Skip to content

DNSSinkhole#

DNSSinkhole#

Author: Andrea Garavaglia, LDO-CERT
License: AGPL-V3
Version: 1.0
Supported observables types:
- domain
Registration required: N/A
Subscription required: N/A
Free subscription: N/A
Third party service: N/A

Description#

Check if a domain is sinkholed via DNS Sinkhole server

Configuration#

ip Define the DNS Sinkhole Server IP
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
sink_ip Define the sinkholed response address IP
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True

Templates samples for TheHive#

No template samples to display.