How to clear/flush the Imunify360 Black List?

Issue

How to clear/flush the Imunify360 Black List?

Environment

• Imunify360

Solution

1) Dump the list of IPs from the Black List:

# imunify360-agent ip-list local list --purpose drop --by-type ip --limit 10000 | awk '! /IP/ { print $(NF-6); }' > black-list.txt

Please note that you can set the --limit to 20k or 30k, but keep in mind that operating such a number of IPs may take some time, so it's better to divide it into several portions.

2) Use the following command to delete the IP using the created TXT file to perform a bulk action:

<black-list.txt xargs imunify360-agent ip-list local delete --purpose drop

Clearing the Black List should be reasonable to avoid repetitive attacks from the addresses that used to be blacklisted previously.

Useful links

• https://docs.imunify360.com/command_line_interface/#blacklist