Евгений Старков

[portscan]
enabled  = true
filter   = portscan
action = ufw
         %(action_abuseipdb)s[abuseipdb_apikey="xxx", matches="Portscan!", abuseipdb_category="14,15"]