Report IP to abusdeipdb with fail2ban

Community Support Firewall
1

I recently installed HestiaCP on my Raspberry pi to host my nextcloud, and other things.

I have an account on abuseipdb where i report IP’s for malicious behavior. Now i want to setup fail2ban to send reports to abuseipdb. But when i followed the tutorial, i see the action field is already populated.

So my question is. How do i setup fail2ban to report ip’s to abuseipdb? Can i replace the prefilled action with my own?

2

You can replace it but there’s no need to. You can simply add an action to that jail. The same jail can have multiple actions.

Example:

[recidive]
enabled  = true
filter   = recidive
action   = hestia[name=RECIDIVE]
           otheraction[Here the options you need]
logpath  = /var/log/fail2ban.log
maxretry = 5
findtime = 86400
bantime  = 864000