Skip to main content


CrowdSec CTI Taxonomy aim to help users to understand and to anticipate what is and can be returned by the CrowdSec CTI API.

In this section, you will see the documentations about:

  • the fields: Those are the fields returned by the CrowdSec API when requesting an IP address (or the fire database)

  • the scores: CrowdSec compute some scores for a given IP address. Those scores are computed for the last day, the last week, the last month and overall.

  • the behaviors: The behaviors associated to an IP address

  • the scenarios: The scenarios for which an IP address has been reported for

  • the false positives: The possible false positives values associateed to an IP address

CrowdSec ConsoleCrowdSec Console