NGIPS : looking for all blacklist ip

[meetvishaal]

Hi Folks ... i am having issue with NGIPS which is managed by FMC . I just want to see all the ip address blacklisted by NGIPS ?

In event i have just performed extended search option but not able to find any block ip address . Please help

I want consolidated blacklisted ip address.

[Sheraz.Salim]

black list ip address are from cisco talos secuity intelligence. unless you have a text file (blacklist) you upload in fmc in order to stop user to go these your define blacklist ip address.

best is check talos webiste  https://www.talosintelligence.com/

[meetvishaal]

i just want to know how many ip address is blocked by my NGIPS.

[Sheraz.Salim · Accepted solution]

go to your FMC and click Analysis --->connecton--->security intelligence event

[meetvishaal]

Sir I have followed these steps but when i go for some specific time period than no block ip has shown. Like if i want to see the all the blocked ip from 2 January 2018 to 16 January 2019 than it is not showing anything. Please Guide me and share with me the steps.
Thanks

[meetvishaal]

Sir thanks for your reply .. but i want to see how many ip address is blacklisted by my NGIPS.

[Sheraz.Salim]

oh I see. in that case you have to go in reporting and create a custom report according to your requirements. just as an example

[meetvishaal]

Can i get all the blocked ip details here from required time period ?

[Sheraz.Salim]

Hi I just look into this unfortunately no you can not get the block ip addresses list. which make sense. as the Talos blacklist ip address are dynamic (mean its change frequently). 

how ever you can get the report in regards to your client ip address who its communicated in the past.

please do not forget to answer the post if i am helpful

[Abheesh Kumar · Accepted solution]

Hi,

If you would like to see which all are the cisco talos black listed IP you can check below link

IP Black-List

Check the Security intelligence events on FMC to see the black listed blocked IP's in your environment. 

Hope This Helps

Abheesh