···

       
102
       
 
       
      # Report IP to AbuseIPDB, reading API key from Agenix secret file

     

       
103
       
 
       
      # Uses double quotes to allow shell expansion of $(cat /run/agenix/abuseipdb)

     

       
104
       
 
       
      # Sleep 12 seconds to respect AbuseIPDB rate limit (~5 requests per minute)

     

       
105
       
-
       
      actionban = sleep 12; curl --fail 'https://api.abuseipdb.com/api/v2/report' -H 'Accept: application/json' -H "Key: $(cat /run/agenix/abuseipdb)" --data-urlencode 'ip=<ip>' --data-urlencode 'comment=<matches>' --data 'categories=<abuseipdb_category>'

     

       
0
       
 
       

     

       
106
       
 
       


     

       
107
       
 
       
      actionstart =

     

       
108
       
 
       
      actionstop =

     

···

       
102
       
 
       
      # Report IP to AbuseIPDB, reading API key from Agenix secret file

     

       
103
       
 
       
      # Uses double quotes to allow shell expansion of $(cat /run/agenix/abuseipdb)

     

       
104
       
 
       
      # Sleep 12 seconds to respect AbuseIPDB rate limit (~5 requests per minute)

     

       
105
       
+
       
      # Note: Don't use <matches> - fail2ban's wrapper causes issues with multiline content

     

       
106
       
+
       
      actionban = sleep 12; curl --fail 'https://api.abuseipdb.com/api/v2/report' -H 'Accept: application/json' -H "Key: $(cat /run/agenix/abuseipdb)" --data-urlencode 'ip=<ip>' --data 'categories=<abuseipdb_category>'

     

       
107
       
 
       


     

       
108
       
 
       
      actionstart =

     

       
109
       
 
       
      actionstop =