Files
graylog-ops/profiles/f5.json
T
DeepFal 2d76ed6672 初始提交:恶意 IP 特征+行为融合检测系统
- 特征检测(规则/签名)与行为检测(24h 统计)单进程运行
- 融合名单按首次发现时间倒序,展示位置/归属(GeoIP + ASN)
- 钉钉融合推送(加签、24h 节流、去重)
- 页面状态灯、CSV 导出、Docker 镜像构建文件
2026-10-18 05:03:05 +08:00

19 lines
290 B
JSON

{
"fields": {
"client_ip": "client_ip",
"status": "status",
"uri": "uri",
"ua": "ua",
"method": "method",
"host": "host"
},
"signals": {
"bad_method": {
"enabled": false
}
},
"thresholds": {
"min_requests": 30,
"min_score": 40.0
}
}