Contents

Introduction

Overview

Solution

Introduction

This document describes the IP addresses of the Umbrella block page.

Overview

When a page is blocked by the Cisco Umbrella service, our DNS resolvers display a block page instead of the page with the blocked content.  These block pages are served from Cisco Umbrella servers.  The Anycast IP address and associated block type for these servers are outlined in the table below.

Note: We do not expect these IPs to change again in the near future, but if they did change, that update would be included in this article.

Solution

Requests using the "Block Page Bypass" feature could use any of the IP addresses listed on this website: https://www.opendns.com:443/data-center-locations/

Name

Record Type

Address

Domain List Block Page

a

146.112.61.104

Domain List Block Page

aaaa

::ffff:146.112.61.104

Command and Control Callback Block Page

a

146.112.61.105

Command and Control Callback Block Page

aaaa

::ffff:146.112.61.105

Content Category or Application Block Page

a

146.112.61.106

Content Category or Application Block Page

aaaa

::ffff:146.112.61.106

Malware Block Page

a

146.112.61.107

Malware Block Page

aaaa

::ffff:146.112.61.107

Phishing Block Page

a

146.112.61.108

Phishing Block Page

aaaa

::ffff:146.112.61.108

Security Integrations Block Page, Newly Seen Domains, DNS Tunneling VPN, Potentially Harmful, & Dynamic DNS

a

146.112.61.110

Security Integrations Block Page, Newly Seen Domains, DNS Tunneling VPN, Potentially Harmful, & Dynamic DNS

aaaa

::ffff:146.112.61.110