Skip to main content

Industry blocklist

Financial Infrastructure blocklist

Add observed scanner sources to the edge controls around sensitive transaction and supporting services.

The coverage

What our sensors observed

Our sensors saw probes against trading interfaces, market data services, payment systems, remote access, and databases. The mapping covers transaction services and the supporting systems teams use to operate them.

Why use this feed

For an operator exposing those services, the feed adds observed scanner sources to perimeter rules. Keep existing allowlists and access controls in place for interfaces that handle sensitive operations.

In your network

Where this feed fits

Use the observed source list where your existing edge controls meet these reachable services.

Transaction interfaces

Review the feed at reachable payment and trading edges alongside existing allowlists.

Market data

Apply a current source list where public data services and restricted operations meet.

Remote administration

Use the feed around access paths to financial systems without replacing the controls that authorize users.

Getting started

Put the feed to work

Choose your industry coverage, connect the feed to your existing firewall, and review exceptions with the people who run each service.

Choose coverage

Select this industry in a blocklist plan. Your selected industries and included threat categories are delivered in one continuously updated feed.

Connect your edge

Pull the feed in a supported format or use a firewall preset. Optional network aggregation can help where rule capacity is limited.

Review access

Check exceptions and existing allowlists before applying a deny rule to any service that needs outside connections.

Scope of the data

What this feed measures

Some mapped remote access and database services are common outside finance. The feed indicates observed probes, not a verified financial target.

Our sensors record connections to mapped services. The resulting source list helps you review or block observed scanners; it does not reveal what those scanners intended to do.

Industry blocklists

Start blocking observed scanner sources.

Test a scanner sample in your existing security tools, then choose the coverage that fits your network.

Your next step

Choose this industry in a blocklist plan. The feed stays current as our sensors observe new scanner sources.