diff --git a/alerts.go b/alerts.go
index 293ec84..21bec3b 100644
--- a/alerts.go
+++ b/alerts.go
@@ -956,7 +956,7 @@ func buildWAFBlockAlertRule(client ClientData, domain DomainInfo, tmpl AlertRule
 
 	clientDomain := fmt.Sprintf("%s / %s (SID:%s)", client.ClientTitle, domain.DomainName, domain.SID)
 	summary := fmt.Sprintf("🟡 %s — %s ошибка WAF - кол-во штук за 1 минуту.", clientDomain, client.PtafFallbackCode)
-	thresholdAnnotation := fmt.Sprintf(">%d штук(и) для response_status_code (ответ от PTAF, не от origin)", domain.PtafFallbackCodeAlertCount)
+	thresholdAnnotation := fmt.Sprintf(">%d штук(и) для response_status_code (ответ от PTAF)", domain.PtafFallbackCodeAlertCount)
 	thresholdCountAnnotation := fmt.Sprintf("%d шт.", domain.PtafFallbackCodeAlertCount)
 
 	sidQuery := "SID:" + domain.SID
@@ -981,7 +981,7 @@ func buildWAFBlockAlertRule(client ClientData, domain DomainInfo, tmpl AlertRule
 			"code_field":      fmt.Sprintf("%s WAF", client.PtafFallbackCode),
 			"for_duration":    "1m",
 			"threshold":       thresholdAnnotation,
-			"field_info":      "для response_status_code (ответ от PTAF, не от origin)",
+			"field_info":      "для response_status_code (ответ от PTAF)",
 			"runbook":         "проверить логи docker и эскалировать на аналитика.",
 			"severity":        "warning",
 			"value_unit":      "шт.",
diff --git a/alerts_vl.go b/alerts_vl.go
index 9df58f0..488af75 100644
--- a/alerts_vl.go
+++ b/alerts_vl.go
@@ -463,7 +463,7 @@ func buildWAFBlockAlertRuleVL(client ClientData, domain DomainInfo, tmpl AlertRu
 
 	clientDomain := fmt.Sprintf("%s / %s (SID:%s)", client.ClientTitle, domain.DomainName, domain.SID)
 	summary := fmt.Sprintf("🟡 %s — %s ошибка WAF - кол-во штук за 1 минуту.", clientDomain, client.PtafFallbackCode)
-	thresholdAnnotation := fmt.Sprintf(">%d штук(и) для response_status_code (ответ от PTAF, не от origin)", domain.PtafFallbackCodeAlertCount)
+	thresholdAnnotation := fmt.Sprintf(">%d штук(и) для response_status_code (ответ от PTAF)", domain.PtafFallbackCodeAlertCount)
 	thresholdCountAnnotation := fmt.Sprintf("%d шт.", domain.PtafFallbackCodeAlertCount)
 
 	expr := fmt.Sprintf("SID:%s log_type:nginx-access-PTAF response_status_code:=%s | stats by (_time:1m) count() hits", domain.SID, client.PtafFallbackCode)
@@ -489,7 +489,7 @@ func buildWAFBlockAlertRuleVL(client ClientData, domain DomainInfo, tmpl AlertRu
 			"code_field":      fmt.Sprintf("%s WAF", client.PtafFallbackCode),
 			"for_duration":    "1m",
 			"threshold":       thresholdAnnotation,
-			"field_info":      "для response_status_code (ответ от PTAF, не от origin)",
+			"field_info":      "для response_status_code (ответ от PTAF)",
 			"runbook":         "проверить логи docker и эскалировать на аналитика.",
 			"severity":        "warning",
 			"value_unit":      "шт.",