Storefront edge
Apply the feed through existing perimeter controls around a public store site.
Industry blocklist
Retail and Ecommerce blocklist
Keep a storefront and its supporting administration services covered by one current scanner source list.
The coverage
What our sensors observed
Our sensors saw probes against web, mail, database, and administration services that a store may expose. When a store runs this service mix, the mapping spans its public site and the systems used to manage it.
Why use this feed
A retailer running these services can use the feed in existing edge rules around its storefront and administration systems. This keeps scanner blocks current without collecting addresses from web, mail, and database logs by hand.
In your network
Where this feed fits
Use the observed source list where your existing edge controls meet these reachable services.
Back office access
Review observed scanner sources around reachable administration and database services used to run the store.
Mail and operations
Use one list across the supporting services that otherwise leave scanner addresses scattered in separate logs.
Getting started
Put the feed to work
Choose your industry coverage, connect the feed to your existing firewall, and review exceptions with the people who run each service.
Choose coverage
Select this industry in a blocklist plan. Your selected industries and included threat categories are delivered in one continuously updated feed.
Connect your edge
Pull the feed in a supported format or use a firewall preset. Optional network aggregation can help where rule capacity is limited.
Review access
Check exceptions and existing allowlists before applying a deny rule to any service that needs outside connections.
Scope of the data
What this feed measures
Web, mail, and database services are shared by many kinds of organizations. Their probes cannot establish that a target is a retailer.
Our sensors record connections to mapped services. The resulting source list helps you review or block observed scanners; it does not reveal what those scanners intended to do.
Industry blocklists
Start blocking observed scanner sources.
Test a scanner sample in your existing security tools, then choose the coverage that fits your network.
Your next step
Choose this industry in a blocklist plan. The feed stays current as our sensors observe new scanner sources.