Hello, I have the following simple scenario. I want to count requests to a specific endpoint and group them by ip. If more than two requests within 30s comes from same IP, it should overflow. type: leaky name: bu/tariffs-by-ip description: "detect too many requests to tariffs endpoint from the same…

The scenario was working for me, when I added three requests in real time to the monitored access.log, so I guess, something with the replay was wrong.

No overflow for single ip

janbaer May 9, 2022, 11:15am 4

Yes, this scenario is working for now. Thanks! But I still need help for the other problem: Ban each request after overflow - #7 by janbaer

Topic		Replies	Views
Ban each request after overflow crowdsec	18	1571	May 21, 2022
How to use the bucket type counter crowdsec	3	603	August 17, 2022
How to match haproxy http code with crowdsec rules crowdsec	1	495	February 20, 2023
PostOverflow whitelists ONLY for specific scenarios crowdsec	1	30	May 26, 2025
New to crowdsec, coming from fail2ban crowdsec	9	1237	February 20, 2024

No overflow for single ip

Related topics