DE

↑ ↓ select, Enter open, Esc close

Show active CrowdSec decisions and bans

harmless rootFirewalldebian, ubuntu
root@server
cscli decisions list

Shows the locally made decisions with ID, origin, affected IP, reason (scenario), action and remaining duration. Whether the ban is actually enforced depends on the installed bouncer, for example the firewall bouncer. --ip <adresse> searches for a specific address.

Note: Bans from the community blocklist only appear with the -a option.

Also searched as

  • crowdsec list banned ips
  • cscli decisions list
  • check if ip is banned crowdsec

Related one-liners

All in Firewall

Ban an IP address manually in CrowdSec

#cscli decisions add --ip 203.0.113.25 --duration 24h --reason 'manual ban'
cautionFirewall

Show CrowdSec alerts

#cscli alerts list
harmlessFirewall

Show CrowdSec metrics for logs, parsers and bouncers

#cscli metrics
harmlessFirewall

Unban an IP address in CrowdSec

#cscli decisions delete --ip 198.51.100.10
cautionFirewall

Add an IP address to an nftables blocklist

#nft add element inet filter blocklist '{ 203.0.113.25 }'
cautionFirewall

Block an IP address or subnet with ufw

#ufw insert 1 deny from 203.0.113.0/24
cautionFirewall

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.