Blocking Malicious IP’s using Suricata

In the previous post we saw how we can install Suricata in Ubuntu, in this post let’s see how we can use Suricata to block requests from Malicious IP’s.

You can find Suricata installation guide here.

Before stating we need python and pip installed in the machine,

sudo apt-get update
sudo apt-get install python3
sudo apt-get install python3-pip

Once you have successfully installed python and pip, install requests using pip.

pip install requests

Now head to AbuseIPDB …

cybersecurity firewall ids-ips malicious suricata