Forum Discussion
dariusz_19888
Nimbostratus
NimbostratusIPI - Custom Black List Category
Hello,
Is it possible to see ip addresses contained in a custom IPI black list category?
I don't believe there is way to display all ip addresses contained in a blacklist but You can confirm if an ip address is blacklisted using:
tmsh show security ip-intelligence info address
Additionally, tmctl -w120 ip_intelligence_stat will give you number of ip addresses by category. I mentioned this command in response to the question posted in the first answer: "The question is: how to check if that category has some IPs in it?"
Yeah. There are potentially hundreds of thousands (or more!) of entries in a blacklist or whitelist, and dumping that info across an internal bottleneck poses a significant risk to system stability. That's why you can't dump the entire table but can only query for an individual address.