Skip to content

[Hub] Add PumbaLP/adguardhome-dot collection #1753

Description

@PumbaLP

Hi CrowdSec Team,

I'd like to submit a new collection for AdGuard Home DoT scanner detection.

Repository: https://github.com/PumbaLP/adguardhome-dot

What it does

Detects and blocks port scanners targeting AdGuard Home's DoT (DNS-over-TLS) port 853 via repeated connection resets.

Tested

Confirmed working in production against AdGuard Home v0.107.x.
Blocked real scanners including 85.217.140.42 (Modat B.V., FR).

Components

  • Parser: PumbaLP/adguardhome-dot-errors
  • Scenario: PumbaLP/adguardhome-dot-scan

All files, tests, and a release tag (v1.0.0) are available in the repository. Let me know if you need any changes or if you'd like me to open a Pull Request directly!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions