API Documentation

Use our API to pull threat intelligence data in real time.

fail2ban integration

Make any Linux server an AbuseTrack sensor. Our fail2ban action reports every banned attacker (SSH brute-force and the like) straight to your account via the API. Create an API key, then run:

# on your server, as root
curl -fsSL https://abusetrack.io/integrations/fail2ban/install.sh | \
  AT_API_KEY=your_api_key_here AT_API_URL=https://abusetrack.io bash

It drops in a reporter script, a fail2ban action and (if needed) a ready-made SSH filter, then reloads fail2ban. Bans get flagged as IP / Brute Force with a comment on what the attacker did.