{"id":7490,"date":"2022-03-01T08:31:48","date_gmt":"2022-03-01T16:31:48","guid":{"rendered":"https:\/\/blogs.infoblox.com\/?p=7490"},"modified":"2022-10-20T13:20:26","modified_gmt":"2022-10-20T20:20:26","slug":"infoblox-response-to-ukraine-crisis","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/","title":{"rendered":"Infoblox Response to Ukraine Crisis"},"content":{"rendered":"

Summary<\/strong><\/h3>\n

Sometimes events occur that capture the world’s consolidated attention.\u00a0 These last several years have had more than its share of such events, including the global pandemic and now the conflict in Ukraine.\u00a0 Unfortunately, there are many actors that strive to take advantage of this attention for nefarious purposes. Frequently they are just opportunistic threat actors looking to exploit chaos for their own purposes but also include more sophisticated criminal enterprises and governments.<\/span><\/p>\n

Collateral damage from cyber attacks can extend far from their initial target.\u00a0 For example, the NotPetya malware variant appeared to initially target Ukrainian interests in 2017, disabling the Chernobyl nuclear power plant and several Ukrainian ministries and banks and metro systems. However, it quickly spread to organizations outside of Ukraine including Maersk, Merck & Co amongst others.\u00a0<\/span><\/p>\n

Regardless of the actors involved, organizations have to protect themselves from the actions taken by these actors.\u00a0 This document will describe some of the things Infoblox is doing to help, and some of the things you can do with Infoblox in order to protect your organization from the actions taking place throughout the world.\u00a0<\/span><\/p>\n

What is Infoblox Doing?<\/strong><\/h3>\n

Threat Indicators<\/h4>\n

As part of Infoblox daily operations, we monitor any trending topics in order to quickly identify actors looking to exploit interest in the events in Ukraine. These may be targeted or even broadly-distributed phishing attacks that drive users towards scam sites or even sites used for the distribution of malware and ransomware.\u00a0 Infoblox has identified a decided increase in such activity recently, and we continue to see new sites show up frequently.\u00a0 While these sites may lead to malware, or sometimes lure users to make donations that will never reach their intended target, all of these are malicious in nature regardless of the originating group.<\/span><\/p>\n

In addition to these indicators of compromise that we identify through our direct research, the cybersecurity community has been extremely active and transparent in their efforts to share new threat intelligence. Infoblox strives to include as much of this information in our threat feeds as possible. This means not only monitoring for such activity, but also vetting these indicators to ensure the shared indicator isn\u2019t a false positive that could disrupt legitimate crisis response activities.<\/span><\/p>\n

Infoblox is committed to the ongoing monitoring of such indicators, and to continue to refresh our existing threat feeds with this information as the events progress.<\/span><\/p>\n

Policy Feeds<\/h4>\n

Infoblox maintains two policy feeds in the product today that some customers use to further prevent possible attacks:\u00a0 EECN IP (Eastern Europe and China), as well as Sanctions IP.\u00a0<\/span><\/p>\n

The Infoblox EECN IP feed originally included any IP address hosted in the following nations: Belarus, China, Moldova, Russia, Turkey and Ukraine.\u00a0 Due to the humanitarian concerns in Ukraine, Infoblox has decided to <\/span>temporarily remove Ukraine<\/span><\/i> from this list. Users wishing to block Russian IP addresses may enable this feed in blocking mode. However, understand that blocking EECN may have unintended consequences, as this blocks all traffic from those countries, and would include China and Turkey (countries in which organizations may have legitimate business interests). Infoblox is working to create a version of this feed that will still include Ukraine, providing users with the choice of blocking or not blocking Ukraine when using EECN.<\/span><\/p>\n

Similarly, Infoblox also has a Sanctions IP feed that was useful in blocking countries on the sanctions list.\u00a0 Unfortunately, this originally included Ukraine, so Infoblox has decided to modify the Sanctions IP feed to only include sanctioned countries for which an embargo has been levied.\u00a0 As a result, the following countries are included in this list:\u00a0 Cuba, Iran, Myanmar, North Korea, Syria, and Venezuela.\u00a0 While this no longer blocks Ukraine, the new definition also does not include Russia. Infoblox will be monitoring the changing sanctions and adjust this list as needed.<\/p>\n

Infoblox Infrastructure<\/h4>\n

Infoblox understands the criticality of the secure DNS resolver service provided as part BloxOne Threat Defense and is taking the necessary steps to remain at a high level of alertness. With reports of cyber attacks, often related to Distributed Denial of Service (DDOS), Infoblox is taking additional measures to ensure the resiliency of the service and operations during these unique circumstances.<\/span><\/p>\n

What can you do with Infoblox?<\/strong><\/h3>\n

Existing users can take advantage of the protection already provided through the normal threat feeds, including Base, Antimalware, Antimalware_IP, Ransomeware, etc, as new indicators trying to opportunistically take advantage of the Ukraine Crisis are added to the appropriate feeds as they are discovered.<\/span><\/p>\n

Consider using the policy feeds EECN_IP and Sanctioned_IP.\u00a0 These feeds block IP addresses known to reside in Russia, but may also block a number of other nations\u2019 IP addresses with which your organization may have legitimate business.\u00a0 Having a good understanding of the sites with which your organization interacts is important before implementing either of these feeds in blocking mode.\u00a0 For example, while EECN would block Russia, it would also block China, which may impact mission-critical communications.\u00a0 Similarly, the Sanctions feed includes 19 different countries for which economic sanctions exist.\u00a0 If you are considering the implementation of either of these feeds in blocking mode, it may be advisable to implement the feed in \u201clogging mode\u201d for a week or longer to determine if there are any mission critical sites that may impact your business.\u00a0<\/span><\/p>\n

Infoblox frequently releases <\/span>Cyber Campaign Briefs (CCBs)<\/span><\/a> to provide in-depth detail about new indicators we have discovered and provide timely details about recent threat campaigns.\u00a0<\/span><\/p>\n

Often the goal of such attacks is to create a platform for which to launch a Distributed Denial of Service Attack (DDoS Attack).\u00a0 These attacks attempt to disrupt services such as websites by flooding them with requests that overwhelm the resources available to it.\u00a0 Infoblox\u2019s\u00a0 <\/span>Advanced DNS Protection<\/span><\/a> (ADP) can help organizations protect themselves from DNS attacks as well as DDoS attacks.\u00a0 If you suspect your organization is a likely target of such an attack, you may want to consider protecting yourself with ADP.<\/span><\/p>\n

Finally, if you are not a current BloxOne Threat Defense user, Infoblox is providing a limited short-term offer to provide free access to our BloxOne Threat Defense product\u00a0 in order to better protect your organization. Access to this program is available by contacting your Infoblox representative or by accessing the online form <\/span>here<\/span><\/a>.<\/span><\/p>\n

Conclusion<\/strong><\/h3>\n

Threat actors use the chaos of current events to opportunistically take advantage of users\u2019 attention.\u00a0 In times of conflict, especially in the 21st century, military campaigns are frequently accompanied by cyber attacks. Unfortunately, such cyber attacks can also spill over to impact other unintended victims.\u00a0 Whether you face a threat actor taking advantage of the disruption,<\/span>or are getting impacted by the crossfire of another attack, the impact to your business is real.\u00a0 Infoblox has mobilized to protect the community from all related attacks, and is extending its resources to help you protect your organization.\u00a0<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Summary Sometimes events occur that capture the world’s consolidated attention.\u00a0 These last several years have had more than its share of such events, including the global pandemic and now the conflict in Ukraine.\u00a0 Unfortunately, there are many actors that strive to take advantage of this attention for nefarious purposes. Frequently they are just opportunistic threat […]<\/p>\n","protected":false},"author":361,"featured_media":2574,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[2],"tags":[646,647,341,641,30,360],"class_list":{"0":"post-7490","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-security","8":"tag-ukraine","9":"tag-russia","10":"tag-russian-state-sponsored","11":"tag-russian-cyber-attack","12":"tag-dns","13":"tag-dns-security","14":"entry"},"acf":[],"yoast_head":"\nInfoblox Response to Ukraine Crisis<\/title>\n<meta name=\"description\" content=\"Infoblox is dedicated to empowering the world in more ways than network security. Find out how Infoblox is helping the country of Ukraine during this crisis.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Infoblox Response to Ukraine Crisis\" \/>\n<meta property=\"og:description\" content=\"Infoblox is dedicated to empowering the world in more ways than network security. Find out how Infoblox is helping the country of Ukraine during this crisis.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/\" \/>\n<meta property=\"og:site_name\" content=\"Infoblox Blog\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-01T16:31:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-10-20T20:20:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/480288900-660x454-2-1.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"660\" \/>\n\t<meta property=\"og:image:height\" content=\"454\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Druce MacFarlane\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Druce MacFarlane\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/\"},\"author\":{\"name\":\"Druce MacFarlane\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/6d42d673612f839efc3550add8ee84d5\"},\"headline\":\"Infoblox Response to Ukraine Crisis\",\"datePublished\":\"2022-03-01T16:31:48+00:00\",\"dateModified\":\"2022-10-20T20:20:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/\"},\"wordCount\":1145,\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/480288900-660x454-2-1.jpg\",\"keywords\":[\"Ukraine\",\"Russia\",\"Russian state-sponsored\",\"russian cyber attack\",\"DNS\",\"DNS Security\"],\"articleSection\":[\"Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/\",\"name\":\"Infoblox Response to Ukraine Crisis\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/480288900-660x454-2-1.jpg\",\"datePublished\":\"2022-03-01T16:31:48+00:00\",\"dateModified\":\"2022-10-20T20:20:26+00:00\",\"description\":\"Infoblox is dedicated to empowering the world in more ways than network security. Find out how Infoblox is helping the country of Ukraine during this crisis.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/480288900-660x454-2-1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/480288900-660x454-2-1.jpg\",\"width\":660,\"height\":454,\"caption\":\"Help Us to Help You Get to the Next Big Thing in DNS Security\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/security\\\/infoblox-response-to-ukraine-crisis\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security\",\"item\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/category\\\/security\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Infoblox Response to Ukraine Crisis\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"name\":\"infoblox.com\\\/blog\\\/\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#organization\",\"name\":\"Infoblox\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"contentUrl\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/wp-content\\\/uploads\\\/infoblox-logo-2.svg\",\"width\":137,\"height\":30,\"caption\":\"Infoblox\"},\"image\":{\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/#\\\/schema\\\/person\\\/6d42d673612f839efc3550add8ee84d5\",\"name\":\"Druce MacFarlane\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_361_1639437222-96x96.jpg\",\"url\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_361_1639437222-96x96.jpg\",\"contentUrl\":\"https:\\\/\\\/blogs.infoblox.com\\\/wp-content\\\/uploads\\\/avatar_user_361_1639437222-96x96.jpg\",\"caption\":\"Druce MacFarlane\"},\"description\":\"Druce MacFarlane is the Sr. Product Manager for Threat Intelligence and Analytics here at Infoblox. He has worked in cybersecurity for 15 years.\",\"url\":\"https:\\\/\\\/www.infoblox.com\\\/blog\\\/author\\\/druce-macfarlane\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Infoblox Response to Ukraine Crisis","description":"Infoblox is dedicated to empowering the world in more ways than network security. Find out how Infoblox is helping the country of Ukraine during this crisis.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/","og_locale":"en_US","og_type":"article","og_title":"Infoblox Response to Ukraine Crisis","og_description":"Infoblox is dedicated to empowering the world in more ways than network security. Find out how Infoblox is helping the country of Ukraine during this crisis.","og_url":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/","og_site_name":"Infoblox Blog","article_published_time":"2022-03-01T16:31:48+00:00","article_modified_time":"2022-10-20T20:20:26+00:00","og_image":[{"width":660,"height":454,"url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/480288900-660x454-2-1.jpg","type":"image\/jpeg"}],"author":"Druce MacFarlane","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Druce MacFarlane","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/#article","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/"},"author":{"name":"Druce MacFarlane","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/6d42d673612f839efc3550add8ee84d5"},"headline":"Infoblox Response to Ukraine Crisis","datePublished":"2022-03-01T16:31:48+00:00","dateModified":"2022-10-20T20:20:26+00:00","mainEntityOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/"},"wordCount":1145,"publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/480288900-660x454-2-1.jpg","keywords":["Ukraine","Russia","Russian state-sponsored","russian cyber attack","DNS","DNS Security"],"articleSection":["Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/","url":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/","name":"Infoblox Response to Ukraine Crisis","isPartOf":{"@id":"https:\/\/www.infoblox.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/#primaryimage"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/#primaryimage"},"thumbnailUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/480288900-660x454-2-1.jpg","datePublished":"2022-03-01T16:31:48+00:00","dateModified":"2022-10-20T20:20:26+00:00","description":"Infoblox is dedicated to empowering the world in more ways than network security. Find out how Infoblox is helping the country of Ukraine during this crisis.","breadcrumb":{"@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/#primaryimage","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/480288900-660x454-2-1.jpg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/480288900-660x454-2-1.jpg","width":660,"height":454,"caption":"Help Us to Help You Get to the Next Big Thing in DNS Security"},{"@type":"BreadcrumbList","@id":"https:\/\/www.infoblox.com\/blog\/security\/infoblox-response-to-ukraine-crisis\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.infoblox.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Security","item":"https:\/\/www.infoblox.com\/blog\/category\/security\/"},{"@type":"ListItem","position":3,"name":"Infoblox Response to Ukraine Crisis"}]},{"@type":"WebSite","@id":"https:\/\/www.infoblox.com\/blog\/#website","url":"https:\/\/www.infoblox.com\/blog\/","name":"infoblox.com\/blog\/","description":"","publisher":{"@id":"https:\/\/www.infoblox.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.infoblox.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.infoblox.com\/blog\/#organization","name":"Infoblox","url":"https:\/\/www.infoblox.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","contentUrl":"https:\/\/www.infoblox.com\/blog\/wp-content\/uploads\/infoblox-logo-2.svg","width":137,"height":30,"caption":"Infoblox"},"image":{"@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.infoblox.com\/blog\/#\/schema\/person\/6d42d673612f839efc3550add8ee84d5","name":"Druce MacFarlane","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_361_1639437222-96x96.jpg","url":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_361_1639437222-96x96.jpg","contentUrl":"https:\/\/blogs.infoblox.com\/wp-content\/uploads\/avatar_user_361_1639437222-96x96.jpg","caption":"Druce MacFarlane"},"description":"Druce MacFarlane is the Sr. Product Manager for Threat Intelligence and Analytics here at Infoblox. He has worked in cybersecurity for 15 years.","url":"https:\/\/www.infoblox.com\/blog\/author\/druce-macfarlane\/"}]}},"_links":{"self":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/7490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/users\/361"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/comments?post=7490"}],"version-history":[{"count":5,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/7490\/revisions"}],"predecessor-version":[{"id":8164,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/posts\/7490\/revisions\/8164"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media\/2574"}],"wp:attachment":[{"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/media?parent=7490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/categories?post=7490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infoblox.com\/blog\/wp-json\/wp\/v2\/tags?post=7490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}