···

       
100
       
100
       
 
       
    "fail2ban/action.d/abuseipdb-agenix.conf".text = ''

     

       
101
       
101
       
 
       
      [Definition]

     

       
102
       
102
       
 
       
      # Report IP to AbuseIPDB, reading API key from Agenix secret file

     

       
103
       
103
       
-
       
      actionban = lgm=$(printf '%%.1000s\n...' "<matches>"); \

     

       
104
       
104
       
-
       
        curl -sSf "https://api.abuseipdb.com/api/v2/report" \

     

       
105
       
105
       
-
       
        -H "Accept: application/json" \

     

       
106
       
106
       
-
       
        -H "Key: $(cat /run/agenix/abuseipdb)" \

     

       
107
       
107
       
-
       
        --data-urlencode "comment=$lgm" \

     

       
108
       
108
       
-
       
        --data-urlencode "ip=<ip>" \

     

       
109
       
109
       
-
       
        --data "categories=<abuseipdb_category>"

     

       
103
       
103
       
+
       
      # Based on official fail2ban abuseipdb.conf but with API key from Agenix

     

       
104
       
104
       
+
       
      actionban = curl --fail 'https://api.abuseipdb.com/api/v2/report' \

     

       
105
       
105
       
+
       
        -H 'Accept: application/json' \

     

       
106
       
106
       
+
       
        -H 'Key: $(cat /run/agenix/abuseipdb)' \

     

       
107
       
107
       
+
       
        --data-urlencode 'ip=<ip>' \

     

       
108
       
108
       
+
       
        --data-urlencode 'comment=<matches>' \

     

       
109
       
109
       
+
       
        --data 'categories=<abuseipdb_category>'

     

       
110
       
110
       
 
       


     

       
111
       
111
       
 
       
      actionstart =

     

       
112
       
112
       
 
       
      actionstop =