Обновить docs/services/lxc208-manage/alert/alerts.py
This commit is contained in:
parent
021e939cb0
commit
5f183df7a8
@ -63,4 +63,108 @@ ALERTS_CONFIG = {
|
|||||||
"title": "\u274C \u0411\u044d\u043a\u0430\u043f \u043d\u0435 \u0443\u0434\u0430\u043b\u0441\u044f",
|
"title": "\u274C \u0411\u044d\u043a\u0430\u043f \u043d\u0435 \u0443\u0434\u0430\u043b\u0441\u044f",
|
||||||
"formatter": "backup_failed",
|
"formatter": "backup_failed",
|
||||||
},
|
},
|
||||||
|
"3xui-tls-errors": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F525 CrowdSec: TLS Errors",
|
||||||
|
"summary": "\U0001F525 \u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 TLS handshake",
|
||||||
|
"info": "\U0001F6E0 \u041f\u0440\u043e\u0432\u0435\u0440\u044c \u043b\u043e\u0433\u0438 3x-ui \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0430\u0442\u0430\u043a",
|
||||||
|
"formatter": "crowdsec_ban",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"3xui-successful-login": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\u26A0\uFE0F CrowdSec: \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0432\u0445\u043e\u0434 3x-ui",
|
||||||
|
"summary": "\U0001F464 \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u0432 \u043f\u0430\u043d\u0435\u043b\u0438 3x-ui",
|
||||||
|
"formatter": "crowdsec_alert",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"crowdsecurity/ssh-bf": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F525 CrowdSec: SSH Brute-Force",
|
||||||
|
"summary": "\U0001F511 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 SSH brute-force \u0430\u0442\u0430\u043a\u0430",
|
||||||
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
||||||
|
"formatter": "crowdsec_ban",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"crowdsecurity/ssh-slow-bf": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F525 CrowdSec: SSH Slow Brute-Force",
|
||||||
|
"summary": "\U0001F511 \u041c\u0435\u0434\u043b\u0435\u043d\u043d\u0430\u044f SSH brute-force \u0430\u0442\u0430\u043a\u0430",
|
||||||
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
||||||
|
"formatter": "crowdsec_ban",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"crowdsecurity/ssh-bf_user-enum": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F525 CrowdSec: SSH User Enumeration",
|
||||||
|
"summary": "\U0001F464 \u041f\u0435\u0440\u0435\u0431\u043e\u0440 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 SSH",
|
||||||
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
||||||
|
"formatter": "crowdsec_ban",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"crowdsecurity/http-bad-user-agent": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F525 CrowdSec: Bad User-Agent",
|
||||||
|
"summary": "\U0001F577\uFE0F \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 User-Agent",
|
||||||
|
"info": "\U0001F6E0 IP \u0437\u0430\u0431\u0430\u043d\u0435\u043d \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438",
|
||||||
|
"formatter": "crowdsec_ban",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"crowdsec/mass-attack": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F6A8 CrowdSec: \u041c\u0430\u0441\u0441\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430",
|
||||||
|
"summary": "\U0001F525 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 50 \u0431\u0430\u043d\u043e\u0432 \u0437\u0430 5 \u043c\u0438\u043d\u0443\u0442",
|
||||||
|
"info": "\U0001F6E0 \u041f\u0440\u043e\u0432\u0435\u0440\u044c \u043b\u043e\u0433\u0438 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438",
|
||||||
|
"formatter": "crowdsec_mass_attack",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"ssh-successful-login": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\u2705 CrowdSec: SSH \u0423\u0441\u043f\u0435\u0448\u043d\u044b\u0439 \u0432\u0445\u043e\u0434",
|
||||||
|
"summary": "\U0001F511 \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e SSH",
|
||||||
|
"formatter": "crowdsec_alert",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"service-disabled": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\u26D4 CrowdSec: \u041e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0449\u0438\u0442\u044b",
|
||||||
|
"summary": "\U0001F6A8 \u041e\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
|
||||||
|
"formatter": "crowdsec_service_disabled",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"sudo-escalation": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\u26A0\uFE0F CrowdSec: \u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439",
|
||||||
|
"summary": "\U0001F511 \u0412\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root",
|
||||||
|
"formatter": "crowdsec_sudo",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"critical-file-change": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F5C2\uFE0F CrowdSec: \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430",
|
||||||
|
"summary": "\U0001F4CB \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u044b\u043b \u0438\u0437\u043c\u0435\u043d\u0451\u043d",
|
||||||
|
"formatter": "crowdsec_file_change",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"package-installed": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F4E5 CrowdSec: \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043f\u0430\u043a\u0435\u0442\u0430",
|
||||||
|
"summary": "\U0001F4E6 \u041d\u043e\u0432\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0447\u0435\u0440\u0435\u0437 apt/dpkg",
|
||||||
|
"formatter": "crowdsec_package",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"new-systemd-service": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F6E0 CrowdSec: \u041d\u043e\u0432\u044b\u0439 systemd \u0441\u0435\u0440\u0432\u0438\u0441",
|
||||||
|
"summary": "\U0001F6E0 \u0421\u043e\u0437\u0434\u0430\u043d \u043d\u043e\u0432\u044b\u0439 systemd \u0441\u0435\u0440\u0432\u0438\u0441",
|
||||||
|
"formatter": "crowdsec_service",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
|
"suspicious-outbound": {
|
||||||
|
"room": "security",
|
||||||
|
"title": "\U0001F310 CrowdSec: \u041f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435",
|
||||||
|
"summary": "\U0001F310 \u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0435\u0435 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435",
|
||||||
|
"formatter": "crowdsec_connection",
|
||||||
|
"skip_zero_firing": False,
|
||||||
|
},
|
||||||
}
|
}
|
||||||
Loading…
Reference in New Issue
Block a user