Forum Discussion

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Oct 07, 2020
Solved

IP Intelligence

Hi, how to export IP Intelligence database from F5 ? is it possible to view all ip under each category? if yes then how ?   since the update is refreshed every five minutes , does this will ...
AFM
BIG-IP
devops
IP Address Intelligence
security
  • Dario_Garrido's avatar
    Dario_Garrido
    Oct 09, 2020

    Hello Blue.

     

    "so is it possible to check all ip under each category from portal?"

    No, it's not possible. IP Reputation service is provided by an external company (brightcloud) and their bussiness lays on not disclousing this info.

     

    "so there is no option to check the ip from GUI , i have to do all action from CLI, right?"

    No, there is not. But you can check from internet at

    https://www.brightcloud.com/tools/url-ip-lookup.php

     

    "in regards to DB status, it mention how many ips has been added , but no details related to how many ip has been removed."

    It's much common to include IP in the blacklist than remove them.

     

    Please, don't forget to mark my answer as the best to help me for the contribution.

     

    Regards,

    Dario.

THE_BLUE's avatar
THE_BLUE
Icon for Cirrostratus rankCirrostratus
Oct 08, 2020

Hi Dario,

i want to export the DB let say in cvs format for example to check all ips, but i think it is not possible.

so is it possible to check all ip under each category from portal?

so there is no option to check the ip from GUI , i have to do all action from CLI, right?

 

in regards to DB status, it mention how many ips has been added , but no details related to how many ip has been removed.

 

 

thanks

Dario_Garrido's avatar
Dario_Garrido
Icon for Noctilucent rankNoctilucent
Oct 09, 2020

Hello Blue.

 

"so is it possible to check all ip under each category from portal?"

No, it's not possible. IP Reputation service is provided by an external company (brightcloud) and their bussiness lays on not disclousing this info.

 

"so there is no option to check the ip from GUI , i have to do all action from CLI, right?"

No, there is not. But you can check from internet at

https://www.brightcloud.com/tools/url-ip-lookup.php

 

"in regards to DB status, it mention how many ips has been added , but no details related to how many ip has been removed."

It's much common to include IP in the blacklist than remove them.

 

Please, don't forget to mark my answer as the best to help me for the contribution.

 

Regards,

Dario.