Block Page IP Addresses

When Umbrella blocks a domain or URL, our DNS resolvers display a block page instead of the requested page. Umbrella provides different types of block page depending on the security event. The following table describes the block page types, record types, and Anycast IP addresses for the Umbrella servers.

Block Page Type	DNS Record Type	Availability Zone A	Availability Zone B	Availability Zone C
Domain List	A	18.254.227.106	18.254.158.63	18.254.126.183
Suspicious	A	18.252.1.215	18.254.228.240	18.254.196.162
Security	A	18.253.103.244	18.254.66.172	18.252.161.146
Malware	A	18.252.205.241	18.254.78.172	18.252.241.40
Block	A	18.254.204.103	18.253.188.229	18.253.253.148
Phishing	A	18.254.211.191	18.254.236.30	18.253.189.57
Botnet	A	18.254.64.180	18.254.164.64	18.254.156.88

Redirect to a Custom Block Page < Block Page IP Addresses > Network Tunnel Group Configuration