DNS is a control plane of the Internet
No more ads, no more malware and more privacy if you own your DNS and enable DNS Security.
Free DNS Firewall (RPZ) feeds for
New DNS Firewall feed blox-malicious.ioc2rpz is powered by Infoblox's Threat Intelligence Group (TIG). TIG detects, curates, and publishes threat intelligence data pertaining to relevant cyber campaigns. TIG is sharing indicators of compromise (IOCs) related to threats that are of high interest to the cyber security community through this public repository.
The feed includes all shared malware, phishing, scams, suspicious domains, DDGA, malvertising, smishing domains including newly identified DNS beacons (a variant of an open source RAT called Pupy) connecting to Russian C2s.
The feed also includes IoCs related to the war in Ukraine and earthquake in Türkiye so blox-turkiye-earthquake.ioc2rpz and blox-ukraine-russia-conflict.ioc2rpz will be deprecated on June 1st 2023.
ioc2rpz community is a portal which provides free of charge DNS Firewall (or Response Policy Zone) feeds. The DNS Firewall feeds are based on publicly available threat intelligence(TI). The TI feeds are maintained by 3rd party communities or companies and only a limited number of indicatores were whitelisted. We are not validating the TI feeds on false positives.
DNS Firewall feeds provided "as-is". They may contain false positives.
If you have any questions, comments, proposals or want to provide any feedback please contact us.
DNS Firewall or DNS Response Policy Zones is a DNS server feature that allows to overlay custom information on top of the global DNS to provide alternate responses to DNS queries.
The prime motivation for creating this feature was to protect users from badness on the Internet related to known-malicious global identifiers such as host names, domain names, IP addresses, or nameservers.
Criminals tend to keep using the same identifiers until they are taken away from them. Unfortunately, the Internet security industry's ability to take down criminal infrastructure at domain registries, hosting providers or ISPs is not timely enough to be effective.
Using DNS Firewall, a network or DNS administrator can implement their own protection policies base based on reputation feeds from security service providers on a near-real-time basis.
More information available at dnsrpz.info
News | ioc2rpz technology | Terms & conditions | Donate | Contact us