Enforcement
Accepted
Attempts for this ban: 0
Accepted at: 2026-10-05T16:20:03.204229+00:00
Historical attempts were not recorded.
Acceptance records a successful command response. CrowdSec state is checked during confirmed enforcement runs; this page shows the stored outcome.
Reasons
- Permanent enforcement applied due to coordinated distributed activity.
- Threat activity was observed independently on multiple nodes.
- Multiple stages of an attack chain were observed within a short time window.
- Observed behavior consistent with post-compromise activity, such as backdoors, webshells, or lateral movement.
- High-confidence indicators of post-exploitation activity were detected.
MITRE ATT&CK Mappings
Evidence
- Last observed:
- Nodes observed: 4
- Severity: CRITICAL
- TTL remaining: 6d 14h