Answer the question
In order to leave comments, you need to log in
How can I prevent Fail2Ban from sending my server's IP from the UFW log to AbuseIPDB?
I set the following parameters in the jail.conf config and it automatically sends data from the UFW log to the AbuseIPDB website, how to hide the IP or make your own comments when sending
jail.conf
[portscan]
enabled = true
filter = portscan
action = ufw
%(action_abuseipdb)s[abuseipdb_apikey="xxx", abuseipdb_category="14,15"]
[portscan]
enabled = true
filter = portscan
action = ufw
%(action_abuseipdb)s[abuseipdb_apikey="xxx", comment="Portscan!", abuseipdb_category="14,15"]
Answer the question
In order to leave comments, you need to log in
Solution:
jail.conf
[portscan]
enabled = true
filter = portscan
action = ufw
%(action_abuseipdb)s[abuseipdb_apikey="xxx", matches="Portscan!", abuseipdb_category="14,15"]
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question