Enforcement
Accepted
Attempts for this ban: 1
Accepted at: 2026-10-22T11:40:25.825543+00:00
Acceptance source: successful command response.
Acceptance records a command response, a later CrowdSec observation, or retained legacy state. CrowdSec state is checked during confirmed enforcement runs; this page shows the stored outcome.
Reasons
- Threat activity was observed independently on multiple nodes.
- Multiple stages of an attack chain were observed within a short time window.
- Further attacks within a short window, permanent ban applied based on indicators of persistence attacks.
MITRE ATT&CK Mappings
Evidence
- Last observed:
- Nodes observed: 2
- Severity: CRITICAL
- TTL remaining: 13d 13h