DE

↑ ↓ select, Enter open, Esc close

Show CrowdSec alerts

harmless rootFirewalldebian, ubuntu
root@server
cscli alerts list

Shows the most recently triggered alerts with ID, value (usually the IP), scenario, country, AS and time. This tells you why an IP was banned. cscli alerts inspect <id> -d shows details of an alert, including the log lines that triggered it.

Also searched as

  • crowdsec why was ip banned
  • cscli alerts list
  • show crowdsec alerts

Related one-liners

All in Firewall

Ban an IP address manually in CrowdSec

#cscli decisions add --ip 203.0.113.25 --duration 24h --reason 'manual ban'
cautionFirewall

Show active CrowdSec decisions and bans

#cscli decisions list
harmlessFirewall

Show CrowdSec metrics for logs, parsers and bouncers

#cscli metrics
harmlessFirewall

Unban an IP address in CrowdSec

#cscli decisions delete --ip 198.51.100.10
cautionFirewall

Add an IP address to an nftables blocklist

#nft add element inet filter blocklist '{ 203.0.113.25 }'
cautionFirewall

Allow a port only from a specific IP with ufw

#ufw allow from 198.51.100.0/24 to any port 22 proto tcp
cautionFirewall

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.