Incident 24f12003-d405-49a4-8eb4-1a912d7a0bdb
- ID
- 24f12003-d405-49a4-8eb4-1a912d7a0bdb
- Class
- meta
- Severity
- warning
- Status
- self_resolved
- Source / agent
- posture_review
- Signature
- posture_brute:172.20.0.14
- Created
- 2026-09-08 15:00:20 UTC
- Resolved
- 2026-09-17 13:00:30 UTC
Chain of command
Scout
doneevidence via posture_review
2026-09-08 15:00:20 UTC
Analyst
donekb_hit · 90% · brute_force_burst
2026-09-08 15:00:20 UTC
Librarian
pendingproposal awaiting a decision
—
Surgeon
pendingno execution considered
—
Watchdog
pendingnothing to verify
—
1 · Detection
Symptoms
{
"failures": 204,
"ip": "172.20.0.14",
"sources": [
"authlog",
"caddy",
"fail2ban",
"nginx"
],
"threshold": 10,
"window_minutes": 60
}2 · Diagnosis
Run 1
- Tier
- kb_hit
- Confidence
- 0.9
- Confidence source
- historical_success_rate
- Root cause entity
- brute_force_burst
- LLM used
- no
- Duration
- —
- At
- 2026-09-08 15:00:20 UTC
Tree path
{
"kb_signature": "5dd36996484d07b8fa38140ed4c696bf03bdd47a26fdd38bd01ee67d08de3c9c"
}Candidate deliberation (R5)
Winner margin: 0.05
| Source | Root cause | Fix | Confidence | Score |
|---|---|---|---|---|
| kb_hit | brute_force_burst WINNER | block_brute_force_ip | 0.9 | 1.45 |
| rule_tree | brute_force_burst | block_brute_force_ip(ip=172.20.0.14) | 0.85 | 1.4 |
3 · Fix attempts
No fix attempts recorded.
4 · Human feedback
No human feedback recorded.