Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

API & Integration, DevOps,NetOps,SecOps

Reply

Identify RRs with RFC1918 IPs in Public Authoritative DNS zones

[ Edited ]
Adviser
Posts: 15
4721     0

Hello,

 

A customer that is centralizing his Public Authorative DNS zones on Infoblox woud like to identify RRs with RFC1918 IPs in Public Authoritative DNS zones.

 

A single API call allows to do that!

 

- Postman collection export attached

- details below:

Call

POST https://gm-ip/wapi/v2.9/request

body:

[{
"data": {
"view": "External",
"ipv4addr~": "(^127\\.)|(^10\\.)|(^172\\.1[6-9]\\.)|(^172\\.2[0-9]\\.)|(^172\\.3[0-1]\\.)|(^192\\.168\\.)"
},
"method": "GET",

"object": "record:host"
},
{
"data": {
"view": "External",
"ipv4addr~": "(^127\\.)|(^10\\.)|(^172\\.1[6-9]\\.)|(^172\\.2[0-9]\\.)|(^172\\.3[0-1]\\.)|(^192\\.168\\.)"
},
"method": "GET",
"object": "record:a"
},
{
"data": {
"view": "External",
"ipv4addr~": "(^127\\.)|(^10\\.)|(^172\\.1[6-9]\\.)|(^172\\.2[0-9]\\.)|(^172\\.3[0-1]\\.)|(^192\\.168\\.)"
},
"method": "GET",
"object": "recordSmiley Tonguetr"
}]

 

Output:

 

[
[
{
"_ref": "record:host/ZG5zLmhvc3QkLjQuY29tLmluZm9ibG94LnRlc3RlLXRpZ28:teste.infoblox.com/External",
"ipv4addrs": [
{
"_ref": "record:host_ipv4addr/ZG5zLmhvc3RfYWRkcmVzcyQuNC5jb20uaW5mb2Jsb3gudGVzdGUtdGlnby4xOTIuMTY4LjEuMS4:192.168.1.1/teste.infoblox.com/External",
"configure_for_dhcp": false,
"host": "teste.infoblox.com",
"ipv4addr": "192.168.1.1"
}
],
"name": "teste.infoblox.com",
"view": "External"
}
],
[
{
"_ref": "record:a/ZG5zLmJpbmRfYSQuNC5jb20uaW5mb2Jsb3gsbTIsMTkyLjE2OC4xLjQ:m2.infoblox.com/External",
"ipv4addr": "192.168.1.4",
"name": "m2.infoblox.com",
"view": "External"
}
],
[
{
"_ref": "recordSmiley Tonguetr/ZG5zLmJpbmRfcHRyJC40LmFycGEuaW4tYWRkci4xMjcuMC4wLjEubG9jYWxob3N0:1.0.0.127.in-addr.arpa/External",
"ptrdname": "localhost",
"view": "External"
}
]
]

Check out our new Tech docs website at http://docs.infobox.com for latest documentation on Infoblox products.
Showing results for 
Search instead for 
Did you mean: 

Recommended for You