Files
zira-etc/crowdsec/patterns/cowrie_honeypot
2023-06-12 09:31:52 +03:00

1 line
128 B
Plaintext

COWRIE_NEW_CO New connection: %{IPV4:source_ip}:[0-9]+ \(%{IPV4:dest_ip}:%{INT:dest_port}\) \[session: %{DATA:telnet_session}\]$