Node CrowdSec Client
    Preparing search index...

    Enumeration SubnetLevel

    The largest subnet the bouncer is willing to consider as potentially malicious. Decisions with a larger subnet (smaller mask) are ignored.

    Real-world malicious blocks are almost always single IPs : a datacenter hosts abusive customers but the whole datacenter is rarely banned. Checking country-sized blocks is an extreme edge case, so this lets the operator choose how far up the prefix hierarchy to look.

    Index
    company: 24

    an ISP / hosting block ( up to /24 ) : abusive cloud customers

    country: 16

    a national block ( up to /16 ) : extreme case, a hostile country

    resident: 32

    only single IPs ( /32 ) : an individual attacker