diff --git a/modules/kubernetes/crowdsec/main.tf b/modules/kubernetes/crowdsec/main.tf
index e3cb5566..ec61a073 100644
--- a/modules/kubernetes/crowdsec/main.tf
+++ b/modules/kubernetes/crowdsec/main.tf
@@ -35,7 +35,7 @@ resource "kubernetes_config_map" "crowdsec_custom_scenarios" {
       description: "Detect IPs triggering too many HTTP 403s in NGINX ingress logs"
       filter: "evt.Meta.log_type == 'http_access-log' && evt.Parsed.status == '403'"
       groupby: "evt.Meta.source_ip"
-      leakspeed: "30s"
+      leakspeed: "2s"
       capacity: 10
       blackhole: 5m
       labels:
diff --git a/terraform.tfstate b/terraform.tfstate
index 26131f03..7308fe1d 100644
Binary files a/terraform.tfstate and b/terraform.tfstate differ