Hi all i am trying to put the IP’s that are trying to log into my MK into a blacklist. But for that to happen i need to grep their IP from the logs. My log line for that kind of events looks like:
oct/20/2015 21:16:27 Router Management input: in:pppoe-out1 out:(none), proto TCP (SYN), 177.94.198.157:3317->xxx.xx.xx.xx:80, len 60
i want to be able to grep / keep in var or array the IP 177.94.198.157 or any other that tries to log into my MK.
Please help 
vers: 6.32.3
Isn’t it better to use firewall filter rules to add it do dynamic list and then to process such list ?
FilterList2.PNG
FilterList.PNG
HI Bartoszp
thank you for the proposed solution, i did archive what i wanted. it is now working like a charm for me.