I just checked, the service crashed last week:
time="02-11-2020 05:00:48" level=error msg="API init failed, won't push/pull : api signin: HTTP request creation failed: Post https://tmsov6x2n9.execute-api.eu-west-1.amazonaws.com/v1/signin: dial tcp: lookup tmsov6x2n9.execute-api.eu-west-1.amazonaws.com on 192.168.1.145:53: read udp 192.168.1.235:54434->192.168.1.145:53: i/o timeout"
time="02-11-2020 05:00:48" level=fatal msg="failed to initialize outputs : failed to load api : api signin: HTTP request creation failed: Post https://tmsov6x2n9.execute-api.eu-west-1.amazonaws.com/v1/signin: dial tcp: lookup tmsov6x2n9.execute-api.eu-west-1.amazonaws.com on 192.168.1.145:53: read udp 192.168.1.235:54434->192.168.1.145:53: i/o timeout"
It looks like my DNS server was non-responsive - but the service crashing needs some work…
In terms of the bans, I have fail2ban set more aggressively than crowdsec is running, so I am not sure I am going to see much additional benefit. But I’ll keep running for a while and post some logs back here.