Awareness services
Review observed scanners around reachable operational awareness endpoints.
Industry blocklist
Defense and Military blocklist
Give operators of specialized messaging services a relevant source list for reviewing exposed edges.
The coverage
What our sensors observed
Our sensors saw probes against tactical awareness, certificate enrollment, and specialized messaging services. These narrow interfaces are used to exchange and manage operational data.
Why use this feed
Teams running these systems can use the feed to review sources seen testing similar interfaces. Add it to edge rules around exposed services while keeping existing access controls for authorized users.
In your network
Where this feed fits
Use the observed source list where your existing edge controls meet these reachable services.
Enrollment edges
Use the feed alongside existing enrollment and identity controls at certificate service boundaries.
Messaging exchange
Apply perimeter review to specialized messaging interfaces that have authorized outside connections.
Getting started
Put the feed to work
Choose your industry coverage, connect the feed to your existing firewall, and review exceptions with the people who run each service.
Choose coverage
Select this industry in a blocklist plan. Your selected industries and included threat categories are delivered in one continuously updated feed.
Connect your edge
Pull the feed in a supported format or use a firewall preset. Optional network aggregation can help where rule capacity is limited.
Review access
Check exceptions and existing allowlists before applying a deny rule to any service that needs outside connections.
Scope of the data
What this feed measures
The mapping covers specialized awareness and messaging services. A probe against one of them does not identify a military network or its users.
Our sensors record connections to mapped services. The resulting source list helps you review or block observed scanners; it does not reveal what those scanners intended to do.
Industry blocklists
Start blocking observed scanner sources.
Test a scanner sample in your existing security tools, then choose the coverage that fits your network.
Your next step
Choose this industry in a blocklist plan. The feed stays current as our sensors observe new scanner sources.