@destructatron yes, but the thing is, fail2ban is largely unmaintained now, and crowdsec is supposed to be its successor. And I mean, the same thing would happen with fail2ban as well, because no, querying for /matrix/v1/keys for like 20 times with a different query parameter is not http probing, it's just how the matrix protocol works, or at least how element uses it. Sometimes it's fine, but others, it just causes bans which I later have to revoke