No notification after certain amount of bans
Hey I connected crowdsec with ntfy and get DOUZENS of notifications from the same IP. The questionsable IP is currently banned for 4000 hours.
I tried no log opnsense firewall rules but crowdsec is triggered before them.
Is there a good way to stop getting notifications after an IP got banned x times? I got around 200 notifications today
Alert example if thats helpful:
################################################################################################
│ Active Decisions │
├──────────┬──────────────────┬────────┬─────────────┬──────────────────────┤
│ ID │ scope:value │ action │ expiration │ created_at │
├──────────┼──────────────────┼────────┼─────────────┼──────────────────────┤
│ 28286093 │ Ip:45.141.233.37 │ ban │ 4007h36m24s │ 2025-12-14T10:57:52Z │
╰──────────┴──────────────────┴────────┴─────────────┴──────────────────────╯
Thanks in advance!
I tried no log opnsense firewall rules but crowdsec is triggered before them.
Is there a good way to stop getting notifications after an IP got banned x times? I got around 200 notifications today
Alert example if thats helpful:
################################################################################################
- ID : 12861
- Date : 2025-12-14T10:57:52Z
- Machine : opnsense
- Simulation : false
- Remediation : true
- Reason : firewallservices/pf-scan-multi_ports
- Events Count : 27
- Scope:Value : Ip:45.141.233.37
- Country : BG
- AS : MEVSPACE sp. z o.o.
- Begin : 2025-12-14T10:56:54Z
- End : 2025-12-14T10:57:52Z
- UUID : 09b48c5e-a853-4730-988c-77d5e0bd2faf
│ Active Decisions │
├──────────┬──────────────────┬────────┬─────────────┬──────────────────────┤
│ ID │ scope:value │ action │ expiration │ created_at │
├──────────┼──────────────────┼────────┼─────────────┼──────────────────────┤
│ 28286093 │ Ip:45.141.233.37 │ ban │ 4007h36m24s │ 2025-12-14T10:57:52Z │
╰──────────┴──────────────────┴────────┴─────────────┴──────────────────────╯
Thanks in advance!
