crowdsec/config/patterns/cowrie_honeypot
Thibault bui Koechlin 2016167654 initial import
2020-05-15 11:39:16 +02:00

1 line
128 B
Plaintext

COWRIE_NEW_CO New connection: %{IPV4:source_ip}:[0-9]+ \(%{IPV4:dest_ip}:%{INT:dest_port}\) \[session: %{DATA:telnet_session}\]$