Real-Time Threat Mitigation
on the Blockchain

ThreatChain distributes security threats across a decentralized network, automatically enforcing firewall rules and BGP blackhole routes in seconds — not hours.

View Dashboard View Plans

Live Feed

$ curl -s /api/v1/threats | jq '.[0]'
{
  "threat_id": "TC-8A3F...B21E",
  "target":    "203.0.113.45",
  "action":    "block",
  "severity":  "critical",
  "source":    "fail2ban",
  "ttl":       86400
}

How It Works

Four steps. Fully automated. Sub-10-second enforcement.

Detect

fail2ban, threat feeds, and manual analysis identify malicious IPs, brute-force attacks, and network anomalies.

Publish

Threats are published to a permissioned blockchain with full metadata, severity, and TTL.

Propagate

All nodes receive the threat within 5 seconds via blockchain consensus over encrypted IPv6 P2P links.

Enforce

nftables firewall rules and BGP blackhole routes are applied automatically on every participating node.

Built for Security Operations

Enterprise-grade threat mitigation with zero vendor lock-in.

Blockchain Consensus

Immutable threat records distributed across all nodes. No single point of failure. Full audit trail on every transaction.

Sub-10-Second Enforcement

From detection to firewall rule on every node in under 10 seconds. Threats are blocked before they can spread.

BGP Blackhole Routing

Critical threats announced via BGP RTBH (AS64999, community 64999:666) to upstream peers for network-level blocking.

IPv6 Native

Full dual-stack support. Blockchain P2P over IPv6, API accessible on both protocols. Built for the modern internet.

fail2ban Integration

Automatic. A ban on one node protects all nodes immediately. SSH brute-force, web exploits, port scans — all shared instantly.

REST API + SSE

Full threat management API with real-time Server-Sent Events streaming. Integrate with any SIEM or automation platform.

Zero Trust Architecture

Permissioned blockchain, API key authentication, WireGuard encrypted tunnels between all nodes.

Open Standards

Built on proven open-source components: nftables, BIRD 2, and WireGuard. No vendor lock-in. Deploy on your own infrastructure.

Network Architecture

Permissioned blockchain with WireGuard mesh, BGP peering, and automated enforcement.

AS23026 Topology IPv6 /44

     ┌───────────────────┐                 ┌───────────────────┐
     │     setec-1       │◄───────────────►│     setec-2       │
     │   (seed / bgp)    │   WireGuard +   │     (node)        │
     │  BIRD 2 / AS23026 │   Blockchain    │  nftables enforcer│
     └────────┬──────────┘      P2P        └────────┬──────────┘
              │            (IPv6 mesh)               │
              │                                      │
     ┌────────┴──────────┐                 ┌─────────┴─────────┐
     │     setec-3       │◄───────────────►│  setecastronomy    │
     │     (node)        │                 │   (web / api)      │
     │  nftables enforcer│                 │  nginx + FastAPI   │
     └───────────────────┘                 └─────────┬─────────┘
                                                     │
                                              HTTPS (dual-stack)
                                           ┌─────────┴─────────┐
                                           │                    │
                                      ┌────┴─────┐      ┌──────┴──────┐
                                      │Dashboard │      │  REST API   │
                                      │  Web UI  │      │  + SSE      │
                                      └──────────┘      └─────────────┘

Permissioned Blockchain

Distributed Ledger

WireGuard

Encrypted Mesh VPN

BIRD 2

BGP / RTBH Routing

nftables

Firewall Enforcement

Live Network Statistics

Real-time data from the ThreatChain network.

—

Active Threats

—

Chain Height

—

Connected Nodes

—

Network Status

Developer-First API

Full REST API with OpenAPI documentation. Add threats, query the chain, manage nodes, and stream events in real time. Built with FastAPI for async performance and automatic interactive docs.

API Documentation OpenAPI / Swagger

API Example

# Add a threat to the blockchain
curl -X POST https://setecastronomyinc.com/api/v1/threats \
  -H "Authorization: Bearer tck_your_api_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "target":     "203.0.113.45",
    "source":     "fail2ban",
    "category":   "ssh-brute-force",
    "severity":   "high",
    "action":     "block",
    "ttl_seconds": 86400
  }'

# Response
{
  "threat": {
    "threat_id": "TC-8A3F92B1C40E7D5A...",
    "target": "203.0.113.45",
    "action": "block",
    "expires_at": "2026-02-24T12:00:00Z"
  },
  "txid": "a4f8b2c91e03..."
}

Real-Time Threat Mitigation on the Blockchain