mirror of
https://github.com/aykhans/my-self-host-services.git
synced 2026-05-29 15:35:59 +00:00
14 lines
312 B
YAML
14 lines
312 B
YAML
type: leaky
|
|
name: aykhans/stalwart-auth-bruteforce
|
|
description: Detect SMTP/IMAP/POP3 authentication brute force on Stalwart
|
|
filter: |
|
|
evt.Parsed.event_type == "auth.failed"
|
|
groupby: evt.Meta.source_ip
|
|
capacity: 3
|
|
leakspeed: 10m
|
|
blackhole: 1h
|
|
labels:
|
|
type: bruteforce
|
|
service: stalwart
|
|
remediation: true
|