Hello, I have the following simple scenario. I want to count requests to a specific endpoint and group them by ip. If more than two requests within 30s comes from same IP, it should overflow. type: leaky name: bu/tariffs-by-ip description: "detect too many requests to tariffs endpoint from the same…

The scenario was working for me, when I added three requests in real time to the monitored access.log, so I guess, something with the replay was wrong.

No overflow for single ip

janbaer May 9, 2022, 11:15am 4

Yes, this scenario is working for now. Thanks! But I still need help for the other problem: Ban each request after overflow - #7 by janbaer

Topic		Replies	Views
Ban each request after overflow crowdsec	18	1527	May 21, 2022
How to use the bucket type counter crowdsec	3	594	August 17, 2022
How to match haproxy http code with crowdsec rules crowdsec	1	484	February 20, 2023
New to crowdsec, coming from fail2ban crowdsec	9	1150	February 20, 2024
False Positive IP blocking crowdsec	1	1820	September 30, 2021

No overflow for single ip

Related topics