False positive for scenario - CrowdSec