type: leaky
name: kupidonia/cap-many-crossword-word
description: "/crossword-word/ in url"
filter: "evt.Meta.log_type == 'http_access-log' and evt.Parsed.request contains '/crossword-word/'"
groupby: "evt.Meta.source_ip"
capacity: 15
leakspeed: "1m"
blackhole: "5m"
labels:
  service: http
  type: bruteforce
  remediation: capcha