------------+-------------------+
| bouncer-traefik@172.18.0.16 | 2700610 | 5110 |
+-----------------------------+---------------+-------------------+
+--------------------------------------------+
| Local API Machines Metrics |
+-----------+---------------+--------+-------+
| Machine | Route | Method | Hits |
+-----------+---------------+--------+-------+
| localhost | /v1/heartbeat | GET | 98656 |
| localhost | /v1/alerts | GET | 3296 |
+-----------+---------------+--------+-------+
+---------------------------------------------------------------------+
| Parser Metrics |
+----------------------------------------+--------+--------+----------+
| Parsers | Hits | Parsed | Unparsed |
+----------------------------------------+--------+--------+----------+
| child-child-crowdsecurity/traefik-logs | 3.37M | 3.37M | 6 |
| child-crowdsecurity/http-logs | 10.12M | 6.99M | 3.13M |
| child-crowdsecurity/traefik-logs | 3.37M | 3.37M | 6 |
| crowdsecurity/cdn-whitelist | 4.94k | 4.94k | - |
| crowdsecurity/dateparse-enrich | 3.37M | 3.37M | - |
| crowdsecurity/geoip-enrich | 3.37M | 3.37M | - |
| crowdsecurity/http-logs | 3.37M | 3.37M | - |
| crowdsecurity/nextcloud-whitelist | 3.37M | 3.37M | - |
| crowdsecurity/non-syslog | 3.37M | 3.37M | - |
| crowdsecurity/public-dns-allowlist | 3.37M | 3.37M | - |
| crowdsecurity/rdns | 4.94k | 4.94k | - |
| crowdsecurity/seo-bots-whitelist | 4.94k | 4.94k | - |
| crowdsecurity/traefik-logs | 3.37M | 3.37M | 6 |
| crowdsecurity/whitelists | 3.37M | 3.37M | - |
| local/blackbox-exporter-whitelist | 4.94k | 4.94k | - |
+----------------------------------------+--------+--------+----------+
+-----------------------------------------------------------------------------------------------------------+
| Scenario Metrics |
+--------------------------------------------+---------------+-----------+--------------+---------+---------+
| Scenario | Current Count | Overflows | Instantiated | Poured | Expired |
+--------------------------------------------+---------------+-----------+--------------+---------+---------+
| LePresidente/http-generic-401-bf | - | 108 | 213 | 912 | 105 |
| LePresidente/http-generic-403-bf | - | - | 7 | 13 | 7 |
| crowdsecurity/CVE-2017-9841 | - | 1.50k | 1.50k | - | - |
| crowdsecurity/CVE-2019-18935 | - | 5 | 5 | - | - |
| crowdsecurity/CVE-2022-26134 | - | 3 | 3 | - | - |
| crowdsecurity/CVE-2022-41082 | - | 29 | 29 | - | - |
| crowdsecurity/CVE-2024-0012 | - | 5 | 5 | - | - |
| crowdsecurity/apache_log4j2_cve-2021-44228 | - | 1 | 1 | - | - |
| crowdsecurity/f5-big-ip-cve-2020-5902 | - | 21 | 21 | - | - |
| crowdsecurity/fortinet-cve-2018-13379 | - | 5 | 5 | - | - |
| crowdsecurity/http-admin-interface-probing | - | 2.77k | 4.48k | 11.34k | 1.71k |
| crowdsecurity/http-backdoors-attempts | - | 333 | 1.19k | 1.65k | 853 |
| crowdsecurity/http-crawl-non_statics | 1 | 1.18k | 236.40k | 931.88k | 235.21k |
| crowdsecurity/http-cve-2021-41773 | - | 60 | 60 | - | - |
| crowdsecurity/http-cve-probing | - | 378 | 378 | - | - |
| crowdsecurity/http-path-traversal-probing | - | 7.37k | 7.69k | 30.76k | 318 |
| crowdsecurity/http-probing | - | 20.15k | 33.52k | 252.55k | 13.37k |
| crowdsecurity/http-sap-interface-probing | - | - | 8 | 8 | 8 |
| crowdsecurity/http-sensitive-files | - | 11.23k | 15.01k | 67.66k | 3.78k |
| crowdsecurity/http-wordpress-scan | - | 2.61k | 3.82k | 13.19k | 1.21k |
| crowdsecurity/http-xss-probbing | - | - | 1 | 1 | 1 |
| crowdsecurity/jira_cve-2021-26086 | - | 143 | 143 | - | - |
| crowdsecurity/netgear_rce | - | 12 | 12 | - | - |
| crowdsecurity/thinkphp-cve-2018-20062 | - | 129 | 129 | - | - |
+--------------------------------------------+---------------+-----------+--------------+---------+---------+
+-----------------------------------------------------------------------------------------------------------------+
| Whitelist Metrics |
+------------------------------------+----------------------------------------------------+---------+-------------+
| Whitelist | Reason | Hits | Whitelisted |
+------------------------------------+----------------------------------------------------+---------+-------------+
| crowdsecurity/cdn-whitelist | CDN provider | 4937 | - |
| crowdsecurity/nextcloud-whitelist | Nextcloud Whitelist | 3372119 | 567 |
| crowdsecurity/public-dns-allowlist | public DNS server | 3372119 | - |
| crowdsecurity/seo-bots-whitelist | good bots (search engine crawlers) | 4937 | - |
| crowdsecurity/whitelists | private ipv4/ipv6 ip/ranges | 3372119 | - |
| local/blackbox-exporter-whitelist | Blackbox-exporter Monitoring-Probe ohne User-Agent | 4937 | 4937 |
+------------------------------------+----------------------------------------------------+---------+-------------+