Prometheus Pushgateway

Labels	Value
action="ban" instance="" instance_name="hosting" job="crowdsec" origin="CAPI" reason="http:crawl"	15
action="ban" instance="" instance_name="hosting" job="crowdsec" origin="CAPI" reason="http:exploit"	9114
action="ban" instance="" instance_name="hosting" job="crowdsec" origin="CAPI" reason="http:scan"	3306
action="ban" instance="" instance_name="hosting" job="crowdsec" origin="CAPI" reason="ssh:bruteforce"	3778
action="ban" instance="" instance_name="hosting" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-bad-user-agent"	4
action="ban" instance="" instance_name="hosting" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-cve-2021-41773"	1
action="ban" instance="" instance_name="hosting" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-open-proxy"	1

Labels	Value
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/CVE-2017-9841"	5
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-admin-interface-probing"	1
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-bad-user-agent"	10
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-crawl-non_statics"	1
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-cve-2021-41773"	7
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-cve-2021-42013"	6
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-open-proxy"	1
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-probing"	7
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/http-sensitive-files"	4
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/ssh-slow-bf"	7
instance="" instance_name="hosting" job="crowdsec" reason="crowdsecurity/thinkphp-cve-2018-20062"	5

Labels	Value
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	5
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	5

Labels	Value
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	12
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-probing"	3
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	5
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	5

Labels

Value

instance="" instance_name="hosting" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.001	5
Sample values ≤ 0.002	7
Sample values ≤ 0.005	10
Sample values ≤ 0.01	10
Sample values ≤ 0.015	10
Sample values ≤ 0.02	10
Sample values ≤ 0.03	10
Sample values ≤ 0.04	10
Sample values ≤ 0.05	10
Sample values ≤ +Inf	10
Total sample Count	10
Sample Sum	0.01668479

instance="" instance_name="hosting" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.001	5
Sample values ≤ 0.002	5
Sample values ≤ 0.005	5
Sample values ≤ 0.01	5
Sample values ≤ 0.015	5
Sample values ≤ 0.02	5
Sample values ≤ 0.03	5
Sample values ≤ 0.04	5
Sample values ≤ 0.05	5
Sample values ≤ +Inf	5
Total sample Count	5
Sample Sum	0.001713557

instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" type="file"

Sample values ≤ 0.001	0
Sample values ≤ 0.002	0
Sample values ≤ 0.005	3
Sample values ≤ 0.01	3
Sample values ≤ 0.015	3
Sample values ≤ 0.02	3
Sample values ≤ 0.03	3
Sample values ≤ 0.04	3
Sample values ≤ 0.05	3
Sample values ≤ +Inf	3
Total sample Count	3
Sample Sum	0.010050658

instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" type="file"

Sample values ≤ 0.001	0
Sample values ≤ 0.002	0
Sample values ≤ 0.005	2
Sample values ≤ 0.01	2
Sample values ≤ 0.015	2
Sample values ≤ 0.02	2
Sample values ≤ 0.03	2
Sample values ≤ 0.04	2
Sample values ≤ 0.05	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.006828535

instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" type="file"

Sample values ≤ 0.001	0
Sample values ≤ 0.002	0
Sample values ≤ 0.005	1
Sample values ≤ 0.01	1
Sample values ≤ 0.015	1
Sample values ≤ 0.02	1
Sample values ≤ 0.03	1
Sample values ≤ 0.04	1
Sample values ≤ 0.05	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.00212438

Labels	Value
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/apache2/other_vhosts_access.log" type="file"	6
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" type="file"	3
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" type="file"	2
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" type="file"	1
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/apache2/other_vhosts_access.log" type="file"	3

Labels	Value
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	11
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-probing"	3

Labels	Value
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	1
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-probing"	0
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	0
instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	0

Labels	Value
acquis_type="apache2" datasource_type="file" instance="" instance_name="hosting" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log"	10
acquis_type="apache2" datasource_type="file" instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log"	3
acquis_type="apache2" datasource_type="file" instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log"	2
acquis_type="apache2" datasource_type="file" instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log"	1
acquis_type="syslog" datasource_type="file" instance="" instance_name="hosting" job="crowdsec" source="/var/log/auth.log"	356
acquis_type="syslog" datasource_type="file" instance="" instance_name="hosting" job="crowdsec" source="/var/log/messages"	149
acquis_type="syslog" datasource_type="file" instance="" instance_name="hosting" job="crowdsec" source="/var/log/syslog"	877

Labels	Value
instance="" instance_name="hosting" job="crowdsec" version="v1.7.7-debian-pragmatic-amd64-027974f2"	0

Labels	Value
bouncer="cs-firewall-bouncer-1777475948" instance="" instance_name="hosting" job="crowdsec" method="GET" route="/v1/decisions/stream"	311

Labels	Value
instance="" instance_name="hosting" job="crowdsec" machine="8a1712d0a77f46a98491931dbc278d447EWdMO8bwvr9MO7u" method="GET" route="/v1/heartbeat"	51

Labels

Value

endpoint="/v1/decisions/stream" instance="" instance_name="hosting" job="crowdsec" method="GET"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	179
Sample values ≤ 0.025	310
Sample values ≤ 0.05	310
Sample values ≤ 0.075	310
Sample values ≤ 0.1	310
Sample values ≤ 0.2	310
Sample values ≤ 0.3	310
Sample values ≤ 0.4	311
Sample values ≤ 0.5	311
Sample values ≤ 0.75	311
Sample values ≤ 1	311
Sample values ≤ +Inf	311
Total sample Count	311
Sample Sum	3.438570519999998

endpoint="/v1/heartbeat" instance="" instance_name="hosting" job="crowdsec" method="GET"

Sample values ≤ 0.005	51
Sample values ≤ 0.01	51
Sample values ≤ 0.025	51
Sample values ≤ 0.05	51
Sample values ≤ 0.075	51
Sample values ≤ 0.1	51
Sample values ≤ 0.2	51
Sample values ≤ 0.3	51
Sample values ≤ 0.4	51
Sample values ≤ 0.5	51
Sample values ≤ 0.75	51
Sample values ≤ 1	51
Sample values ≤ +Inf	51
Total sample Count	51
Sample Sum	0.050096964

endpoint="/v1/usage-metrics" instance="" instance_name="hosting" job="crowdsec" method="POST"

Sample values ≤ 0.005	4
Sample values ≤ 0.01	4
Sample values ≤ 0.025	5
Sample values ≤ 0.05	5
Sample values ≤ 0.075	5
Sample values ≤ 0.1	5
Sample values ≤ 0.2	5
Sample values ≤ 0.3	5
Sample values ≤ 0.4	5
Sample values ≤ 0.5	5
Sample values ≤ 0.75	5
Sample values ≤ 1	5
Sample values ≤ +Inf	5
Total sample Count	5
Sample Sum	0.021482231

endpoint="/v1/watchers/login" instance="" instance_name="hosting" job="crowdsec" method="POST"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	0
Sample values ≤ 0.025	0
Sample values ≤ 0.05	0
Sample values ≤ 0.075	0
Sample values ≤ 0.1	0
Sample values ≤ 0.2	1
Sample values ≤ 0.3	1
Sample values ≤ 0.4	1
Sample values ≤ 0.5	1
Sample values ≤ 0.75	1
Sample values ≤ 1	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.104195717

Labels	Value
instance="" instance_name="hosting" job="crowdsec" method="GET" route="/v1/decisions/stream"	311
instance="" instance_name="hosting" job="crowdsec" method="GET" route="/v1/heartbeat"	51
instance="" instance_name="hosting" job="crowdsec" method="POST" route="/v1/usage-metrics"	5
instance="" instance_name="hosting" job="crowdsec" method="POST" route="/v1/watchers/login"	1

Labels	Value
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	400
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	20
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	25
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	20

Labels	Value
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s01-parse" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s01-parse" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	20
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	6
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	4
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s00-raw" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s00-raw" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s00-raw" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	356
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	149
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	877
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	356
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	149
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	877
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	5

Labels	Value
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s01-parse" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s01-parse" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	30
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	9
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	6
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s01-parse" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s01-parse" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s00-raw" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s00-raw" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s00-raw" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	400
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	25
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	356
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	149
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	877
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	25
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	25
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	356
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	149
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	877
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	5

Labels	Value
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	20
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" stage="s02-enrich" type="file"	6
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" stage="s02-enrich" type="file"	4
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" stage="s02-enrich" type="file"	2
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/auth.log" stage="s02-enrich" type="file"	5
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	10

Labels	Value
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" source="/var/log/auth.log" type="file"	351
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" source="/var/log/messages" type="file"	149
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" source="/var/log/syslog" type="file"	877

Labels	Value
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	10
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" type="file"	3
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" type="file"	2
acquis_type="apache2" instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" type="file"	1
acquis_type="syslog" instance="" instance_name="hosting" job="crowdsec" source="/var/log/auth.log" type="file"	5

Labels	Value
instance="" instance_name="hosting" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	10
instance="" instance_name="hosting" job="crowdsec" source="/var/log/auth.log" type="file"	356
instance="" instance_name="hosting" job="crowdsec" source="/var/log/messages" type="file"	149
instance="" instance_name="hosting" job="crowdsec" source="/var/log/syslog" type="file"	877
instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" type="file"	3
instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" type="file"	2
instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" type="file"	1

Labels

Value

instance="" instance_name="hosting" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	2
Sample values ≤ 0.0015	4
Sample values ≤ 0.002	4
Sample values ≤ 0.0025	5
Sample values ≤ 0.003	8
Sample values ≤ 0.004	8
Sample values ≤ 0.005	10
Sample values ≤ 0.0075	10
Sample values ≤ 0.01	10
Sample values ≤ +Inf	10
Total sample Count	10
Sample Sum	0.022875987000000004

instance="" instance_name="hosting" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.0005	351
Sample values ≤ 0.001	354
Sample values ≤ 0.0015	355
Sample values ≤ 0.002	355
Sample values ≤ 0.0025	355
Sample values ≤ 0.003	355
Sample values ≤ 0.004	355
Sample values ≤ 0.005	355
Sample values ≤ 0.0075	356
Sample values ≤ 0.01	356
Sample values ≤ +Inf	356
Total sample Count	356
Sample Sum	0.051922890999999964

instance="" instance_name="hosting" job="crowdsec" source="/var/log/messages" type="file"

Sample values ≤ 0.0005	147
Sample values ≤ 0.001	148
Sample values ≤ 0.0015	148
Sample values ≤ 0.002	148
Sample values ≤ 0.0025	148
Sample values ≤ 0.003	148
Sample values ≤ 0.004	148
Sample values ≤ 0.005	148
Sample values ≤ 0.0075	149
Sample values ≤ 0.01	149
Sample values ≤ +Inf	149
Total sample Count	149
Sample Sum	0.022506876999999974

instance="" instance_name="hosting" job="crowdsec" source="/var/log/syslog" type="file"

Sample values ≤ 0.0005	877
Sample values ≤ 0.001	877
Sample values ≤ 0.0015	877
Sample values ≤ 0.002	877
Sample values ≤ 0.0025	877
Sample values ≤ 0.003	877
Sample values ≤ 0.004	877
Sample values ≤ 0.005	877
Sample values ≤ 0.0075	877
Sample values ≤ 0.01	877
Sample values ≤ +Inf	877
Total sample Count	877
Sample Sum	0.10342544399999999

instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/amjb.com.mx/logs/access_log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	2
Sample values ≤ 0.0015	2
Sample values ≤ 0.002	2
Sample values ≤ 0.0025	2
Sample values ≤ 0.003	2
Sample values ≤ 0.004	2
Sample values ≤ 0.005	2
Sample values ≤ 0.0075	3
Sample values ≤ 0.01	3
Sample values ≤ +Inf	3
Total sample Count	3
Sample Sum	0.008099461

instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/hushhhproductions.com/logs/access_log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	1
Sample values ≤ 0.0015	1
Sample values ≤ 0.002	2
Sample values ≤ 0.0025	2
Sample values ≤ 0.003	2
Sample values ≤ 0.004	2
Sample values ≤ 0.005	2
Sample values ≤ 0.0075	2
Sample values ≤ 0.01	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.002680316

instance="" instance_name="hosting" job="crowdsec" source="/var/www/vhosts/system/teamresearch.biz/logs/access_log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	1
Sample values ≤ 0.0015	1
Sample values ≤ 0.002	1
Sample values ≤ 0.0025	1
Sample values ≤ 0.003	1
Sample values ≤ 0.004	1
Sample values ≤ 0.005	1
Sample values ≤ 0.0075	1
Sample values ≤ 0.01	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.000844736

Labels	Value
instance="" instance_name="hosting" job="crowdsec" name="bad_user_agents.regex.txt"	0
instance="" instance_name="hosting" job="crowdsec" name="thinkphp_cve_2018-20062.txt"	0

Labels	Value
instance="" instance_name="hosting" job="crowdsec"	0

Labels	Value
instance="" instance_name="hosting" job="crowdsec"	1777479281.4505155

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	156

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	1777477070

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	1495

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	1495

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	1777477071.364495

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hosting" job="cve_scanner"	0

Labels	Value
action="ban" instance="" instance_name="hub" job="crowdsec" origin="CAPI" reason="http:exploit"	94
action="ban" instance="" instance_name="hub" job="crowdsec" origin="CAPI" reason="http:scan"	12929
action="ban" instance="" instance_name="hub" job="crowdsec" origin="CAPI" reason="ssh:bruteforce"	3892
action="ban" instance="" instance_name="hub" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-cve-2021-41773"	2
action="ban" instance="" instance_name="hub" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-probing"	1
action="ban" instance="" instance_name="hub" job="crowdsec" origin="crowdsec" reason="crowdsecurity/ssh-bf"	32
action="ban" instance="" instance_name="hub" job="crowdsec" origin="crowdsec" reason="crowdsecurity/ssh-bf_user-enum"	1
action="ban" instance="" instance_name="hub" job="crowdsec" origin="crowdsec" reason="crowdsecurity/ssh-slow-bf"	16
action="ban" instance="" instance_name="hub" job="crowdsec" origin="crowdsec" reason="crowdsecurity/ssh-slow-bf_user-enum"	1

Labels	Value
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/CVE-2017-9841"	1
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/http-bad-user-agent"	3
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/http-cve-2021-41773"	3
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/http-cve-2021-42013"	1
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/http-probing"	3
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/ssh-bf"	362
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/ssh-bf_user-enum"	33
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/ssh-slow-bf"	160
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/ssh-slow-bf_user-enum"	32
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/ssh-time-based-bf"	2
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/ssh-time-based-bf_user-enum"	17
instance="" instance_name="hub" job="crowdsec" reason="crowdsecurity/thinkphp-cve-2018-20062"	1

Labels	Value
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	98
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	98

Labels	Value
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-bad-user-agent"	1
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	26
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-cve-2021-41773"	2
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-probing"	22
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-sensitive-files"	2
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf"	55
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	53
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	29
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	30
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	124
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	125

Labels	Value
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-cve-2021-41773"	2
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf"	20
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	1
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	1

Labels

Value

instance="" instance_name="hub" job="crowdsec" source="" type=""

Sample values ≤ 0.001	22
Sample values ≤ 0.002	22
Sample values ≤ 0.005	22
Sample values ≤ 0.01	22
Sample values ≤ 0.015	22
Sample values ≤ 0.02	22
Sample values ≤ 0.03	22
Sample values ≤ 0.04	22
Sample values ≤ 0.05	22
Sample values ≤ +Inf	22
Total sample Count	22
Sample Sum	0.002373054

instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/error.log" type="file"

Sample values ≤ 0.001	334
Sample values ≤ 0.002	335
Sample values ≤ 0.005	335
Sample values ≤ 0.01	335
Sample values ≤ 0.015	335
Sample values ≤ 0.02	335
Sample values ≤ 0.03	335
Sample values ≤ 0.04	335
Sample values ≤ 0.05	335
Sample values ≤ +Inf	335
Total sample Count	335
Sample Sum	0.1576561019999999

instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.001	371
Sample values ≤ 0.002	389
Sample values ≤ 0.005	409
Sample values ≤ 0.01	410
Sample values ≤ 0.015	410
Sample values ≤ 0.02	410
Sample values ≤ 0.03	410
Sample values ≤ 0.04	410
Sample values ≤ 0.05	410
Sample values ≤ +Inf	410
Total sample Count	410
Sample Sum	0.3325897760000001

instance="" instance_name="hub" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.001	353
Sample values ≤ 0.002	353
Sample values ≤ 0.005	353
Sample values ≤ 0.01	353
Sample values ≤ 0.015	353
Sample values ≤ 0.02	353
Sample values ≤ 0.03	353
Sample values ≤ 0.04	353
Sample values ≤ 0.05	353
Sample values ≤ +Inf	353
Total sample Count	353
Sample Sum	0.07119063499999996

Labels	Value
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-bad-user-agent" source="/var/log/apache2/other_vhosts_access.log" type="file"	1
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/apache2/other_vhosts_access.log" type="file"	80
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/apache2/other_vhosts_access.log" type="file"	37
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-sensitive-files" source="/var/log/apache2/other_vhosts_access.log" type="file"	3
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf" source="/var/log/auth.log" type="file"	255
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum" source="/var/log/auth.log" type="file"	73
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf" source="/var/log/auth.log" type="file"	255
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum" source="/var/log/auth.log" type="file"	50
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf" source="/var/log/auth.log" type="file"	255
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum" source="/var/log/auth.log" type="file"	48

Labels	Value
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-bad-user-agent"	1
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	26
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-probing"	22
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-sensitive-files"	2
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf"	35
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	53
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	26
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	29

Labels	Value
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-bad-user-agent"	0
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	0
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-cve-2021-41773"	0
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-probing"	0
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-sensitive-files"	0
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf"	0
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	0
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	2
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	1
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	26
instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	26

Labels	Value
acquis_type="apache2" datasource_type="file" instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/error.log"	335
acquis_type="apache2" datasource_type="file" instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log"	545
acquis_type="syslog" datasource_type="file" instance="" instance_name="hub" job="crowdsec" source="/var/log/auth.log"	2855
acquis_type="syslog" datasource_type="file" instance="" instance_name="hub" job="crowdsec" source="/var/log/kern.log"	170
acquis_type="syslog" datasource_type="file" instance="" instance_name="hub" job="crowdsec" source="/var/log/maillog"	39
acquis_type="syslog" datasource_type="file" instance="" instance_name="hub" job="crowdsec" source="/var/log/messages"	422
acquis_type="syslog" datasource_type="file" instance="" instance_name="hub" job="crowdsec" source="/var/log/syslog"	10569

Labels	Value
instance="" instance_name="hub" job="crowdsec" version="v1.7.7-debian-pragmatic-amd64-027974f2"	0

Labels	Value
bouncer="cs-firewall-bouncer-1777475777" instance="" instance_name="hub" job="crowdsec" method="GET" route="/v1/decisions/stream"	542

Labels	Value
instance="" instance_name="hub" job="crowdsec" machine="92956b9d4b124758bbff0ada624f1f4bB9yvkITWlxocYXwk" method="GET" route="/v1/heartbeat"	90
instance="" instance_name="hub" job="crowdsec" machine="92956b9d4b124758bbff0ada624f1f4bB9yvkITWlxocYXwk" method="POST" route="/v1/alerts"	24

Labels

Value

endpoint="/v1/alerts" instance="" instance_name="hub" job="crowdsec" method="POST"

Sample values ≤ 0.005	22
Sample values ≤ 0.01	24
Sample values ≤ 0.025	24
Sample values ≤ 0.05	24
Sample values ≤ 0.075	24
Sample values ≤ 0.1	24
Sample values ≤ 0.2	24
Sample values ≤ 0.3	24
Sample values ≤ 0.4	24
Sample values ≤ 0.5	24
Sample values ≤ 0.75	24
Sample values ≤ 1	24
Sample values ≤ +Inf	24
Total sample Count	24
Sample Sum	0.08586082500000002

endpoint="/v1/decisions/stream" instance="" instance_name="hub" job="crowdsec" method="GET"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	11
Sample values ≤ 0.025	541
Sample values ≤ 0.05	541
Sample values ≤ 0.075	541
Sample values ≤ 0.1	541
Sample values ≤ 0.2	542
Sample values ≤ 0.3	542
Sample values ≤ 0.4	542
Sample values ≤ 0.5	542
Sample values ≤ 0.75	542
Sample values ≤ 1	542
Sample values ≤ +Inf	542
Total sample Count	542
Sample Sum	6.101392638999995

endpoint="/v1/heartbeat" instance="" instance_name="hub" job="crowdsec" method="GET"

Sample values ≤ 0.005	90
Sample values ≤ 0.01	90
Sample values ≤ 0.025	90
Sample values ≤ 0.05	90
Sample values ≤ 0.075	90
Sample values ≤ 0.1	90
Sample values ≤ 0.2	90
Sample values ≤ 0.3	90
Sample values ≤ 0.4	90
Sample values ≤ 0.5	90
Sample values ≤ 0.75	90
Sample values ≤ 1	90
Sample values ≤ +Inf	90
Total sample Count	90
Sample Sum	0.03790993399999999

endpoint="/v1/usage-metrics" instance="" instance_name="hub" job="crowdsec" method="POST"

Sample values ≤ 0.005	10
Sample values ≤ 0.01	10
Sample values ≤ 0.025	10
Sample values ≤ 0.05	10
Sample values ≤ 0.075	10
Sample values ≤ 0.1	10
Sample values ≤ 0.2	10
Sample values ≤ 0.3	10
Sample values ≤ 0.4	10
Sample values ≤ 0.5	10
Sample values ≤ 0.75	10
Sample values ≤ 1	10
Sample values ≤ +Inf	10
Total sample Count	10
Sample Sum	0.014735511

endpoint="/v1/watchers/login" instance="" instance_name="hub" job="crowdsec" method="POST"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	0
Sample values ≤ 0.025	0
Sample values ≤ 0.05	0
Sample values ≤ 0.075	1
Sample values ≤ 0.1	2
Sample values ≤ 0.2	2
Sample values ≤ 0.3	2
Sample values ≤ 0.4	2
Sample values ≤ 0.5	2
Sample values ≤ 0.75	2
Sample values ≤ 1	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.144583873

Labels	Value
instance="" instance_name="hub" job="crowdsec" method="GET" route="/v1/decisions/stream"	542
instance="" instance_name="hub" job="crowdsec" method="GET" route="/v1/heartbeat"	90
instance="" instance_name="hub" job="crowdsec" method="POST" route="/v1/alerts"	24
instance="" instance_name="hub" job="crowdsec" method="POST" route="/v1/usage-metrics"	10
instance="" instance_name="hub" job="crowdsec" method="POST" route="/v1/watchers/login"	2

Labels	Value
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/error.log" stage="s01-parse" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	670
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	435
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	42
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	15465
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	811
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	909
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	811

Labels	Value
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/error.log" stage="s01-parse" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1200
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	410
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	503
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/error.log" stage="s00-raw" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	255
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	98
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	2855
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	170
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	39
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	422
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	10569
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	255
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	98
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	2855
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	170
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	39
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	422
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	10569
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/cdn-whitelist" source="" stage="s01-whitelist" type=""	23
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/rdns" source="" stage="s00-enrich" type=""	23
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" source="" stage="s01-whitelist" type=""	23

Labels	Value
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/error.log" stage="s01-parse" type="file"	670
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	1005
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1635
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/error.log" stage="s01-parse" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	410
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/error.log" stage="s00-raw" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	15720
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	909
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	2855
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	170
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	39
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	422
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	10569
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	1164
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	909
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	2855
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	170
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	39
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	422
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	10569
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/cdn-whitelist" source="" stage="s01-whitelist" type=""	23
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/rdns" source="" stage="s00-enrich" type=""	23
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" source="" stage="s01-whitelist" type=""	23

Labels	Value
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	135
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	135

Labels	Value
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	545
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/apache2/error.log" stage="s02-enrich" type="file"	670
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	955
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/auth.log" stage="s02-enrich" type="file"	353
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	706
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/cdn-whitelist" reason="CDN provider" source="" stage="s01-whitelist" type=""	23
acquis_type="unknown" instance="" instance_name="hub" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" reason="good bots (search engine crawlers)" source="" stage="s01-whitelist" type=""	23

Labels	Value
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" source="/var/log/auth.log" type="file"	2502
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" source="/var/log/kern.log" type="file"	170
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" source="/var/log/maillog" type="file"	39
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" source="/var/log/messages" type="file"	422
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" source="/var/log/syslog" type="file"	10569

Labels	Value
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/error.log" type="file"	335
acquis_type="apache2" instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	545
acquis_type="syslog" instance="" instance_name="hub" job="crowdsec" source="/var/log/auth.log" type="file"	353

Labels	Value
instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/error.log" type="file"	335
instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	545
instance="" instance_name="hub" job="crowdsec" source="/var/log/auth.log" type="file"	2855
instance="" instance_name="hub" job="crowdsec" source="/var/log/kern.log" type="file"	170
instance="" instance_name="hub" job="crowdsec" source="/var/log/maillog" type="file"	39
instance="" instance_name="hub" job="crowdsec" source="/var/log/messages" type="file"	422
instance="" instance_name="hub" job="crowdsec" source="/var/log/syslog" type="file"	10569

Labels

Value

instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/error.log" type="file"

Sample values ≤ 0.0005	324
Sample values ≤ 0.001	329
Sample values ≤ 0.0015	330
Sample values ≤ 0.002	330
Sample values ≤ 0.0025	331
Sample values ≤ 0.003	332
Sample values ≤ 0.004	332
Sample values ≤ 0.005	333
Sample values ≤ 0.0075	334
Sample values ≤ 0.01	334
Sample values ≤ +Inf	335
Total sample Count	335
Sample Sum	0.10383377799999995

instance="" instance_name="hub" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.0005	419
Sample values ≤ 0.001	524
Sample values ≤ 0.0015	532
Sample values ≤ 0.002	536
Sample values ≤ 0.0025	539
Sample values ≤ 0.003	542
Sample values ≤ 0.004	543
Sample values ≤ 0.005	544
Sample values ≤ 0.0075	545
Sample values ≤ 0.01	545
Sample values ≤ +Inf	545
Total sample Count	545
Sample Sum	0.26449177300000004

instance="" instance_name="hub" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.0005	2803
Sample values ≤ 0.001	2842
Sample values ≤ 0.0015	2845
Sample values ≤ 0.002	2849
Sample values ≤ 0.0025	2850
Sample values ≤ 0.003	2850
Sample values ≤ 0.004	2853
Sample values ≤ 0.005	2853
Sample values ≤ 0.0075	2854
Sample values ≤ 0.01	2854
Sample values ≤ +Inf	2855
Total sample Count	2855
Sample Sum	0.535626666000001

instance="" instance_name="hub" job="crowdsec" source="/var/log/kern.log" type="file"

Sample values ≤ 0.0005	167
Sample values ≤ 0.001	168
Sample values ≤ 0.0015	168
Sample values ≤ 0.002	169
Sample values ≤ 0.0025	170
Sample values ≤ 0.003	170
Sample values ≤ 0.004	170
Sample values ≤ 0.005	170
Sample values ≤ 0.0075	170
Sample values ≤ 0.01	170
Sample values ≤ +Inf	170
Total sample Count	170
Sample Sum	0.016703358

instance="" instance_name="hub" job="crowdsec" source="/var/log/maillog" type="file"

Sample values ≤ 0.0005	39
Sample values ≤ 0.001	39
Sample values ≤ 0.0015	39
Sample values ≤ 0.002	39
Sample values ≤ 0.0025	39
Sample values ≤ 0.003	39
Sample values ≤ 0.004	39
Sample values ≤ 0.005	39
Sample values ≤ 0.0075	39
Sample values ≤ 0.01	39
Sample values ≤ +Inf	39
Total sample Count	39
Sample Sum	0.002961746

instance="" instance_name="hub" job="crowdsec" source="/var/log/messages" type="file"

Sample values ≤ 0.0005	417
Sample values ≤ 0.001	421
Sample values ≤ 0.0015	421
Sample values ≤ 0.002	421
Sample values ≤ 0.0025	422
Sample values ≤ 0.003	422
Sample values ≤ 0.004	422
Sample values ≤ 0.005	422
Sample values ≤ 0.0075	422
Sample values ≤ 0.01	422
Sample values ≤ +Inf	422
Total sample Count	422
Sample Sum	0.038296032000000015

instance="" instance_name="hub" job="crowdsec" source="/var/log/syslog" type="file"

Sample values ≤ 0.0005	10540
Sample values ≤ 0.001	10559
Sample values ≤ 0.0015	10563
Sample values ≤ 0.002	10563
Sample values ≤ 0.0025	10568
Sample values ≤ 0.003	10568
Sample values ≤ 0.004	10568
Sample values ≤ 0.005	10568
Sample values ≤ 0.0075	10569
Sample values ≤ 0.01	10569
Sample values ≤ +Inf	10569
Total sample Count	10569
Sample Sum	1.2314092069999967

Labels	Value
instance="" instance_name="hub" job="crowdsec" name="bad_user_agents.regex.txt"	0
instance="" instance_name="hub" job="crowdsec" name="thinkphp_cve_2018-20062.txt"	0

Labels	Value
instance="" instance_name="hub" job="crowdsec"	0

Labels	Value
instance="" instance_name="hub" job="crowdsec"	1777482394.8169115

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	171

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	1777482397

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	1646

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	1646

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	1777482398.1700842

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hub" job="cve_scanner"	0

Labels	Value
instance="" instance_name="hub" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-apache-badbot" job="fail2ban"	172800
instance="" instance_name="hub" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-one-week-ban" job="fail2ban"	604800
instance="" instance_name="hub" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-permanent-ban" job="fail2ban"	-1
instance="" instance_name="hub" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="hub" jail="recidive" job="fail2ban"	604800

Labels	Value
instance="" instance_name="hub" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-apache-badbot" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-one-week-ban" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-permanent-ban" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="hub" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="hub" jail="recidive" job="fail2ban"	86400

Labels	Value
instance="" instance_name="hub" jail="plesk-apache" job="fail2ban"	6
instance="" instance_name="hub" jail="plesk-apache-badbot" job="fail2ban"	1
instance="" instance_name="hub" jail="plesk-dovecot" job="fail2ban"	5
instance="" instance_name="hub" jail="plesk-modsecurity" job="fail2ban"	5
instance="" instance_name="hub" jail="plesk-one-week-ban" job="fail2ban"	1
instance="" instance_name="hub" jail="plesk-panel" job="fail2ban"	5
instance="" instance_name="hub" jail="plesk-permanent-ban" job="fail2ban"	1
instance="" instance_name="hub" jail="plesk-postfix" job="fail2ban"	5
instance="" instance_name="hub" jail="plesk-proftpd" job="fail2ban"	5
instance="" instance_name="hub" jail="plesk-roundcube" job="fail2ban"	5
instance="" instance_name="hub" jail="plesk-wordpress" job="fail2ban"	5
instance="" instance_name="hub" jail="recidive" job="fail2ban"	5

Labels	Value
instance="" instance_name="hub" job="fail2ban" type="socket_conn"	1
instance="" instance_name="hub" job="fail2ban" type="socket_req"	0

Labels	Value
instance="" instance_name="hub" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="hub" jail="recidive" job="fail2ban"	0

Labels	Value
instance="" instance_name="hub" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-modsecurity" job="fail2ban"	8
instance="" instance_name="hub" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="hub" jail="recidive" job="fail2ban"	0

Labels	Value
instance="" instance_name="hub" job="fail2ban"	12

Labels	Value
instance="" instance_name="hub" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="hub" jail="recidive" job="fail2ban"	8

Labels	Value
instance="" instance_name="hub" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-modsecurity" job="fail2ban"	88
instance="" instance_name="hub" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="hub" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="hub" jail="recidive" job="fail2ban"	8

Labels	Value
instance="" instance_name="hub" job="fail2ban"	1

Labels	Value
exporter="0.10.3" fail2ban="1.1.0" instance="" instance_name="hub" job="fail2ban"	1

Labels	Value
instance="" instance_name="hub" job="fail2ban"	0

Labels	Value
instance="" instance_name="hub" job="fail2ban"	1777482394.5743778

Labels	Value
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="CAPI" reason="generic:scan"	70
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="CAPI" reason="http:exploit"	92
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="CAPI" reason="http:scan"	14962
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="CAPI" reason="ssh:bruteforce"	1743
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-open-proxy"	3
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="crowdsec" reason="crowdsecurity/postfix-non-smtp-command"	1
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="crowdsec" reason="crowdsecurity/ssh-bf"	4
action="ban" instance="" instance_name="sa1" job="crowdsec" origin="crowdsec" reason="crowdsecurity/ssh-slow-bf"	2

Labels	Value
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/CVE-2017-9841"	2
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/http-bad-user-agent"	15
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/http-cve-2021-41773"	5
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/http-cve-2021-42013"	3
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/http-open-proxy"	4
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/http-probing"	6
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/postfix-non-smtp-command"	5
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/postfix-spam"	3
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/ssh-bf"	20
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/ssh-slow-bf"	12
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/ssh-time-based-bf"	2
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/ssh-time-based-bf_user-enum"	19
instance="" instance_name="sa1" job="crowdsec" reason="crowdsecurity/thinkphp-cve-2018-20062"	2

Labels	Value
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	9
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	9

Labels	Value
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	14
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-probing"	6
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-wordpress-scan"	1
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf"	12
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	9
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	10
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	9
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	15
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	16

Labels	Value
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf"	3
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	1
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	1

Labels

Value

instance="" instance_name="sa1" job="crowdsec" source="" type=""

Sample values ≤ 0.001	4
Sample values ≤ 0.002	4
Sample values ≤ 0.005	4
Sample values ≤ 0.01	4
Sample values ≤ 0.015	4
Sample values ≤ 0.02	4
Sample values ≤ 0.03	4
Sample values ≤ 0.04	4
Sample values ≤ 0.05	4
Sample values ≤ +Inf	4
Total sample Count	4
Sample Sum	0.00026730199999999997

instance="" instance_name="sa1" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.001	8
Sample values ≤ 0.002	12
Sample values ≤ 0.005	17
Sample values ≤ 0.01	17
Sample values ≤ 0.015	17
Sample values ≤ 0.02	17
Sample values ≤ 0.03	17
Sample values ≤ 0.04	17
Sample values ≤ 0.05	17
Sample values ≤ +Inf	17
Total sample Count	17
Sample Sum	0.022685107000000003

instance="" instance_name="sa1" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.001	51
Sample values ≤ 0.002	51
Sample values ≤ 0.005	52
Sample values ≤ 0.01	52
Sample values ≤ 0.015	52
Sample values ≤ 0.02	52
Sample values ≤ 0.03	52
Sample values ≤ 0.04	52
Sample values ≤ 0.05	52
Sample values ≤ +Inf	52
Total sample Count	52
Sample Sum	0.013394010000000001

instance="" instance_name="sa1" job="crowdsec" source="/var/log/maillog" type="file"

Sample values ≤ 0.001	19
Sample values ≤ 0.002	19
Sample values ≤ 0.005	19
Sample values ≤ 0.01	19
Sample values ≤ 0.015	19
Sample values ≤ 0.02	19
Sample values ≤ 0.03	19
Sample values ≤ 0.04	19
Sample values ≤ 0.05	19
Sample values ≤ +Inf	19
Total sample Count	19
Sample Sum	0.002082482

instance="" instance_name="sa1" job="crowdsec" source="/var/log/nginx/access.log" type="file"

Sample values ≤ 0.001	16
Sample values ≤ 0.002	17
Sample values ≤ 0.005	18
Sample values ≤ 0.01	19
Sample values ≤ 0.015	19
Sample values ≤ 0.02	19
Sample values ≤ 0.03	19
Sample values ≤ 0.04	19
Sample values ≤ 0.05	19
Sample values ≤ +Inf	19
Total sample Count	19
Sample Sum	0.020001849

instance="" instance_name="sa1" job="crowdsec" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" type="file"

Sample values ≤ 0.001	1
Sample values ≤ 0.002	1
Sample values ≤ 0.005	1
Sample values ≤ 0.01	1
Sample values ≤ 0.015	1
Sample values ≤ 0.02	1
Sample values ≤ 0.03	1
Sample values ≤ 0.04	1
Sample values ≤ 0.05	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.000568333

Labels	Value
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/apache2/other_vhosts_access.log" type="file"	14
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/nginx/access.log" type="file"	10
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" type="file"	1
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/apache2/other_vhosts_access.log" type="file"	10
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/nginx/access.log" type="file"	9
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-wordpress-scan" source="/var/log/apache2/other_vhosts_access.log" type="file"	1
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf" source="/var/log/auth.log" type="file"	43
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum" source="/var/log/auth.log" type="file"	20
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf" source="/var/log/auth.log" type="file"	43
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum" source="/var/log/auth.log" type="file"	20
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf" source="/var/log/auth.log" type="file"	43
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum" source="/var/log/auth.log" type="file"	19

Labels	Value
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	14
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-probing"	6
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-wordpress-scan"	1
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf"	9
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	9
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	7
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	7

Labels	Value
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	0
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-probing"	0
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-wordpress-scan"	0
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf"	0
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	0
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	2
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	2
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	6
instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	6

Labels	Value
acquis_type="apache2" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log"	17
acquis_type="apache2" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log"	1
acquis_type="nginx" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/log/nginx/access.log"	19
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/log/auth.log"	710
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/log/kern.log"	745
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/log/maillog"	21
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/log/messages"	1005
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa1" job="crowdsec" source="/var/log/syslog"	3325

Labels	Value
instance="" instance_name="sa1" job="crowdsec" version="v1.7.7-debian-pragmatic-amd64-027974f2"	0

Labels	Value
bouncer="cs-firewall-bouncer-1777475907" instance="" instance_name="sa1" job="crowdsec" method="GET" route="/v1/decisions/stream"	572

Labels	Value
instance="" instance_name="sa1" job="crowdsec" machine="92956b9d4b124758bbff0ada624f1f4b4N7vKtcAK2RqQrRJ" method="GET" route="/v1/heartbeat"	95
instance="" instance_name="sa1" job="crowdsec" machine="92956b9d4b124758bbff0ada624f1f4b4N7vKtcAK2RqQrRJ" method="POST" route="/v1/alerts"	4

Labels

Value

endpoint="/v1/alerts" instance="" instance_name="sa1" job="crowdsec" method="POST"

Sample values ≤ 0.005	3
Sample values ≤ 0.01	4
Sample values ≤ 0.025	4
Sample values ≤ 0.05	4
Sample values ≤ 0.075	4
Sample values ≤ 0.1	4
Sample values ≤ 0.2	4
Sample values ≤ 0.3	4
Sample values ≤ 0.4	4
Sample values ≤ 0.5	4
Sample values ≤ 0.75	4
Sample values ≤ 1	4
Sample values ≤ +Inf	4
Total sample Count	4
Sample Sum	0.015939731

endpoint="/v1/decisions/stream" instance="" instance_name="sa1" job="crowdsec" method="GET"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	447
Sample values ≤ 0.025	566
Sample values ≤ 0.05	569
Sample values ≤ 0.075	569
Sample values ≤ 0.1	569
Sample values ≤ 0.2	571
Sample values ≤ 0.3	571
Sample values ≤ 0.4	571
Sample values ≤ 0.5	571
Sample values ≤ 0.75	571
Sample values ≤ 1	571
Sample values ≤ +Inf	572
Total sample Count	572
Sample Sum	15.204493017999999

endpoint="/v1/heartbeat" instance="" instance_name="sa1" job="crowdsec" method="GET"

Sample values ≤ 0.005	94
Sample values ≤ 0.01	94
Sample values ≤ 0.025	94
Sample values ≤ 0.05	94
Sample values ≤ 0.075	94
Sample values ≤ 0.1	94
Sample values ≤ 0.2	94
Sample values ≤ 0.3	94
Sample values ≤ 0.4	94
Sample values ≤ 0.5	94
Sample values ≤ 0.75	94
Sample values ≤ 1	94
Sample values ≤ +Inf	95
Total sample Count	95
Sample Sum	9.604771174999994

endpoint="/v1/usage-metrics" instance="" instance_name="sa1" job="crowdsec" method="POST"

Sample values ≤ 0.005	10
Sample values ≤ 0.01	10
Sample values ≤ 0.025	10
Sample values ≤ 0.05	10
Sample values ≤ 0.075	10
Sample values ≤ 0.1	10
Sample values ≤ 0.2	10
Sample values ≤ 0.3	10
Sample values ≤ 0.4	10
Sample values ≤ 0.5	10
Sample values ≤ 0.75	10
Sample values ≤ 1	10
Sample values ≤ +Inf	10
Total sample Count	10
Sample Sum	0.020548096

endpoint="/v1/watchers/login" instance="" instance_name="sa1" job="crowdsec" method="POST"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	0
Sample values ≤ 0.025	0
Sample values ≤ 0.05	0
Sample values ≤ 0.075	2
Sample values ≤ 0.1	2
Sample values ≤ 0.2	2
Sample values ≤ 0.3	2
Sample values ≤ 0.4	2
Sample values ≤ 0.5	2
Sample values ≤ 0.75	2
Sample values ≤ 1	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.117304862

Labels	Value
instance="" instance_name="sa1" job="crowdsec" method="GET" route="/v1/decisions/stream"	572
instance="" instance_name="sa1" job="crowdsec" method="GET" route="/v1/heartbeat"	95
instance="" instance_name="sa1" job="crowdsec" method="POST" route="/v1/alerts"	4
instance="" instance_name="sa1" job="crowdsec" method="POST" route="/v1/usage-metrics"	10
instance="" instance_name="sa1" job="crowdsec" method="POST" route="/v1/watchers/login"	2

Labels	Value
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	15
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	17
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/dovecot-logs" source="/var/log/maillog" stage="s01-parse" type="file"	8
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	1176
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	49
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	14
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	14
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	14
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dovecot-logs" source="/var/log/maillog" stage="s01-parse" type="file"	2
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	58
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	49
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	7
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	7
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	7

Labels	Value
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	36
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s00-raw" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	40
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/nginx/access.log" stage="s00-raw" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/dovecot-logs" source="/var/log/maillog" stage="s01-parse" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	43
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	9
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	710
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	738
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	21
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	998
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	3318
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dovecot-logs" source="/var/log/maillog" stage="s01-parse" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	43
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	9
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	710
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	738
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	21
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	998
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	3318
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/cdn-whitelist" source="" stage="s01-whitelist" type=""	3
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/rdns" source="" stage="s00-enrich" type=""	3
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" source="" stage="s01-whitelist" type=""	3

Labels	Value
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	51
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s00-raw" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	57
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/nginx/access.log" stage="s00-raw" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/dovecot-logs" source="/var/log/maillog" stage="s01-parse" type="file"	27
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	1219
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	58
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	710
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	752
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	21
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	1012
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	3332
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/dovecot-logs" source="/var/log/maillog" stage="s01-parse" type="file"	21
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	101
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	58
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	710
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	745
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/maillog" stage="s00-raw" type="file"	21
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	1005
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	3325
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/cdn-whitelist" source="" stage="s01-whitelist" type=""	3
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/rdns" source="" stage="s00-enrich" type=""	3
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" source="" stage="s01-whitelist" type=""	3

Labels	Value
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	34
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	19
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	38
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/auth.log" stage="s02-enrich" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/maillog" stage="s02-enrich" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	104
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/maillog" stage="s02-enrich" type="file"	38
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/cdn-whitelist" reason="CDN provider" source="" stage="s01-whitelist" type=""	3
acquis_type="unknown" instance="" instance_name="sa1" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" reason="good bots (search engine crawlers)" source="" stage="s01-whitelist" type=""	3

Labels	Value
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" source="/var/log/auth.log" type="file"	658
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" source="/var/log/kern.log" type="file"	745
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" source="/var/log/maillog" type="file"	2
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" source="/var/log/messages" type="file"	1005
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" source="/var/log/syslog" type="file"	3325

Labels	Value
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	17
acquis_type="apache2" instance="" instance_name="sa1" job="crowdsec" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" type="file"	1
acquis_type="nginx" instance="" instance_name="sa1" job="crowdsec" source="/var/log/nginx/access.log" type="file"	19
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" source="/var/log/auth.log" type="file"	52
acquis_type="syslog" instance="" instance_name="sa1" job="crowdsec" source="/var/log/maillog" type="file"	19

Labels	Value
instance="" instance_name="sa1" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	17
instance="" instance_name="sa1" job="crowdsec" source="/var/log/auth.log" type="file"	710
instance="" instance_name="sa1" job="crowdsec" source="/var/log/kern.log" type="file"	745
instance="" instance_name="sa1" job="crowdsec" source="/var/log/maillog" type="file"	21
instance="" instance_name="sa1" job="crowdsec" source="/var/log/messages" type="file"	1005
instance="" instance_name="sa1" job="crowdsec" source="/var/log/nginx/access.log" type="file"	19
instance="" instance_name="sa1" job="crowdsec" source="/var/log/syslog" type="file"	3325
instance="" instance_name="sa1" job="crowdsec" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" type="file"	1

Labels

Value

instance="" instance_name="sa1" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.0005	5
Sample values ≤ 0.001	13
Sample values ≤ 0.0015	13
Sample values ≤ 0.002	13
Sample values ≤ 0.0025	13
Sample values ≤ 0.003	13
Sample values ≤ 0.004	15
Sample values ≤ 0.005	16
Sample values ≤ 0.0075	17
Sample values ≤ 0.01	17
Sample values ≤ +Inf	17
Total sample Count	17
Sample Sum	0.025500776

instance="" instance_name="sa1" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.0005	688
Sample values ≤ 0.001	695
Sample values ≤ 0.0015	703
Sample values ≤ 0.002	705
Sample values ≤ 0.0025	706
Sample values ≤ 0.003	707
Sample values ≤ 0.004	707
Sample values ≤ 0.005	707
Sample values ≤ 0.0075	710
Sample values ≤ 0.01	710
Sample values ≤ +Inf	710
Total sample Count	710
Sample Sum	0.099492252

instance="" instance_name="sa1" job="crowdsec" source="/var/log/kern.log" type="file"

Sample values ≤ 0.0005	726
Sample values ≤ 0.001	736
Sample values ≤ 0.0015	739
Sample values ≤ 0.002	740
Sample values ≤ 0.0025	741
Sample values ≤ 0.003	741
Sample values ≤ 0.004	742
Sample values ≤ 0.005	743
Sample values ≤ 0.0075	744
Sample values ≤ 0.01	745
Sample values ≤ +Inf	745
Total sample Count	745
Sample Sum	0.09012835399999997

instance="" instance_name="sa1" job="crowdsec" source="/var/log/maillog" type="file"

Sample values ≤ 0.0005	17
Sample values ≤ 0.001	19
Sample values ≤ 0.0015	21
Sample values ≤ 0.002	21
Sample values ≤ 0.0025	21
Sample values ≤ 0.003	21
Sample values ≤ 0.004	21
Sample values ≤ 0.005	21
Sample values ≤ 0.0075	21
Sample values ≤ 0.01	21
Sample values ≤ +Inf	21
Total sample Count	21
Sample Sum	0.009592048000000002

instance="" instance_name="sa1" job="crowdsec" source="/var/log/messages" type="file"

Sample values ≤ 0.0005	980
Sample values ≤ 0.001	993
Sample values ≤ 0.0015	996
Sample values ≤ 0.002	998
Sample values ≤ 0.0025	1002
Sample values ≤ 0.003	1002
Sample values ≤ 0.004	1003
Sample values ≤ 0.005	1004
Sample values ≤ 0.0075	1004
Sample values ≤ 0.01	1004
Sample values ≤ +Inf	1005
Total sample Count	1005
Sample Sum	0.8111836389999997

instance="" instance_name="sa1" job="crowdsec" source="/var/log/nginx/access.log" type="file"

Sample values ≤ 0.0005	7
Sample values ≤ 0.001	15
Sample values ≤ 0.0015	15
Sample values ≤ 0.002	17
Sample values ≤ 0.0025	17
Sample values ≤ 0.003	17
Sample values ≤ 0.004	18
Sample values ≤ 0.005	18
Sample values ≤ 0.0075	18
Sample values ≤ 0.01	18
Sample values ≤ +Inf	19
Total sample Count	19
Sample Sum	0.027109462000000008

instance="" instance_name="sa1" job="crowdsec" source="/var/log/syslog" type="file"

Sample values ≤ 0.0005	3301
Sample values ≤ 0.001	3312
Sample values ≤ 0.0015	3316
Sample values ≤ 0.002	3319
Sample values ≤ 0.0025	3319
Sample values ≤ 0.003	3320
Sample values ≤ 0.004	3323
Sample values ≤ 0.005	3323
Sample values ≤ 0.0075	3323
Sample values ≤ 0.01	3323
Sample values ≤ +Inf	3325
Total sample Count	3325
Sample Sum	10.446956006000043

instance="" instance_name="sa1" job="crowdsec" source="/var/www/vhosts/system/cast.encantamusica.info/logs/proxy_access_log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	1
Sample values ≤ 0.0015	1
Sample values ≤ 0.002	1
Sample values ≤ 0.0025	1
Sample values ≤ 0.003	1
Sample values ≤ 0.004	1
Sample values ≤ 0.005	1
Sample values ≤ 0.0075	1
Sample values ≤ 0.01	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.000782894

Labels	Value
instance="" instance_name="sa1" job="crowdsec" name="bad_user_agents.regex.txt"	0
instance="" instance_name="sa1" job="crowdsec" name="thinkphp_cve_2018-20062.txt"	0

Labels	Value
instance="" instance_name="sa1" job="crowdsec"	0

Labels	Value
instance="" instance_name="sa1" job="crowdsec"	1777482401.9506068

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	161

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	1777477054

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	1453

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	1453

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	1777477055.3743496

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa1" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa1" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-apache-badbot" job="fail2ban"	172800
instance="" instance_name="sa1" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-one-week-ban" job="fail2ban"	604800
instance="" instance_name="sa1" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-permanent-ban" job="fail2ban"	-1
instance="" instance_name="sa1" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="sa1" jail="recidive" job="fail2ban"	604800
instance="" instance_name="sa1" jail="ssh" job="fail2ban"	600

Labels	Value
instance="" instance_name="sa1" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-apache-badbot" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-one-week-ban" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-permanent-ban" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="sa1" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="sa1" jail="recidive" job="fail2ban"	86400
instance="" instance_name="sa1" jail="ssh" job="fail2ban"	600

Labels	Value
instance="" instance_name="sa1" jail="plesk-apache" job="fail2ban"	6
instance="" instance_name="sa1" jail="plesk-apache-badbot" job="fail2ban"	1
instance="" instance_name="sa1" jail="plesk-dovecot" job="fail2ban"	5
instance="" instance_name="sa1" jail="plesk-modsecurity" job="fail2ban"	5
instance="" instance_name="sa1" jail="plesk-one-week-ban" job="fail2ban"	1
instance="" instance_name="sa1" jail="plesk-panel" job="fail2ban"	5
instance="" instance_name="sa1" jail="plesk-permanent-ban" job="fail2ban"	1
instance="" instance_name="sa1" jail="plesk-postfix" job="fail2ban"	5
instance="" instance_name="sa1" jail="plesk-proftpd" job="fail2ban"	5
instance="" instance_name="sa1" jail="plesk-roundcube" job="fail2ban"	5
instance="" instance_name="sa1" jail="plesk-wordpress" job="fail2ban"	5
instance="" instance_name="sa1" jail="recidive" job="fail2ban"	5
instance="" instance_name="sa1" jail="ssh" job="fail2ban"	5

Labels	Value
instance="" instance_name="sa1" job="fail2ban" type="socket_conn"	0
instance="" instance_name="sa1" job="fail2ban" type="socket_req"	0

Labels	Value
instance="" instance_name="sa1" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa1" jail="recidive" job="fail2ban"	39
instance="" instance_name="sa1" jail="ssh" job="fail2ban"	0

Labels	Value
instance="" instance_name="sa1" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa1" jail="recidive" job="fail2ban"	39
instance="" instance_name="sa1" jail="ssh" job="fail2ban"	2

Labels	Value
instance="" instance_name="sa1" job="fail2ban"	13

Labels	Value
instance="" instance_name="sa1" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa1" jail="recidive" job="fail2ban"	2
instance="" instance_name="sa1" jail="ssh" job="fail2ban"	2

Labels	Value
instance="" instance_name="sa1" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa1" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa1" jail="recidive" job="fail2ban"	2
instance="" instance_name="sa1" jail="ssh" job="fail2ban"	21

Labels	Value
instance="" instance_name="sa1" job="fail2ban"	1

Labels	Value
exporter="0.10.3" fail2ban="1.1.0" instance="" instance_name="sa1" job="fail2ban"	1

Labels	Value
instance="" instance_name="sa1" job="fail2ban"	0

Labels	Value
instance="" instance_name="sa1" job="fail2ban"	1777482401.7689915

Labels	Value
action="ban" instance="" instance_name="sa2" job="crowdsec" origin="CAPI" reason="http:crawl"	14
action="ban" instance="" instance_name="sa2" job="crowdsec" origin="CAPI" reason="http:exploit"	115
action="ban" instance="" instance_name="sa2" job="crowdsec" origin="CAPI" reason="http:scan"	14997
action="ban" instance="" instance_name="sa2" job="crowdsec" origin="CAPI" reason="ssh:bruteforce"	1730
action="ban" instance="" instance_name="sa2" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-bad-user-agent"	2

Labels	Value
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/CVE-2017-9841"	1
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/http-bad-user-agent"	13
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/http-crawl-non_statics"	2
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/http-cve-2021-41773"	3
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/http-cve-2021-42013"	2
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/http-open-proxy"	1
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/http-probing"	6
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/http-sensitive-files"	1
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/ssh-bf"	7
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/ssh-bf_user-enum"	1
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/ssh-slow-bf"	7
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/ssh-time-based-bf_user-enum"	3
instance="" instance_name="sa2" job="crowdsec" reason="crowdsecurity/thinkphp-cve-2018-20062"	1

Labels	Value
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	6
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	6

Labels	Value
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-bad-user-agent"	1
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	10
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-probing"	82
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	6
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	6

Labels

Value

instance="" instance_name="sa2" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.001	2
Sample values ≤ 0.002	3
Sample values ≤ 0.005	6
Sample values ≤ 0.01	7
Sample values ≤ 0.015	7
Sample values ≤ 0.02	7
Sample values ≤ 0.03	7
Sample values ≤ 0.04	7
Sample values ≤ 0.05	7
Sample values ≤ +Inf	7
Total sample Count	7
Sample Sum	0.019566358

instance="" instance_name="sa2" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.001	6
Sample values ≤ 0.002	6
Sample values ≤ 0.005	6
Sample values ≤ 0.01	6
Sample values ≤ 0.015	6
Sample values ≤ 0.02	6
Sample values ≤ 0.03	6
Sample values ≤ 0.04	6
Sample values ≤ 0.05	6
Sample values ≤ +Inf	6
Total sample Count	6
Sample Sum	0.0017025620000000001

instance="" instance_name="sa2" job="crowdsec" source="/var/log/nginx/access.log" type="file"

Sample values ≤ 0.001	83
Sample values ≤ 0.002	86
Sample values ≤ 0.005	86
Sample values ≤ 0.01	86
Sample values ≤ 0.015	86
Sample values ≤ 0.02	86
Sample values ≤ 0.03	86
Sample values ≤ 0.04	86
Sample values ≤ 0.05	86
Sample values ≤ +Inf	86
Total sample Count	86
Sample Sum	0.05908826399999999

instance="" instance_name="sa2" job="crowdsec" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" type="file"

Sample values ≤ 0.001	1
Sample values ≤ 0.002	1
Sample values ≤ 0.005	2
Sample values ≤ 0.01	2
Sample values ≤ 0.015	2
Sample values ≤ 0.02	2
Sample values ≤ 0.03	2
Sample values ≤ 0.04	2
Sample values ≤ 0.05	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.004052637

Labels	Value
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-bad-user-agent" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" type="file"	1
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/apache2/other_vhosts_access.log" type="file"	5
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/nginx/access.log" type="file"	5
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" type="file"	2
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/apache2/other_vhosts_access.log" type="file"	4
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/nginx/access.log" type="file"	83

Labels	Value
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-bad-user-agent"	1
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	10
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-probing"	76

Labels	Value
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-bad-user-agent"	0
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	0
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-probing"	6
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	0
instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	0

Labels	Value
acquis_type="apache2" datasource_type="file" instance="" instance_name="sa2" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log"	7
acquis_type="apache2" datasource_type="file" instance="" instance_name="sa2" job="crowdsec" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log"	2
acquis_type="nginx" datasource_type="file" instance="" instance_name="sa2" job="crowdsec" source="/var/log/nginx/access.log"	86
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa2" job="crowdsec" source="/var/log/auth.log"	341
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa2" job="crowdsec" source="/var/log/kern.log"	31
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa2" job="crowdsec" source="/var/log/messages"	162
acquis_type="syslog" datasource_type="file" instance="" instance_name="sa2" job="crowdsec" source="/var/log/syslog"	1330

Labels	Value
instance="" instance_name="sa2" job="crowdsec" version="v1.7.7-debian-pragmatic-amd64-027974f2"	0

Labels	Value
bouncer="cs-firewall-bouncer-1777475920" instance="" instance_name="sa2" job="crowdsec" method="GET" route="/v1/decisions/stream"	287

Labels	Value
instance="" instance_name="sa2" job="crowdsec" machine="92956b9d4b124758bbff0ada624f1f4bzh9FL7kLudkse3UX" method="GET" route="/v1/heartbeat"	47

Labels

Value

endpoint="/v1/decisions/stream" instance="" instance_name="sa2" job="crowdsec" method="GET"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	85
Sample values ≤ 0.025	286
Sample values ≤ 0.05	286
Sample values ≤ 0.075	286
Sample values ≤ 0.1	286
Sample values ≤ 0.2	287
Sample values ≤ 0.3	287
Sample values ≤ 0.4	287
Sample values ≤ 0.5	287
Sample values ≤ 0.75	287
Sample values ≤ 1	287
Sample values ≤ +Inf	287
Total sample Count	287
Sample Sum	3.154828625

endpoint="/v1/heartbeat" instance="" instance_name="sa2" job="crowdsec" method="GET"

Sample values ≤ 0.005	47
Sample values ≤ 0.01	47
Sample values ≤ 0.025	47
Sample values ≤ 0.05	47
Sample values ≤ 0.075	47
Sample values ≤ 0.1	47
Sample values ≤ 0.2	47
Sample values ≤ 0.3	47
Sample values ≤ 0.4	47
Sample values ≤ 0.5	47
Sample values ≤ 0.75	47
Sample values ≤ 1	47
Sample values ≤ +Inf	47
Total sample Count	47
Sample Sum	0.028258142000000003

endpoint="/v1/usage-metrics" instance="" instance_name="sa2" job="crowdsec" method="POST"

Sample values ≤ 0.005	5
Sample values ≤ 0.01	5
Sample values ≤ 0.025	5
Sample values ≤ 0.05	5
Sample values ≤ 0.075	5
Sample values ≤ 0.1	5
Sample values ≤ 0.2	5
Sample values ≤ 0.3	5
Sample values ≤ 0.4	5
Sample values ≤ 0.5	5
Sample values ≤ 0.75	5
Sample values ≤ 1	5
Sample values ≤ +Inf	5
Total sample Count	5
Sample Sum	0.007878996

endpoint="/v1/watchers/login" instance="" instance_name="sa2" job="crowdsec" method="POST"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	0
Sample values ≤ 0.025	0
Sample values ≤ 0.05	0
Sample values ≤ 0.075	1
Sample values ≤ 0.1	1
Sample values ≤ 0.2	1
Sample values ≤ 0.3	1
Sample values ≤ 0.4	1
Sample values ≤ 0.5	1
Sample values ≤ 0.75	1
Sample values ≤ 1	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.055198826

Labels	Value
instance="" instance_name="sa2" job="crowdsec" method="GET" route="/v1/decisions/stream"	287
instance="" instance_name="sa2" job="crowdsec" method="GET" route="/v1/heartbeat"	47
instance="" instance_name="sa2" job="crowdsec" method="POST" route="/v1/usage-metrics"	5
instance="" instance_name="sa2" job="crowdsec" method="POST" route="/v1/watchers/login"	1

Labels	Value
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	164
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	156
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	78
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	480
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	24
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	30
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	24

Labels	Value
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s01-parse" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	14
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	4
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s00-raw" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	94
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	8
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/nginx/access.log" stage="s00-raw" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	341
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	31
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1330
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	341
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	31
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1330
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	6

Labels	Value
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s01-parse" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	21
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	6
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s01-parse" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-logs" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s00-raw" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	258
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	242
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/nginx/access.log" stage="s00-raw" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	480
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	30
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	341
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	31
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1330
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	30
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	30
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	341
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	31
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1330
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	6

Labels	Value
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	14
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" stage="s02-enrich" type="file"	4
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	86
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	172
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/auth.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	12

Labels	Value
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" source="/var/log/auth.log" type="file"	335
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" source="/var/log/kern.log" type="file"	31
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" source="/var/log/messages" type="file"	162
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" source="/var/log/syslog" type="file"	1330

Labels	Value
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	7
acquis_type="apache2" instance="" instance_name="sa2" job="crowdsec" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" type="file"	2
acquis_type="nginx" instance="" instance_name="sa2" job="crowdsec" source="/var/log/nginx/access.log" type="file"	86
acquis_type="syslog" instance="" instance_name="sa2" job="crowdsec" source="/var/log/auth.log" type="file"	6

Labels	Value
instance="" instance_name="sa2" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	7
instance="" instance_name="sa2" job="crowdsec" source="/var/log/auth.log" type="file"	341
instance="" instance_name="sa2" job="crowdsec" source="/var/log/kern.log" type="file"	31
instance="" instance_name="sa2" job="crowdsec" source="/var/log/messages" type="file"	162
instance="" instance_name="sa2" job="crowdsec" source="/var/log/nginx/access.log" type="file"	86
instance="" instance_name="sa2" job="crowdsec" source="/var/log/syslog" type="file"	1330
instance="" instance_name="sa2" job="crowdsec" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" type="file"	2

Labels

Value

instance="" instance_name="sa2" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.0005	1
Sample values ≤ 0.001	4
Sample values ≤ 0.0015	5
Sample values ≤ 0.002	6
Sample values ≤ 0.0025	7
Sample values ≤ 0.003	7
Sample values ≤ 0.004	7
Sample values ≤ 0.005	7
Sample values ≤ 0.0075	7
Sample values ≤ 0.01	7
Sample values ≤ +Inf	7
Total sample Count	7
Sample Sum	0.007763625999999999

instance="" instance_name="sa2" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.0005	339
Sample values ≤ 0.001	340
Sample values ≤ 0.0015	340
Sample values ≤ 0.002	340
Sample values ≤ 0.0025	340
Sample values ≤ 0.003	340
Sample values ≤ 0.004	340
Sample values ≤ 0.005	340
Sample values ≤ 0.0075	341
Sample values ≤ 0.01	341
Sample values ≤ +Inf	341
Total sample Count	341
Sample Sum	0.035434255000000005

instance="" instance_name="sa2" job="crowdsec" source="/var/log/kern.log" type="file"

Sample values ≤ 0.0005	31
Sample values ≤ 0.001	31
Sample values ≤ 0.0015	31
Sample values ≤ 0.002	31
Sample values ≤ 0.0025	31
Sample values ≤ 0.003	31
Sample values ≤ 0.004	31
Sample values ≤ 0.005	31
Sample values ≤ 0.0075	31
Sample values ≤ 0.01	31
Sample values ≤ +Inf	31
Total sample Count	31
Sample Sum	0.0020809160000000004

instance="" instance_name="sa2" job="crowdsec" source="/var/log/messages" type="file"

Sample values ≤ 0.0005	162
Sample values ≤ 0.001	162
Sample values ≤ 0.0015	162
Sample values ≤ 0.002	162
Sample values ≤ 0.0025	162
Sample values ≤ 0.003	162
Sample values ≤ 0.004	162
Sample values ≤ 0.005	162
Sample values ≤ 0.0075	162
Sample values ≤ 0.01	162
Sample values ≤ +Inf	162
Total sample Count	162
Sample Sum	0.013505983999999997

instance="" instance_name="sa2" job="crowdsec" source="/var/log/nginx/access.log" type="file"

Sample values ≤ 0.0005	17
Sample values ≤ 0.001	37
Sample values ≤ 0.0015	54
Sample values ≤ 0.002	62
Sample values ≤ 0.0025	67
Sample values ≤ 0.003	75
Sample values ≤ 0.004	79
Sample values ≤ 0.005	83
Sample values ≤ 0.0075	85
Sample values ≤ 0.01	86
Sample values ≤ +Inf	86
Total sample Count	86
Sample Sum	0.13968345299999996

instance="" instance_name="sa2" job="crowdsec" source="/var/log/syslog" type="file"

Sample values ≤ 0.0005	1330
Sample values ≤ 0.001	1330
Sample values ≤ 0.0015	1330
Sample values ≤ 0.002	1330
Sample values ≤ 0.0025	1330
Sample values ≤ 0.003	1330
Sample values ≤ 0.004	1330
Sample values ≤ 0.005	1330
Sample values ≤ 0.0075	1330
Sample values ≤ 0.01	1330
Sample values ≤ +Inf	1330
Total sample Count	1330
Sample Sum	0.10707796500000014

instance="" instance_name="sa2" job="crowdsec" source="/var/www/vhosts/system/cast2.encantamusica.info/logs/proxy_access_log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	0
Sample values ≤ 0.0015	0
Sample values ≤ 0.002	0
Sample values ≤ 0.0025	1
Sample values ≤ 0.003	1
Sample values ≤ 0.004	1
Sample values ≤ 0.005	1
Sample values ≤ 0.0075	1
Sample values ≤ 0.01	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.009612893

Labels	Value
instance="" instance_name="sa2" job="crowdsec" name="bad_user_agents.regex.txt"	0
instance="" instance_name="sa2" job="crowdsec" name="thinkphp_cve_2018-20062.txt"	0

Labels	Value
instance="" instance_name="sa2" job="crowdsec"	0

Labels	Value
instance="" instance_name="sa2" job="crowdsec"	1777479283.2027674

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	162

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	1777477059

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	1479

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	1479

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	1777477059.7814345

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa2" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sa2" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-apache-badbot" job="fail2ban"	172800
instance="" instance_name="sa2" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-one-week-ban" job="fail2ban"	604800
instance="" instance_name="sa2" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-permanent-ban" job="fail2ban"	-1
instance="" instance_name="sa2" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="sa2" jail="recidive" job="fail2ban"	604800
instance="" instance_name="sa2" jail="ssh" job="fail2ban"	600

Labels	Value
instance="" instance_name="sa2" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-apache-badbot" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-one-week-ban" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-permanent-ban" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="sa2" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="sa2" jail="recidive" job="fail2ban"	86400
instance="" instance_name="sa2" jail="ssh" job="fail2ban"	600

Labels	Value
instance="" instance_name="sa2" jail="plesk-apache" job="fail2ban"	6
instance="" instance_name="sa2" jail="plesk-apache-badbot" job="fail2ban"	1
instance="" instance_name="sa2" jail="plesk-dovecot" job="fail2ban"	5
instance="" instance_name="sa2" jail="plesk-modsecurity" job="fail2ban"	5
instance="" instance_name="sa2" jail="plesk-one-week-ban" job="fail2ban"	1
instance="" instance_name="sa2" jail="plesk-panel" job="fail2ban"	5
instance="" instance_name="sa2" jail="plesk-permanent-ban" job="fail2ban"	1
instance="" instance_name="sa2" jail="plesk-postfix" job="fail2ban"	5
instance="" instance_name="sa2" jail="plesk-proftpd" job="fail2ban"	5
instance="" instance_name="sa2" jail="plesk-roundcube" job="fail2ban"	5
instance="" instance_name="sa2" jail="plesk-wordpress" job="fail2ban"	5
instance="" instance_name="sa2" jail="recidive" job="fail2ban"	5
instance="" instance_name="sa2" jail="ssh" job="fail2ban"	5

Labels	Value
instance="" instance_name="sa2" job="fail2ban" type="socket_conn"	0
instance="" instance_name="sa2" job="fail2ban" type="socket_req"	0

Labels	Value
instance="" instance_name="sa2" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa2" jail="recidive" job="fail2ban"	0
instance="" instance_name="sa2" jail="ssh" job="fail2ban"	0

Labels	Value
instance="" instance_name="sa2" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa2" jail="recidive" job="fail2ban"	0
instance="" instance_name="sa2" jail="ssh" job="fail2ban"	0

Labels	Value
instance="" instance_name="sa2" job="fail2ban"	13

Labels	Value
instance="" instance_name="sa2" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa2" jail="recidive" job="fail2ban"	0
instance="" instance_name="sa2" jail="ssh" job="fail2ban"	0

Labels	Value
instance="" instance_name="sa2" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sa2" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sa2" jail="recidive" job="fail2ban"	0
instance="" instance_name="sa2" jail="ssh" job="fail2ban"	0

Labels	Value
instance="" instance_name="sa2" job="fail2ban"	1

Labels	Value
exporter="0.10.3" fail2ban="1.1.0" instance="" instance_name="sa2" job="fail2ban"	1

Labels	Value
instance="" instance_name="sa2" job="fail2ban"	0

Labels	Value
instance="" instance_name="sa2" job="fail2ban"	1777479283.1772716

Labels	Value
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="CAPI" reason="http:crawl"	13
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="CAPI" reason="http:exploit"	92
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="CAPI" reason="http:scan"	12325
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="CAPI" reason="ssh:bruteforce"	3780
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-admin-interface-probing"	1
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-bad-user-agent"	2
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-crawl-non_statics"	2
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-open-proxy"	2
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-probing"	2
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="crowdsec" reason="crowdsecurity/http-wordpress-scan"	1
action="ban" instance="" instance_name="sfn" job="crowdsec" origin="crowdsec" reason="crowdsecurity/ssh-bf"	1

Labels	Value
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/CVE-2017-9841"	2
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-admin-interface-probing"	1
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-bad-user-agent"	19
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-crawl-non_statics"	2
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-cve-2021-41773"	3
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-cve-2021-42013"	2
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-open-proxy"	2
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-probing"	8
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/http-wordpress-scan"	1
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/ssh-bf"	10
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/ssh-slow-bf"	5
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/ssh-time-based-bf"	2
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/ssh-time-based-bf_user-enum"	29
instance="" instance_name="sfn" job="crowdsec" reason="crowdsecurity/thinkphp-cve-2018-20062"	2

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	13
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	13

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	2
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-probing"	4
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf"	17
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	16
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	8
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	8
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	18
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	19

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf"	1
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	1

Labels

Value

instance="" instance_name="sfn" job="crowdsec" source="" type=""

Sample values ≤ 0.001	2
Sample values ≤ 0.002	2
Sample values ≤ 0.005	2
Sample values ≤ 0.01	2
Sample values ≤ 0.015	2
Sample values ≤ 0.02	2
Sample values ≤ 0.03	2
Sample values ≤ 0.04	2
Sample values ≤ 0.05	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.000201489

instance="" instance_name="sfn" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.001	0
Sample values ≤ 0.002	0
Sample values ≤ 0.005	1
Sample values ≤ 0.01	1
Sample values ≤ 0.015	1
Sample values ≤ 0.02	1
Sample values ≤ 0.03	1
Sample values ≤ 0.04	1
Sample values ≤ 0.05	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.004071685

instance="" instance_name="sfn" job="crowdsec" source="/var/log/audit/audit.log" type="file"

Sample values ≤ 0.001	4728
Sample values ≤ 0.002	4733
Sample values ≤ 0.005	4733
Sample values ≤ 0.01	4733
Sample values ≤ 0.015	4733
Sample values ≤ 0.02	4733
Sample values ≤ 0.03	4733
Sample values ≤ 0.04	4733
Sample values ≤ 0.05	4733
Sample values ≤ +Inf	4733
Total sample Count	4733
Sample Sum	0.4362054130000004

instance="" instance_name="sfn" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.001	79
Sample values ≤ 0.002	80
Sample values ≤ 0.005	80
Sample values ≤ 0.01	80
Sample values ≤ 0.015	80
Sample values ≤ 0.02	80
Sample values ≤ 0.03	80
Sample values ≤ 0.04	80
Sample values ≤ 0.05	80
Sample values ≤ +Inf	80
Total sample Count	80
Sample Sum	0.016552865000000003

instance="" instance_name="sfn" job="crowdsec" source="/var/log/nginx/access.log" type="file"

Sample values ≤ 0.001	3
Sample values ≤ 0.002	3
Sample values ≤ 0.005	3
Sample values ≤ 0.01	3
Sample values ≤ 0.015	3
Sample values ≤ 0.02	3
Sample values ≤ 0.03	3
Sample values ≤ 0.04	3
Sample values ≤ 0.05	3
Sample values ≤ +Inf	3
Total sample Count	3
Sample Sum	0.002192244

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/apache2/other_vhosts_access.log" type="file"	1
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-crawl-non_statics" source="/var/log/nginx/access.log" type="file"	1
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/apache2/other_vhosts_access.log" type="file"	1
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-probing" source="/var/log/nginx/access.log" type="file"	3
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf" source="/var/log/auth.log" type="file"	67
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum" source="/var/log/auth.log" type="file"	32
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf" source="/var/log/auth.log" type="file"	67
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum" source="/var/log/auth.log" type="file"	23
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf" source="/var/log/auth.log" type="file"	67
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum" source="/var/log/auth.log" type="file"	21

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	2
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-probing"	4
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf"	16
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	16
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	5
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	5

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-crawl-non_statics"	0
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-probing"	0
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf"	0
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-bf_user-enum"	0
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf"	3
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-slow-bf_user-enum"	3
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf"	5
instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/ssh-time-based-bf_user-enum"	5

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="auditd_pid_progname" type="LRU"	0

Labels	Value
acquis_type="apache2" datasource_type="file" instance="" instance_name="sfn" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log"	1
acquis_type="auditd" datasource_type="file" instance="" instance_name="sfn" job="crowdsec" source="/var/log/audit/audit.log"	6511
acquis_type="nginx" datasource_type="file" instance="" instance_name="sfn" job="crowdsec" source="/var/log/nginx/access.log"	3
acquis_type="syslog" datasource_type="file" instance="" instance_name="sfn" job="crowdsec" source="/var/log/auth.log"	715
acquis_type="syslog" datasource_type="file" instance="" instance_name="sfn" job="crowdsec" source="/var/log/kern.log"	162
acquis_type="syslog" datasource_type="file" instance="" instance_name="sfn" job="crowdsec" source="/var/log/messages"	162
acquis_type="syslog" datasource_type="file" instance="" instance_name="sfn" job="crowdsec" source="/var/log/syslog"	1442

Labels	Value
instance="" instance_name="sfn" job="crowdsec" version="v1.7.7-debian-pragmatic-amd64-027974f2"	0

Labels	Value
bouncer="cs-firewall-bouncer-1777475934" instance="" instance_name="sfn" job="crowdsec" method="GET" route="/v1/decisions/stream"	329

Labels	Value
instance="" instance_name="sfn" job="crowdsec" machine="605139586bc74648ac5295f6138b0ae1MMN8op2SunHaIKFU" method="GET" route="/v1/heartbeat"	54
instance="" instance_name="sfn" job="crowdsec" machine="605139586bc74648ac5295f6138b0ae1MMN8op2SunHaIKFU" method="POST" route="/v1/alerts"	2

Labels

Value

endpoint="/v1/alerts" instance="" instance_name="sfn" job="crowdsec" method="POST"

Sample values ≤ 0.005	2
Sample values ≤ 0.01	2
Sample values ≤ 0.025	2
Sample values ≤ 0.05	2
Sample values ≤ 0.075	2
Sample values ≤ 0.1	2
Sample values ≤ 0.2	2
Sample values ≤ 0.3	2
Sample values ≤ 0.4	2
Sample values ≤ 0.5	2
Sample values ≤ 0.75	2
Sample values ≤ 1	2
Sample values ≤ +Inf	2
Total sample Count	2
Sample Sum	0.008190718999999999

endpoint="/v1/decisions/stream" instance="" instance_name="sfn" job="crowdsec" method="GET"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	118
Sample values ≤ 0.025	328
Sample values ≤ 0.05	328
Sample values ≤ 0.075	328
Sample values ≤ 0.1	328
Sample values ≤ 0.2	328
Sample values ≤ 0.3	329
Sample values ≤ 0.4	329
Sample values ≤ 0.5	329
Sample values ≤ 0.75	329
Sample values ≤ 1	329
Sample values ≤ +Inf	329
Total sample Count	329
Sample Sum	3.526463527000003

endpoint="/v1/heartbeat" instance="" instance_name="sfn" job="crowdsec" method="GET"

Sample values ≤ 0.005	54
Sample values ≤ 0.01	54
Sample values ≤ 0.025	54
Sample values ≤ 0.05	54
Sample values ≤ 0.075	54
Sample values ≤ 0.1	54
Sample values ≤ 0.2	54
Sample values ≤ 0.3	54
Sample values ≤ 0.4	54
Sample values ≤ 0.5	54
Sample values ≤ 0.75	54
Sample values ≤ 1	54
Sample values ≤ +Inf	54
Total sample Count	54
Sample Sum	0.037119275

endpoint="/v1/usage-metrics" instance="" instance_name="sfn" job="crowdsec" method="POST"

Sample values ≤ 0.005	5
Sample values ≤ 0.01	5
Sample values ≤ 0.025	5
Sample values ≤ 0.05	5
Sample values ≤ 0.075	5
Sample values ≤ 0.1	5
Sample values ≤ 0.2	5
Sample values ≤ 0.3	5
Sample values ≤ 0.4	5
Sample values ≤ 0.5	5
Sample values ≤ 0.75	5
Sample values ≤ 1	5
Sample values ≤ +Inf	5
Total sample Count	5
Sample Sum	0.008620023

endpoint="/v1/watchers/login" instance="" instance_name="sfn" job="crowdsec" method="POST"

Sample values ≤ 0.005	0
Sample values ≤ 0.01	0
Sample values ≤ 0.025	0
Sample values ≤ 0.05	0
Sample values ≤ 0.075	1
Sample values ≤ 0.1	1
Sample values ≤ 0.2	1
Sample values ≤ 0.3	1
Sample values ≤ 0.4	1
Sample values ≤ 0.5	1
Sample values ≤ 0.75	1
Sample values ≤ 1	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.057257348

Labels	Value
instance="" instance_name="sfn" job="crowdsec" method="GET" route="/v1/decisions/stream"	329
instance="" instance_name="sfn" job="crowdsec" method="GET" route="/v1/heartbeat"	54
instance="" instance_name="sfn" job="crowdsec" method="POST" route="/v1/alerts"	2
instance="" instance_name="sfn" job="crowdsec" method="POST" route="/v1/usage-metrics"	5
instance="" instance_name="sfn" job="crowdsec" method="POST" route="/v1/watchers/login"	1

Labels	Value
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="child-child-crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	1778
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	1778
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	1778
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	2
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	1942
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	83
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	96
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	83

Labels	Value
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	2
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="child-child-crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/audit/audit.log" stage="s00-raw" type="file"	6511
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	6
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/nginx/access.log" stage="s00-raw" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	67
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	13
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	715
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1442
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	67
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	13
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	715
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1442
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/auditd-whitelisted-process" source="" stage="s01-whitelist" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/cdn-whitelist" source="" stage="s01-whitelist" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/rdns" source="" stage="s00-enrich" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" source="" stage="s01-whitelist" type=""	1

Labels	Value
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	3
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/apache2-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s01-parse" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/apache2/other_vhosts_access.log" stage="s00-raw" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="child-child-crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	6511
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	6511
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/auditd-logs" source="/var/log/audit/audit.log" stage="s01-parse" type="file"	6511
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/audit/audit.log" stage="s00-raw" type="file"	6511
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	9
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	5
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/http-logs" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/nginx-logs" source="/var/log/nginx/access.log" stage="s01-parse" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/non-syslog" source="/var/log/nginx/access.log" stage="s00-raw" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	2009
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	96
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	715
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="child-crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1442
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/dateparse-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/geoip-enrich" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/sshd-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	163
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/sshd-success-logs" source="/var/log/auth.log" stage="s01-parse" type="file"	96
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/auth.log" stage="s00-raw" type="file"	715
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/kern.log" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/messages" stage="s00-raw" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/syslog-logs" source="/var/log/syslog" stage="s00-raw" type="file"	1442
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/auditd-whitelisted-process" source="" stage="s01-whitelist" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/cdn-whitelist" source="" stage="s01-whitelist" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/rdns" source="" stage="s00-enrich" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" source="" stage="s01-whitelist" type=""	1

Labels	Value
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	1
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/apache2/other_vhosts_access.log" stage="s02-enrich" type="file"	2
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	4733
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/audit/audit.log" stage="s02-enrich" type="file"	9466
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	3
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/nginx/access.log" stage="s02-enrich" type="file"	6
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/public-dns-allowlist" reason="public DNS server" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/whitelists" reason="private ipv4/ipv6 ip/ranges" source="/var/log/auth.log" stage="s02-enrich" type="file"	80
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" name="encanta/trusted-networks" reason="encanta trusted networks" source="/var/log/auth.log" stage="s02-enrich" type="file"	160
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/auditd-whitelisted-process" reason="package managers" source="" stage="s01-whitelist" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/cdn-whitelist" reason="CDN provider" source="" stage="s01-whitelist" type=""	1
acquis_type="unknown" instance="" instance_name="sfn" job="crowdsec" name="crowdsecurity/seo-bots-whitelist" reason="good bots (search engine crawlers)" source="" stage="s01-whitelist" type=""	1

Labels	Value
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" source="/var/log/audit/audit.log" type="file"	1778
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" source="/var/log/auth.log" type="file"	635
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" source="/var/log/kern.log" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" source="/var/log/messages" type="file"	162
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" source="/var/log/syslog" type="file"	1442

Labels	Value
acquis_type="apache2" instance="" instance_name="sfn" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	1
acquis_type="auditd" instance="" instance_name="sfn" job="crowdsec" source="/var/log/audit/audit.log" type="file"	4733
acquis_type="nginx" instance="" instance_name="sfn" job="crowdsec" source="/var/log/nginx/access.log" type="file"	3
acquis_type="syslog" instance="" instance_name="sfn" job="crowdsec" source="/var/log/auth.log" type="file"	80

Labels	Value
instance="" instance_name="sfn" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"	1
instance="" instance_name="sfn" job="crowdsec" source="/var/log/audit/audit.log" type="file"	6511
instance="" instance_name="sfn" job="crowdsec" source="/var/log/auth.log" type="file"	715
instance="" instance_name="sfn" job="crowdsec" source="/var/log/kern.log" type="file"	162
instance="" instance_name="sfn" job="crowdsec" source="/var/log/messages" type="file"	162
instance="" instance_name="sfn" job="crowdsec" source="/var/log/nginx/access.log" type="file"	3
instance="" instance_name="sfn" job="crowdsec" source="/var/log/syslog" type="file"	1442

Labels

Value

instance="" instance_name="sfn" job="crowdsec" source="/var/log/apache2/other_vhosts_access.log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	0
Sample values ≤ 0.0015	0
Sample values ≤ 0.002	0
Sample values ≤ 0.0025	0
Sample values ≤ 0.003	0
Sample values ≤ 0.004	0
Sample values ≤ 0.005	0
Sample values ≤ 0.0075	0
Sample values ≤ 0.01	1
Sample values ≤ +Inf	1
Total sample Count	1
Sample Sum	0.009057091

instance="" instance_name="sfn" job="crowdsec" source="/var/log/audit/audit.log" type="file"

Sample values ≤ 0.0005	6481
Sample values ≤ 0.001	6499
Sample values ≤ 0.0015	6505
Sample values ≤ 0.002	6509
Sample values ≤ 0.0025	6511
Sample values ≤ 0.003	6511
Sample values ≤ 0.004	6511
Sample values ≤ 0.005	6511
Sample values ≤ 0.0075	6511
Sample values ≤ 0.01	6511
Sample values ≤ +Inf	6511
Total sample Count	6511
Sample Sum	0.8733978689999979

instance="" instance_name="sfn" job="crowdsec" source="/var/log/auth.log" type="file"

Sample values ≤ 0.0005	694
Sample values ≤ 0.001	703
Sample values ≤ 0.0015	707
Sample values ≤ 0.002	710
Sample values ≤ 0.0025	711
Sample values ≤ 0.003	711
Sample values ≤ 0.004	713
Sample values ≤ 0.005	713
Sample values ≤ 0.0075	714
Sample values ≤ 0.01	715
Sample values ≤ +Inf	715
Total sample Count	715
Sample Sum	0.1534731099999999

instance="" instance_name="sfn" job="crowdsec" source="/var/log/kern.log" type="file"

Sample values ≤ 0.0005	161
Sample values ≤ 0.001	161
Sample values ≤ 0.0015	162
Sample values ≤ 0.002	162
Sample values ≤ 0.0025	162
Sample values ≤ 0.003	162
Sample values ≤ 0.004	162
Sample values ≤ 0.005	162
Sample values ≤ 0.0075	162
Sample values ≤ 0.01	162
Sample values ≤ +Inf	162
Total sample Count	162
Sample Sum	0.017674055000000004

instance="" instance_name="sfn" job="crowdsec" source="/var/log/messages" type="file"

Sample values ≤ 0.0005	162
Sample values ≤ 0.001	162
Sample values ≤ 0.0015	162
Sample values ≤ 0.002	162
Sample values ≤ 0.0025	162
Sample values ≤ 0.003	162
Sample values ≤ 0.004	162
Sample values ≤ 0.005	162
Sample values ≤ 0.0075	162
Sample values ≤ 0.01	162
Sample values ≤ +Inf	162
Total sample Count	162
Sample Sum	0.013586149999999995

instance="" instance_name="sfn" job="crowdsec" source="/var/log/nginx/access.log" type="file"

Sample values ≤ 0.0005	0
Sample values ≤ 0.001	0
Sample values ≤ 0.0015	0
Sample values ≤ 0.002	0
Sample values ≤ 0.0025	0
Sample values ≤ 0.003	0
Sample values ≤ 0.004	1
Sample values ≤ 0.005	2
Sample values ≤ 0.0075	3
Sample values ≤ 0.01	3
Sample values ≤ +Inf	3
Total sample Count	3
Sample Sum	0.015362249000000001

instance="" instance_name="sfn" job="crowdsec" source="/var/log/syslog" type="file"

Sample values ≤ 0.0005	1441
Sample values ≤ 0.001	1441
Sample values ≤ 0.0015	1441
Sample values ≤ 0.002	1441
Sample values ≤ 0.0025	1441
Sample values ≤ 0.003	1442
Sample values ≤ 0.004	1442
Sample values ≤ 0.005	1442
Sample values ≤ 0.0075	1442
Sample values ≤ 0.01	1442
Sample values ≤ +Inf	1442
Total sample Count	1442
Sample Sum	0.18722182600000012

Labels	Value
instance="" instance_name="sfn" job="crowdsec" name="bad_user_agents.regex.txt"	0
instance="" instance_name="sfn" job="crowdsec" name="thinkphp_cve_2018-20062.txt"	0

Labels	Value
instance="" instance_name="sfn" job="crowdsec"	0

Labels	Value
instance="" instance_name="sfn" job="crowdsec"	1777479398.3795197

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	200

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	1777477064

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	16622

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	8464

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	8158

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	1777477065.286976

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sfn" job="cve_scanner"	0

Labels	Value
instance="" instance_name="sfn" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-apache-badbot" job="fail2ban"	172800
instance="" instance_name="sfn" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-one-week-ban" job="fail2ban"	604800
instance="" instance_name="sfn" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-permanent-ban" job="fail2ban"	-1
instance="" instance_name="sfn" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="sfn" jail="recidive" job="fail2ban"	604800
instance="" instance_name="sfn" jail="ssh" job="fail2ban"	600

Labels	Value
instance="" instance_name="sfn" jail="plesk-apache" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-apache-badbot" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-dovecot" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-modsecurity" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-one-week-ban" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-panel" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-permanent-ban" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-postfix" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-proftpd" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-roundcube" job="fail2ban"	600
instance="" instance_name="sfn" jail="plesk-wordpress" job="fail2ban"	600
instance="" instance_name="sfn" jail="recidive" job="fail2ban"	86400
instance="" instance_name="sfn" jail="ssh" job="fail2ban"	600

Labels	Value
instance="" instance_name="sfn" jail="plesk-apache" job="fail2ban"	6
instance="" instance_name="sfn" jail="plesk-apache-badbot" job="fail2ban"	1
instance="" instance_name="sfn" jail="plesk-dovecot" job="fail2ban"	5
instance="" instance_name="sfn" jail="plesk-modsecurity" job="fail2ban"	10
instance="" instance_name="sfn" jail="plesk-one-week-ban" job="fail2ban"	1
instance="" instance_name="sfn" jail="plesk-panel" job="fail2ban"	5
instance="" instance_name="sfn" jail="plesk-permanent-ban" job="fail2ban"	1
instance="" instance_name="sfn" jail="plesk-postfix" job="fail2ban"	5
instance="" instance_name="sfn" jail="plesk-proftpd" job="fail2ban"	5
instance="" instance_name="sfn" jail="plesk-roundcube" job="fail2ban"	5
instance="" instance_name="sfn" jail="plesk-wordpress" job="fail2ban"	5
instance="" instance_name="sfn" jail="recidive" job="fail2ban"	5
instance="" instance_name="sfn" jail="ssh" job="fail2ban"	5

Labels	Value
instance="" instance_name="sfn" job="fail2ban" type="socket_conn"	0
instance="" instance_name="sfn" job="fail2ban" type="socket_req"	0

Labels	Value
instance="" instance_name="sfn" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sfn" jail="recidive" job="fail2ban"	38
instance="" instance_name="sfn" jail="ssh" job="fail2ban"	2

Labels	Value
instance="" instance_name="sfn" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-proftpd" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sfn" jail="recidive" job="fail2ban"	38
instance="" instance_name="sfn" jail="ssh" job="fail2ban"	6

Labels	Value
instance="" instance_name="sfn" job="fail2ban"	13

Labels	Value
instance="" instance_name="sfn" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-proftpd" job="fail2ban"	1
instance="" instance_name="sfn" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sfn" jail="recidive" job="fail2ban"	3
instance="" instance_name="sfn" jail="ssh" job="fail2ban"	1

Labels	Value
instance="" instance_name="sfn" jail="plesk-apache" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-apache-badbot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-dovecot" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-modsecurity" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-one-week-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-panel" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-permanent-ban" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-postfix" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-proftpd" job="fail2ban"	3
instance="" instance_name="sfn" jail="plesk-roundcube" job="fail2ban"	0
instance="" instance_name="sfn" jail="plesk-wordpress" job="fail2ban"	0
instance="" instance_name="sfn" jail="recidive" job="fail2ban"	5
instance="" instance_name="sfn" jail="ssh" job="fail2ban"	36

Labels	Value
instance="" instance_name="sfn" job="fail2ban"	1

Labels	Value
exporter="0.10.3" fail2ban="1.1.0" instance="" instance_name="sfn" job="fail2ban"	1

Labels	Value
instance="" instance_name="sfn" job="fail2ban"	0

Labels	Value
instance="" instance_name="sfn" job="fail2ban"	1777479465.2231941

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview"	16

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview" status="pending"	5
instance="ClientPortal-Staging" job="clientportal_overview" status="approved"	1
instance="ClientPortal-Staging" job="clientportal_overview" status="rejected"	0
instance="ClientPortal-Staging" job="clientportal_overview" status="completed"	0

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview"	78

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview"	188

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview" status="open"	59
instance="ClientPortal-Staging" job="clientportal_overview" status="pending"	68
instance="ClientPortal-Staging" job="clientportal_overview" status="resolved"	0

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview"	208

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview"	216

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview"	0

Labels	Value
instance="ClientPortal-Staging" job="clientportal_overview"	1777479141.6336772

Labels	Value
instance="ClientPortal" job="clientportal_overview"	14

Labels	Value
instance="ClientPortal" job="clientportal_overview" status="pending"	5
instance="ClientPortal" job="clientportal_overview" status="approved"	1
instance="ClientPortal" job="clientportal_overview" status="rejected"	0
instance="ClientPortal" job="clientportal_overview" status="completed"	0

Labels	Value
instance="ClientPortal" job="clientportal_overview"	74

Labels	Value
instance="ClientPortal" job="clientportal_overview"	194

Labels	Value
instance="ClientPortal" job="clientportal_overview" status="open"	83
instance="ClientPortal" job="clientportal_overview" status="pending"	73
instance="ClientPortal" job="clientportal_overview" status="resolved"	0

Labels	Value
instance="ClientPortal" job="clientportal_overview"	269

Labels	Value
instance="ClientPortal" job="clientportal_overview"	270

Labels	Value
instance="ClientPortal" job="clientportal_overview"	0

Labels	Value
instance="ClientPortal" job="clientportal_overview"	1777479077.4521825

Labels	Value
instance="" job="otel_debug" service="ClientPortal-Frontend-Staging"	1

Labels	Value
instance="" job="otel_debug"	0

Labels	Value
instance="" job="otel_debug"	1777479224.9129713

Labels	Value
instance="" job="test_diagnostic"	0

Labels	Value
instance="" job="test_diagnostic"	1777482373.2271707

Labels	Value
instance="" job="test_diagnostic"	1

Runtime Information

Build Information

Startup Flags

branch	HEAD
buildDate	20240119-13:28:37
buildUser	root@c05cb3457dcb
goVersion	go1.21.6
revision	109280c17d29059623c6f5dbf1d6babab34166cf
version	1.7.0

log.format	logfmt
log.level	info
persistence.file
persistence.interval	5m0s
push.disable-consistency-check	false
web.config.file	/opt/pushgateway/web-config.yml
web.enable-admin-api	false
web.enable-lifecycle	false
web.external-url
web.listen-address	0.0.0.0:9091
web.route-prefix
web.systemd-socket	false
web.telemetry-path	/metrics

job="crowdsec" instance_name="hosting" Delete Group

cs_active_decisions Number of active decisions. GAUGE last pushed: 2026-04-29T11:14:41-05:00

cs_alerts Number of alerts (excluding CAPI). GAUGE last pushed: 2026-04-29T11:14:41-05:00

cs_bucket_canceled_total Total buckets canceled. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_bucket_instantiation_total Total buckets were instantiated. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_bucket_pour_seconds Time spent pouring an event to buckets. HISTOGRAM last pushed: 2026-04-29T11:14:41-05:00

cs_bucket_poured_total Total events were poured in bucket. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_bucket_underflowed_total Total buckets underflowed. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_buckets Number of buckets that currently exist. GAUGE last pushed: 2026-04-29T11:14:41-05:00

cs_filesource_hits_total Total lines that were read. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_info Information about Crowdsec. GAUGE last pushed: 2026-04-29T11:14:41-05:00

cs_lapi_bouncer_requests_total Number of calls to each route per method grouped by bouncers. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_lapi_machine_requests_total Number of calls to each route per method grouped by machines. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_lapi_request_duration_seconds Response time of LAPI HISTOGRAM last pushed: 2026-04-29T11:14:41-05:00

cs_lapi_route_requests_total Number of calls to each route per method. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_node_hits_ko_total Total events unsuccessfully exited node. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_node_hits_ok_total Total events successfully exited node. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_node_hits_total Total events entered node. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_node_wl_hits_total Total events processed by whitelist node. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_parser_hits_ko_total Total events were unsuccessfully parsed. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_parser_hits_ok_total Total events were successfully parsed. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_parser_hits_total Total events entered the parser. COUNTER last pushed: 2026-04-29T11:14:41-05:00

cs_parsing_time_seconds Time spent parsing a line HISTOGRAM last pushed: 2026-04-29T11:14:41-05:00

cs_regexp_cache_size Entries per regexp cache. GAUGE last pushed: 2026-04-29T11:14:41-05:00

push_failure_time_seconds Last Unix time when changing this group in the Pushgateway failed. GAUGE last pushed: 2026-04-29T10:36:27-05:00

push_time_seconds Last Unix time when changing this group in the Pushgateway succeeded. GAUGE last pushed: 2026-04-29T11:14:41-05:00

job="cve_scanner" instance_name="hosting" Delete Group

apt_security_upgradable Packages with security updates available (actionable) GAUGE last pushed: 2026-04-29T10:37:51-05:00

apt_upgradable_packages Packages with available upgrade from configured repos (actionable) GAUGE last pushed: 2026-04-29T10:37:51-05:00

cve_affected_packages Distinct affected packages GAUGE last pushed: 2026-04-29T10:37:51-05:00

cve_remotely_exploitable CVEs marked remotely exploitable GAUGE last pushed: 2026-04-29T10:37:51-05:00

cve_scan_timestamp_seconds Unix timestamp of last scan GAUGE last pushed: 2026-04-29T10:37:51-05:00

cve_total_vulnerabilities Total open CVEs detected by debsecan (includes historical/theoretical) GAUGE last pushed: 2026-04-29T10:37:51-05:00

cve_unfixed CVEs without a known fix yet GAUGE last pushed: 2026-04-29T10:37:51-05:00

cve_with_fix_available CVEs with a fix already in repo GAUGE last pushed: 2026-04-29T10:37:51-05:00

push_failure_time_seconds Last Unix time when changing this group in the Pushgateway failed. GAUGE last pushed: 2026-04-29T10:37:51-05:00

push_time_seconds Last Unix time when changing this group in the Pushgateway succeeded. GAUGE last pushed: 2026-04-29T10:37:51-05:00

system_kernel_outdated 1 if running kernel != newest installed kernel (reboot needed) GAUGE last pushed: 2026-04-29T10:37:51-05:00

system_reboot_required 1 if /var/run/reboot-required exists GAUGE last pushed: 2026-04-29T10:37:51-05:00

job="crowdsec" instance_name="hub" Delete Group

cs_active_decisions Number of active decisions. GAUGE last pushed: 2026-04-29T12:06:34-05:00

cs_alerts Number of alerts (excluding CAPI). GAUGE last pushed: 2026-04-29T12:06:34-05:00

cs_bucket_canceled_total Total buckets canceled. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_bucket_instantiation_total Total buckets were instantiated. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_bucket_overflowed_total Total buckets overflowed. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_bucket_pour_seconds Time spent pouring an event to buckets. HISTOGRAM last pushed: 2026-04-29T12:06:34-05:00

cs_bucket_poured_total Total events were poured in bucket. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_bucket_underflowed_total Total buckets underflowed. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_buckets Number of buckets that currently exist. GAUGE last pushed: 2026-04-29T12:06:34-05:00

cs_filesource_hits_total Total lines that were read. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_info Information about Crowdsec. GAUGE last pushed: 2026-04-29T12:06:34-05:00

cs_lapi_bouncer_requests_total Number of calls to each route per method grouped by bouncers. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_lapi_machine_requests_total Number of calls to each route per method grouped by machines. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_lapi_request_duration_seconds Response time of LAPI HISTOGRAM last pushed: 2026-04-29T12:06:34-05:00

cs_lapi_route_requests_total Number of calls to each route per method. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_node_hits_ko_total Total events unsuccessfully exited node. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_node_hits_ok_total Total events successfully exited node. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_node_hits_total Total events entered node. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_node_wl_hits_ok_total Total events successfully whitelisted by node. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_node_wl_hits_total Total events processed by whitelist node. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_parser_hits_ko_total Total events were unsuccessfully parsed. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_parser_hits_ok_total Total events were successfully parsed. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_parser_hits_total Total events entered the parser. COUNTER last pushed: 2026-04-29T12:06:34-05:00

cs_parsing_time_seconds Time spent parsing a line HISTOGRAM last pushed: 2026-04-29T12:06:34-05:00

cs_regexp_cache_size Entries per regexp cache. GAUGE last pushed: 2026-04-29T12:06:34-05:00

push_failure_time_seconds Last Unix time when changing this group in the Pushgateway failed. GAUGE last pushed: 2026-04-29T10:36:15-05:00

push_time_seconds Last Unix time when changing this group in the Pushgateway succeeded. GAUGE last pushed: 2026-04-29T12:06:34-05:00

job="cve_scanner" instance_name="hub" Delete Group

apt_security_upgradable Packages with security updates available (actionable) GAUGE last pushed: 2026-04-29T12:06:38-05:00

apt_upgradable_packages Packages with available upgrade from configured repos (actionable) GAUGE last pushed: 2026-04-29T12:06:38-05:00

cve_affected_packages Distinct affected packages GAUGE last pushed: 2026-04-29T12:06:38-05:00

cve_remotely_exploitable CVEs marked remotely exploitable GAUGE last pushed: 2026-04-29T12:06:38-05:00

cve_scan_timestamp_seconds Unix timestamp of last scan GAUGE last pushed: 2026-04-29T12:06:38-05:00

cve_total_vulnerabilities Total open CVEs detected by debsecan (includes historical/theoretical) GAUGE last pushed: 2026-04-29T12:06:38-05:00

cve_unfixed CVEs without a known fix yet GAUGE last pushed: 2026-04-29T12:06:38-05:00

cve_with_fix_available CVEs with a fix already in repo GAUGE last pushed: 2026-04-29T12:06:38-05:00

push_failure_time_seconds Last Unix time when changing this group in the Pushgateway failed. GAUGE last pushed: 2026-04-29T10:36:15-05:00

push_time_seconds Last Unix time when changing this group in the Pushgateway succeeded. GAUGE last pushed: 2026-04-29T12:06:38-05:00

system_kernel_outdated 1 if running kernel != newest installed kernel (reboot needed) GAUGE last pushed: 2026-04-29T12:06:38-05:00

system_reboot_required 1 if /var/run/reboot-required exists GAUGE last pushed: 2026-04-29T12:06:38-05:00