Hi CrowdSec Team,
I'd like to submit a new collection for AdGuard Home DoT scanner detection.
Repository: https://github.com/PumbaLP/adguardhome-dot
What it does
Detects and blocks port scanners targeting AdGuard Home's DoT (DNS-over-TLS) port 853 via repeated connection resets.
Tested
Confirmed working in production against AdGuard Home v0.107.x.
Blocked real scanners including 85.217.140.42 (Modat B.V., FR).
Components
- Parser: PumbaLP/adguardhome-dot-errors
- Scenario: PumbaLP/adguardhome-dot-scan
All files, tests, and a release tag (v1.0.0) are available in the repository. Let me know if you need any changes or if you'd like me to open a Pull Request directly!
Hi CrowdSec Team,
I'd like to submit a new collection for AdGuard Home DoT scanner detection.
Repository: https://github.com/PumbaLP/adguardhome-dot
What it does
Detects and blocks port scanners targeting AdGuard Home's DoT (DNS-over-TLS) port 853 via repeated connection resets.
Tested
Confirmed working in production against AdGuard Home v0.107.x.
Blocked real scanners including 85.217.140.42 (Modat B.V., FR).
Components
All files, tests, and a release tag (v1.0.0) are available in the repository. Let me know if you need any changes or if you'd like me to open a Pull Request directly!