Forum Discussion
View IPs from list in Network Firewall -> IP Intelligence -> Blacklist
- Jul 25, 2023
Hello, if you're trying to understand whether a certain IP address is being listed in one of your Custom blacklist categories, the correct command would be tmsh show security ip-intelligence info address x.y.z.k
One important note, you should give context to the command above - if the IPI policy isn't global but it's only applied to a certain VS or to a certain RD, you should specify the VS name or RD ID in the command
root@(bigip)(cfg-sync Standalone)(Active)(/Common)(tmos)# show security ip-intelligence info virtual-server devcentral address 13.13.13.13 Security::IP Intelligence Address : 13.13.13.13 Virtual server context : /Common/devcentral IP Intelligence Sources : User-defined Whitelisted (Source) : no Whitelisted (Destination) : no Policy Action (Source) : drop Policy Action (Destination) : allow Match Type : Source Categories (Source) (1) : test_custom Categories (Destination) (0) Total records returned: 1 root@(bigip)(cfg-sync Standalone)(Active)(/Common)(tmos)#I'm not sure if there's a command that can list all IP's , I've tested myself but it looks like
Data Input Error: Wildcard IP Addresses are not supported.tmctl -w120 ip_intelligence_stat should show counters referring how many times every category was hit, per context.
Hey buzzkiller - if nobody has replied by Monday, I'll feature your question on the weekly Community Highlights to boost visibility and help get your question answered.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com