For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

IP-Intelligence and IP-Shunning

Dear Reader, With this article we have arrived at the “last” layer of protection, which is actually the first one from the hud-chain point of view: Blocking on the IP layer. The idea is rather simp...
Published Jul 22, 2021
Version 1.0
AFM
ddos
dos
IP-Intelligence
ip-shunning
ipi
security
series-defense-against-ddos
Sven_Mueller's avatar
Ret. Employee
I´m a Security Solution Architect in EMEA, focused on Application and Network-Security. I act as a liaison between customers, the F5 sales team and the F5 product teams, providing a hands-on real-world perspective. Before I joined F5, I was a Security Consultant and active on HoneyNet research topics. I hold a diploma in Electrical Engineering. Beside my IT Security interests,I love driving on the Nuerburgring (Green Hell).
View Profile
Sven_Mueller's avatar
Ret. Employee
I´m a Security Solution Architect in EMEA, focused on Application and Network-Security. I act as a liaison between customers, the F5 sales team and the F5 product teams, providing a hands-on real-world perspective. Before I joined F5, I was a Security Consultant and active on HoneyNet research topics. I hold a diploma in Electrical Engineering. Beside my IT Security interests,I love driving on the Nuerburgring (Green Hell).
View Profile
Mosciski's avatar
Mosciski
Icon for Nimbostratus rankNimbostratus
Sep 03, 2021

Editors note: to the extent that this content is useful (copied from https://www.reddit.com/r/AskNetsec/comments/8pukdt/f5_ip_intelligence_how_to_check_if_im_on_their/) I'll leave it here. User has been banned for policy violation against malicious links.

---

I've been seeing a lot of websites blocking me based on my IP address (about 4, but that's more than have ever blocked me apart from the one time I ran a Tor exit node about 10 years ago). The messages tend to look like the following:

The requested URL was rejected. Please consult with your administrator.

 

Your support ID is: 6488534925906191164

I figured out that the error message is generated by a piece of software called Application Security Manager, part of a suite called BIG-IP from a company called F5. I also figured out that the feature that blocks based on IP address is called "IP Intelligence".