+----------------------------------------------------------------------------------------------------------------------------+
| Acquisition Metrics |
+----------------------------------+------------+--------------+----------------+------------------------+-------------------+
| Source | Lines read | Lines parsed | Lines unparsed | Lines poured to bucket | Lines whitelisted |
+----------------------------------+------------+--------------+----------------+------------------------+-------------------+
| : | - | - | - | - | 4.94k |
| file:/var/log/traefik/access.log | 3.37M | 3.37M | 6 | 1.31M | 567 |
+----------------------------------+------------+--------------+----------------+------------------------+-------------------+
+-------------------------------------------------+
| Local API Decisions |
+-----------------------+--------+--------+-------+
| Reason | Origin | Action | Count |
+-----------------------+--------+--------+-------+
| generic:scan | CAPI | ban | 183 |
| http:scan | CAPI | ban | 1794 |
| vm-management:exploit | CAPI | ban | 7 |
| http:bruteforce | CAPI | ban | 1202 |
| http:crawl | CAPI | ban | 1157 |
| http:dos | CAPI | ban | 115 |
| http:exploit | CAPI | ban | 1131 |
| ssh:bruteforce | CAPI | ban | 408 |
| ssh:exploit | CAPI | ban | 74 |
+-----------------------+--------+--------+-------+
+---------------------------------------+
| Local API Metrics |
+--------------------+--------+---------+
| Route | Method | Hits |
+--------------------+--------+---------+
| /v1/alerts | GET | 3298 |
| /v1/decisions | GET | 2708066 |
| /v1/heartbeat | GET | 98716 |
| /v1/usage-metrics | POST | 3301 |
| /v1/watchers/login | POST | 4981 |
+--------------------+--------+---------+
+----------------------------------------------------------------+
| Local API Bouncers Metrics |
+-----------------------------+---------------+--------+---------+
| Bouncer | Route | Method | Hits |
+-----------------------------+---------------+--------+---------+
| bouncer-traefik@172.18.0.16 | /v1/decisions | GET | 2707688 |
+-----------------------------+---------------+--------+---------+
+-----------------------------------------------------------------+
| Local API Bouncers Decisions |
+-----------------------------+---------------+-------------------+
| Bouncer | Empty answers | Non-empty answers |
+-----------------------------+---------------+-------------------+
| bouncer-traefik@172.18.0.16 | 2701819 | 5110 |
+-----------------------------+---------------+-------------------+
+--------------------------------------------+
| Local API Machines Metrics |
+-----------+---------------+--------+-------+
| Machine | Route | Method | Hits |
+-----------+---------------+--------+-------+
| localhost | /v1/alerts | GET | 3298 |
| localhost | /v1/heartbeat | GET | 98716 |
+-----------+---------------+--------+-------+
+---------------------------------------------------------------------+
| Parser Metrics |
+----------------------------------------+--------+--------+----------+
| Parsers | Hits | Parsed | Unparsed |
+----------------------------------------+--------+--------+----------+
| child-child-crowdsecurity/traefik-logs | 3.37M | 3.37M | 6 |
| child-crowdsecurity/http-logs | 10.12M | 6.99M | 3.13M |
| child-crowdsecurity/traefik-logs | 3.37M | 3.37M | 6 |
| crowdsecurity/cdn-whitelist | 4.94k | 4.94k | - |
| crowdsecurity/dateparse-enrich | 3.37M | 3.37M | - |
| crowdsecurity/geoip-enrich | 3.37M | 3.37M | - |
| crowdsecurity/http-logs | 3.37M | 3.37M | - |
| crowdsecurity/nextcloud-whitelist | 3.37M | 3.37M | - |
| crowdsecurity/non-syslog | 3.37M | 3.37M | - |
| crowdsecurity/public-dns-allowlist | 3.37M | 3.37M | - |
| crowdsecurity/rdns | 4.94k | 4.94k | - |
| crowdsecurity/seo-bots-whitelist | 4.94k | 4.94k | - |
| crowdsecurity/traefik-logs | 3.37M | 3.37M | 6 |
| crowdsecurity/whitelists | 3.37M | 3.37M | - |
| local/blackbox-exporter-whitelist | 4.94k | 4.94k | - |
+----------------------------------------+--------+--------+----------+
+-----------------------------------------------------------------------------------------------------------+
| Scenario Metrics |
+--------------------------------------------+---------------+-----------+--------------+---------+---------+
| Scenario | Current Count | Overflows | Instantiated | Poured | Expired |
+--------------------------------------------+---------------+-----------+--------------+---------+---------+
| LePresidente/http-generic-401-bf | - | 108 | 213 | 912 | 105 |
| LePresidente/http-generic-403-bf | - | - | 7 | 13 | 7 |
| crowdsecurity/CVE-2017-9841 | - | 1.54k | 1.54k | - | - |
| crowdsecurity/CVE-2019-18935 | - | 5 | 5 | - | - |
| crowdsecurity/CVE-2022-26134 | - | 3 | 3 | - | - |
| crowdsecurity/CVE-2022-41082 | - | 29 | 29 | - | - |
| crowdsecurity/CVE-2024-0012 | - | 5 | 5 | - | - |
| crowdsecurity/apache_log4j2_cve-2021-44228 | - | 1 | 1 | - | - |
| crowdsecurity/f5-big-ip-cve-2020-5902 | - | 21 | 21 | - | - |
| crowdsecurity/fortinet-cve-2018-13379 | - | 5 | 5 | - | - |
| crowdsecurity/http-admin-interface-probing | - | 2.77k | 4.49k | 11.35k | 1.72k |
| crowdsecurity/http-backdoors-attempts | - | 335 | 1.19k | 1.66k | 855 |
| crowdsecurity/http-crawl-non_statics | 2 | 1.18k | 236.57k | 932.36k | 235.38k |
| crowdsecurity/http-cve-2021-41773 | - | 60 | 60 | - | - |
| crowdsecurity/http-cve-probing | - | 378 | 378 | - | - |
| crowdsecurity/http-path-traversal-probing | - | 7.37k | 7.69k | 30.76k | 319 |
| crowdsecurity/http-probing | 1 | 20.15k | 33.54k | 252.68k | 13.39k |
| crowdsecurity/http-sap-interface-probing | - | - | 8 | 8 | 8 |
| crowdsecurity/http-sensitive-files | - | 11.23k | 15.01k | 67.67k | 3.78k |
| crowdsecurity/http-wordpress-scan | - | 2.61k | 3.83k | 13.20k | 1.22k |
| crowdsecurity/http-xss-probbing | - | - | 1 | 1 | 1 |
| crowdsecurity/jira_cve-2021-26086 | - | 143 | 143 | - | - |
| crowdsecurity/netgear_rce | - | 12 | 12 | - | - |
| crowdsecurity/thinkphp-cve-2018-20062 | - | 131 | 131 | - | - |
+--------------------------------------------+---------------+-----------+--------------+---------+---------+
+-----------------------------------------------------------------------------------------------------------------+
| Whitelist Metrics |
+------------------------------------+----------------------------------------------------+---------+-------------+
| Whitelist | Reason | Hits | Whitelisted |
+------------------------------------+----------------------------------------------------+---------+-------------+
| crowdsecurity/cdn-whitelist | CDN provider | 4942 | - |
| crowdsecurity/nextcloud-whitelist | Nextcloud Whitelist | 3373746 | 567 |
| crowdsecurity/public-dns-allowlist | public DNS server | 3373746 | - |
| crowdsecurity/seo-bots-whitelist | good bots (search engine crawlers) | 4942 | - |
| crowdsecurity/whitelists | private ipv4/ipv6 ip/ranges | 3373746 | - |
| local/blackbox-exporter-whitelist | Blackbox-exporter Monitoring-Probe ohne User-Agent | 4942 | 4942 |
+------------------------------------+----------------------------------------------------+---------+-------------+