Overview
When a page is blocked by the Cisco Umbrella service, our DNS resolvers display a block page instead of the page with the blocked content. These block pages are served from Cisco Umbrella servers. The anycast IP address and associated block type for these servers are outlined in the table below.
Note:
We do not expect these IPs to change again in the near future, but if they did change, that update would be included in this article.
Solution
Requests using the “Block Page Bypass” feature could use any of the IP addresses listed on the following website: https://www.opendns.com/data-center-locations/
| Name | Record Type | Address |
| Domain List Block Page | a | 146.112.61.104 |
| Domain List Block Page | aaaa | ::ffff:146.112.61.104 |
| Command and Control Callback Block Page | a | 146.112.61.105 |
| Command and Control Callback Block Page | aaaa | ::ffff:146.112.61.105 |
| Content Category Block Page | a | 146.112.61.106 |
| Content Category Block Page | aaaa | ::ffff:146.112.61.106 |
| Malware Block Page | a | 146.112.61.107 |
| Malware Block Page | aaaa | ::ffff:146.112.61.107 |
| Phishing Block Page | a | 146.112.61.108 |
| Phishing Block Page | aaaa | ::ffff:146.112.61.108 |
| Suspicious Response Block Page | a | 146.112.61.109 |
| Suspicious Response Block Page | aaaa | ::ffff:146.112.61.109 |
| Security Integrations Block Page | a | 146.112.61.110 |
| Security Integrations Block Page | aaaa |
::ffff:146.112.61.110 |