Learn the Umbrella Block Page IP Addresses

Available Languages

Download Options

  • PDF     (6.5 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (79.0 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (63.3 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:September 5, 2025
Document ID:224799

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes the IP addresses of the Umbrella block page.

    Overview

    When a page is blocked by the Cisco Umbrella service, our DNS resolvers display a block page instead of the page with the blocked content.  These block pages are served from Cisco Umbrella servers.  The Anycast IP address and associated block type for these servers are outlined in the table below.

    note-icon

    Note: We do not expect these IPs to change again in the near future, but if they did change, that update would be included in this article.

    Solution

    Requests using the "Block Page Bypass" feature could use any of the IP addresses listed on this website: https://www.opendns.com:443/data-center-locations/
     Name  Record Type  Address
    Domain List Block Page  a  146.112.61.104
    Domain List Block Page  aaaa  ::ffff:146.112.61.104
    Command and Control Callback Block Page  a  146.112.61.105
    Command and Control Callback Block Page  aaaa  ::ffff:146.112.61.105
    Content Category or Application Block Page  a  146.112.61.106
    Content Category or Application Block Page  aaaa  ::ffff:146.112.61.106
    Malware Block Page  a  146.112.61.107
    Malware Block Page  aaaa  ::ffff:146.112.61.107
    Phishing Block Page  a  146.112.61.108
    Phishing Block Page  aaaa  ::ffff:146.112.61.108
    Security Integrations Block Page, Newly Seen Domains, DNS Tunneling VPN, Potentially Harmful, & Dynamic DNS  a  146.112.61.110
    Security Integrations Block Page, Newly Seen Domains, DNS Tunneling VPN, Potentially Harmful, & Dynamic DNS  aaaa

     ::ffff:146.112.61.110

    Revision History

    Revision Publish Date Comments
    1.0
    05-Sep-2025
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products