...
Any public DNS request that reaches Infoblox Platform and resolves to a private IP address could be a sign of a DNS rebinding attack. If the option Block DNS Rebinding attacks is enabled, Infoblox Platform will respond with "No Error - No Data" for such DNS requests, and Infoblox will remove the private IP addresses from the responses. This may result in a NODATA response if there are no other records included in the response.
Note: When the "Block DNS Rebinding Attacks" option is enabled in the security policies, DNS requests to "Private-IPs" will be included in a security policy and it blocks a DNS response with a private IP, the security log in the Infoblox Security Activity report will mark the query as being blocked by the threat feed "private-ip", " threat class "Policy," and threat property "Rebind," which can be observed in the Infoblox Security Activity reports" and action "Redirect".