# Confusion after reading readme and installing

**URL:** <https://discourse.crowdsec.net/t/confusion-after-reading-readme-and-installing/73>\
**Category:** crowdsec\
**Created:** [December 4, 2020, 3:00am UTC](https://discourse.crowdsec.net/t/confusion-after-reading-readme-and-installing/73 "2020-12-04T03:00:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![xgdgsc](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/xgdgsc/32/45_2.png) [@xgdgsc](https://discourse.crowdsec.net/u/xgdgsc)\
**Post date:** [December 4, 2020, 3:00am UTC](https://discourse.crowdsec.net/t/confusion-after-reading-readme-and-installing/73/1 "2020-12-04T03:00:26Z")

</div>

The readme plays a gif of " Out of the box detection" and bans ip. But after the installation there’ s a message saying it would not ban anything unless a bouncer is configured. My question is does it ban ssh IP after default installation?

---

<div class="post-metadata">

**Author:** ![thibault](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/thibault/32/2_2.png) [@thibault](https://discourse.crowdsec.net/u/thibault)\
**Post date:** [December 4, 2020, 3:13pm UTC](https://discourse.crowdsec.net/t/confusion-after-reading-readme-and-installing/73/2 "2020-12-04T15:13:32Z")

</div>

> [@xgdgsc](#):
>
> The readme plays a gif of " Out of the box detection" and bans ip. But after the installation there’ s a message saying it would not ban anything unless a bouncer is configured.

Hello !

Crowdsec itself provides the detection mechanism, but the counter measures are provided by the bouncers. If you want to ban IPs from ssh for example, you would need to use a bouncer such as the `cs-firewall-bouncer` (that you can find on the hub : [CrowdSec Console](https://hub.crowdsec.net/browse/#bouncers))

So to answer your question : “My question is does it ban ssh IP after default installation?” : No, you need to install a bouncer for this to happen. If you only install crowdsec, it will only “detect” the attacks.
