It looks like the windows firewall bouncer service is having issues on my windows 10 machine (working fine on my Windows 11 machine). The firewall bouncer service itself seems to be fine but it’s causing the windows firewall service to have high loads of ~20% CPU usage. During normal operations and without the bouncer service running my windows fw service loads are 0-1 %. I have noticed it takes 10-20 seconds after the bouncer service is started before the firewall service starts to act up. I enabled trace logs but I don’t see anything to further troubleshoot. Any idea where I should look next?
2024-12-21 19:21:46.6964|TRACE|Fw.Firewall|Trying to find bucket for ip 154.213.187.182
2024-12-21 19:21:46.6964|TRACE|Fw.Firewall|Trying to find bucket for ip 212.118.40.253
2024-12-21 19:21:46.6964|TRACE|Fw.Firewall|Trying to find bucket for ip 115.231.78.12
2024-12-21 19:21:46.7116|TRACE|Fw.Firewall|Trying to find bucket for ip 54.37.234.111
2024-12-21 19:21:46.7116|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist4eca83f7-9105-48d0-a490-d6cb95146feb
2024-12-21 19:21:47.0077|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist5d7ff819-1545-4ed8-a1e0-015c1c43e378
2024-12-21 19:21:47.3982|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist286c422e-d8be-446d-b09e-65d4c7188672
2024-12-21 19:21:47.8356|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistbfdb4137-28c6-44ca-8143-4e11d304f68d
2024-12-21 19:21:48.3213|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistb841458a-b6a6-4d4e-baf7-30fe1e6a1594
2024-12-21 19:21:48.8998|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist00ba2587-35e1-4ed7-8aab-b846baf906f0
2024-12-21 19:21:49.6012|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistea3db069-d7ce-4e64-82bd-009ace22cb38
2024-12-21 19:21:50.3444|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist2086ddb0-5c94-4477-a55b-9c80af8627ff
2024-12-21 19:21:51.2180|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistf02d0408-57c1-4362-b4cd-2787189d719a
2024-12-21 19:21:52.3664|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistb3b1a20f-1ebb-4f42-852c-918eb79564e0
2024-12-21 19:21:53.7123|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist0f2da888-9a3c-4d94-913a-afc3012608cf
2024-12-21 19:21:56.3788|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist3d91b4cb-e342-482f-953a-31be4f8eb584
2024-12-21 19:21:59.3796|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist17b642a5-9282-4201-bf21-97cdcea99494
2024-12-21 19:22:02.6665|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist4cf9b14c-368d-4025-ab73-36512caad303
2024-12-21 19:22:05.7996|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistf74dbb59-d7ff-4ca1-83a3-febc58204b9c
2024-12-21 19:22:08.3728|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist855b662c-f983-41ad-859e-9b547d1f7a29
2024-12-21 19:22:12.6061|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist9ccf34c1-1be0-487b-af87-7a5abfbae71c
2024-12-21 19:22:15.9153|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist2d6093e1-504b-4d4a-a641-8f6ba5b24d75
2024-12-21 19:22:22.2235|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist23054145-dfa0-422c-83e7-99100109ef7b
2024-12-21 19:22:26.2995|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist3f3c833e-9e33-4c3b-bdf6-481f648df3a9
2024-12-21 19:22:31.6667|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist371ed4bd-2a8f-4ba6-bdda-c97c721d2758
2024-12-21 19:22:37.7349|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist95a47088-d9b2-4618-86d3-8e36042fa1e4
2024-12-21 19:22:43.5546|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist6d9f5ca2-5d53-4c86-bb2a-be20d17a80d5
2024-12-21 19:22:50.6788|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist1b6cb1db-3842-4ce7-b224-6d62a413e509
2024-12-21 19:22:55.6086|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist5987761f-4260-467e-a6d8-a20293d3ef14
2024-12-21 19:23:02.1307|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist329845e7-c5b9-41a2-aa78-637a812ab618
2024-12-21 19:23:09.7135|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist13f45cf1-8515-4873-b735-48c212516225
2024-12-21 19:23:16.9999|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist158c649d-5837-437e-b836-5d930ecb29ae
2024-12-21 19:23:24.3302|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistaada82be-04c3-4014-b028-5b662286ccea
2024-12-21 19:23:30.9810|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist84df0b35-6e61-4fee-8be1-bb26e6e13ce3
2024-12-21 19:23:38.7039|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist82e5f17b-59ff-4a1b-abf6-802c9c150c69
2024-12-21 19:23:45.6037|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist5814bbaf-f6fb-4332-83fb-0b546dcd04c3
2024-12-21 19:23:55.4261|TRACE|Fw.Firewall|in get rule for crowdsec-blockliste271e46a-078a-4b6d-97be-6e2395892e34
2024-12-21 19:24:05.7633|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist0c3cc3cd-117e-49f7-81e6-addc3ddd6c04
2024-12-21 19:24:15.1654|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistbbcdc476-2530-47c5-bfcf-0a567479ac25
2024-12-21 19:24:20.5734|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist5ed6d581-0d7f-474d-a24b-49439e02a9b1
2024-12-21 19:24:28.8021|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist60f9323f-c292-4336-8c28-97fb922bcd7d
2024-12-21 19:24:40.0279|TRACE|Fw.Firewall|in get rule for crowdsec-blocklistb3af1277-bf29-4a2a-a0db-c31c5453cc14
2024-12-21 19:24:48.8216|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist5e789e39-7ef6-4b75-a4f9-8d4d911c9def
2024-12-21 19:24:59.3884|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist10ef9aa6-853b-49c5-b34a-192184a2f10c
2024-12-21 19:25:09.7145|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist4fb497a3-17b4-42ed-87be-b3dd1dce5ebc
2024-12-21 19:25:19.8272|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist036052ba-8d85-476a-83fa-aef9d8943a95
2024-12-21 19:25:24.6172|DEBUG|cs_windows_firewall_bouncer.Service|Onstop service
2024-12-21 19:25:30.3255|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist9efb74df-31ed-4328-b12d-63ac42bed8e9
2024-12-21 19:25:30.3569|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistd5453d78-c0fa-4904-a1e8-903d3cc78496
2024-12-21 19:25:30.8280|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistf13c7b2e-4e73-4005-bedd-22a384aedb77
2024-12-21 19:25:41.1328|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist3c2a34fc-ec29-4809-b8df-3879ca998683
2024-12-21 19:25:41.1490|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistc05813e6-2306-4c4c-a077-08a1c0c028c7
2024-12-21 19:25:41.3830|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist5c30d129-53ef-4ae1-9c05-4a4bebd79854
2024-12-21 19:25:41.6257|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistd40ab880-2fd8-4b22-a29e-88e881757348
2024-12-21 19:25:51.7156|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist4a7353de-49e1-4be1-976f-a1ada12d4620
2024-12-21 19:25:51.7382|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist5dc13c77-afcd-4a63-87f3-2adef32d9d36
2024-12-21 19:25:52.0996|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist4a7353de-49e1-4be1-976f-a1ada12d4620
2024-12-21 19:25:52.3880|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist3c2a34fc-ec29-4809-b8df-3879ca998683
2024-12-21 19:26:02.1772|TRACE|Fw.Firewall|in get rule for crowdsec-blocklist5dc13c77-afcd-4a63-87f3-2adef32d9d36
2024-12-21 19:26:02.1966|DEBUG|Fw.Firewall|Could not find rule crowdsec-blocklist5dc13c77-afcd-4a63-87f3-2adef32d9d36: The system cannot find the file specified. (0x80070002)
2024-12-21 19:26:03.7770|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist9efb74df-31ed-4328-b12d-63ac42bed8e9
2024-12-21 19:26:05.6232|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist036052ba-8d85-476a-83fa-aef9d8943a95
2024-12-21 19:26:06.7410|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist4fb497a3-17b4-42ed-87be-b3dd1dce5ebc
2024-12-21 19:26:07.9431|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist10ef9aa6-853b-49c5-b34a-192184a2f10c
2024-12-21 19:26:09.6479|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist5e789e39-7ef6-4b75-a4f9-8d4d911c9def
2024-12-21 19:26:11.2764|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistb3af1277-bf29-4a2a-a0db-c31c5453cc14
2024-12-21 19:26:12.2772|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist60f9323f-c292-4336-8c28-97fb922bcd7d
2024-12-21 19:26:13.3258|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist5ed6d581-0d7f-474d-a24b-49439e02a9b1
2024-12-21 19:26:14.2789|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistbbcdc476-2530-47c5-bfcf-0a567479ac25
2024-12-21 19:26:15.5833|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist0c3cc3cd-117e-49f7-81e6-addc3ddd6c04
2024-12-21 19:26:16.4628|DEBUG|Fw.Firewall|Deleting rule crowdsec-blockliste271e46a-078a-4b6d-97be-6e2395892e34
2024-12-21 19:26:17.3941|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist5814bbaf-f6fb-4332-83fb-0b546dcd04c3
2024-12-21 19:26:18.2428|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist82e5f17b-59ff-4a1b-abf6-802c9c150c69
2024-12-21 19:26:19.0643|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist84df0b35-6e61-4fee-8be1-bb26e6e13ce3
2024-12-21 19:26:20.0906|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistaada82be-04c3-4014-b028-5b662286ccea
2024-12-21 19:26:20.8380|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist158c649d-5837-437e-b836-5d930ecb29ae
2024-12-21 19:26:21.5115|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist13f45cf1-8515-4873-b735-48c212516225
2024-12-21 19:26:22.1603|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist329845e7-c5b9-41a2-aa78-637a812ab618
2024-12-21 19:26:22.7747|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist5987761f-4260-467e-a6d8-a20293d3ef14
2024-12-21 19:26:23.3588|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist1b6cb1db-3842-4ce7-b224-6d62a413e509
2024-12-21 19:26:23.9323|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist6d9f5ca2-5d53-4c86-bb2a-be20d17a80d5
2024-12-21 19:26:24.4599|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist95a47088-d9b2-4618-86d3-8e36042fa1e4
2024-12-21 19:26:24.9691|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist371ed4bd-2a8f-4ba6-bdda-c97c721d2758
2024-12-21 19:26:25.4575|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist3f3c833e-9e33-4c3b-bdf6-481f648df3a9
2024-12-21 19:26:25.9548|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist23054145-dfa0-422c-83e7-99100109ef7b
2024-12-21 19:26:26.4069|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist2d6093e1-504b-4d4a-a641-8f6ba5b24d75
2024-12-21 19:26:26.8298|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist9ccf34c1-1be0-487b-af87-7a5abfbae71c
2024-12-21 19:26:27.2164|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist855b662c-f983-41ad-859e-9b547d1f7a29
2024-12-21 19:26:27.5556|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistf74dbb59-d7ff-4ca1-83a3-febc58204b9c
2024-12-21 19:26:27.9011|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist4cf9b14c-368d-4025-ab73-36512caad303
2024-12-21 19:26:28.2165|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist17b642a5-9282-4201-bf21-97cdcea99494
2024-12-21 19:26:28.4916|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist3d91b4cb-e342-482f-953a-31be4f8eb584
2024-12-21 19:26:28.7582|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist0f2da888-9a3c-4d94-913a-afc3012608cf
2024-12-21 19:26:29.0015|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistb3b1a20f-1ebb-4f42-852c-918eb79564e0
2024-12-21 19:26:29.2318|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistf02d0408-57c1-4362-b4cd-2787189d719a
2024-12-21 19:26:29.4273|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist2086ddb0-5c94-4477-a55b-9c80af8627ff
2024-12-21 19:26:29.5985|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistea3db069-d7ce-4e64-82bd-009ace22cb38
2024-12-21 19:26:29.7768|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist00ba2587-35e1-4ed7-8aab-b846baf906f0
2024-12-21 19:26:29.9099|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistb841458a-b6a6-4d4e-baf7-30fe1e6a1594
2024-12-21 19:26:30.0261|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklistbfdb4137-28c6-44ca-8143-4e11d304f68d
2024-12-21 19:26:30.1359|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist286c422e-d8be-446d-b09e-65d4c7188672
2024-12-21 19:26:30.2354|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist5d7ff819-1545-4ed8-a1e0-015c1c43e378
2024-12-21 19:26:30.3169|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist4eca83f7-9105-48d0-a490-d6cb95146feb
2024-12-21 19:26:30.3960|DEBUG|Fw.Firewall|Deleting rule crowdsec-blocklist4a7353de-49e1-4be1-976f-a1ada12d4620
2024-12-21 19:26:30.4502|DEBUG|cs_windows_firewall_bouncer.Service|Onstop service end