Skip to main content

Industry blocklist

Government and Public Sector blocklist

Bring current scanner sources into perimeter review for reachable gateways and remote access services.

The coverage

What our sensors observed

Our sensors saw probes against security gateways and remote access services. The current mapping is tied to these exposed entry points and does not cover every public service.

Why use this feed

If a public network exposes these gateways or remote access services, apply the feed in existing firewall rules. Teams can review repeat probers at the perimeter before they reach the systems behind those entry points.

In your network

Where this feed fits

Use the observed source list where your existing edge controls meet these reachable services.

Security gateways

Review repeat probers at the edge appliances already protecting public network services.

Remote access

Apply the feed around reachable remote access paths while maintaining approved user and device controls.

Distributed offices

Use one source list across sites that expose the same types of gateway instead of collecting addresses office by office.

Getting started

Put the feed to work

Choose your industry coverage, connect the feed to your existing firewall, and review exceptions with the people who run each service.

Choose coverage

Select this industry in a blocklist plan. Your selected industries and included threat categories are delivered in one continuously updated feed.

Connect your edge

Pull the feed in a supported format or use a firewall preset. Optional network aggregation can help where rule capacity is limited.

Review access

Check exceptions and existing allowlists before applying a deny rule to any service that needs outside connections.

Scope of the data

What this feed measures

The current mapping is limited to edge gateways and remote access. These services do not establish whether a scanned target belongs to the public sector.

Our sensors record connections to mapped services. The resulting source list helps you review or block observed scanners; it does not reveal what those scanners intended to do.

Industry blocklists

Start blocking observed scanner sources.

Test a scanner sample in your existing security tools, then choose the coverage that fits your network.

Your next step

Choose this industry in a blocklist plan. The feed stays current as our sensors observe new scanner sources.