Use AbuseIPDB with CSF (ConfigServer Firewall)

This article covers how to enable AbuseIPDB's integration with ConfigServer Firewall to block abusive access attempts to your Dedicated Server.

IMPORTANT: This solution will require root access. If this needs to be obtained, follow the guide on requesting root access.

NOTE: Due to IPTables limits, this will not work on our VPS servers. You will need a Dedicated Server plan.

Install CSF into your server
Create an account with AbuseIPDB
IMPORTANT: A free account includes 1000 daily checks, if your server has more traffic than 1000 unique hits daily, you may need a paid plan. If you sign up as a webmaster and verify with IPDB, you can get 3000 free daily checks.
Create an API Key
SSH into your server
Open the blacklist file with
```
nano /etc/csf/csf.blocklists
```
The nano editor will then open up the file and you can begin entering text.
Navigate to the end of the file using the down arrow key
Append the following to the end of the file on a new line by pasting
```
# AbuseIPDB blacklist
ABUSEIPDB|86400|10000|https://api.abuseipdb.com/api/v2/blacklist?key=API_KEY&plaintext
```
REPLACE: API_KEY with the API key from Step 3
Once you have finished editing click Ctrl+O then the Enter key to save the file.
Restart CSF with
```
csf -ra
```

Comments