BIG-IP AFM Blacklisting Magic
Have you ever wondered which IP addresses floating around out there on the Internet are the good ones? The benign ones? The malicious ones? You get the idea. Peter Silva recently published an...
Published Apr 01, 2016
Version 1.0
The IP Intelligence Feed list is updated regularly from external feeds (every 5 minutes), and it's stored at /var/IpRep/F5IpRep.dat
Here's a document that outlines the IP Intelligence process and details...it's a little bit dated, but it might be helpful: https://support.f5.com/kb/en-us/products/big-ip-afm/manuals/product/network-firewall-policies-implementations-11-6-0/8.html