A lightweight RESTful API built with Python and Flask that allows remote blocking of IP addresses using UFW (Uncomplicated Firewall) on a Linux server. The API validates IPv4 input, applies UFW deny rules securely, and logs all actions to a system log file for auditing.

This tool is especially useful for automating threat mitigation workflows in cybersecurity environments, allowing SOC teams or honeypots to programmatically block malicious IPs via HTTP requests.

Key Features:

Input validation for IPv4 addresses

JSON-only secure POST endpoint

Integration with ufw via subprocess

Detailed logging to /var/log/blocked_ips.log

Error handling for failed or malformed requests

Technologies Used: Python, Flask, Linux, UFW, REST, Logging, Regex, Subprocess