misp-warninglists/lists/shadowserver/list.json at main · MISP/misp-warninglists · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
{
  "description": "List of Shadowserver IP-Ranges. Potentially associated with Shadowserver scans. based on [https://bgp.he.net/search?search%5Bsearch%5D=shadowserver&commit=Search]",
  "list": [
    "108.165.44.0/24",
    "146.19.20.0/24",
    "154.16.223.0/24",
    "154.16.230.0/24",
    "154.16.240.0/24",
    "154.16.250.0/24",
    "154.9.2.0/23",
    "162.249.64.0/21",
    "166.0.195.0/24",
    "179.61.168.0/24",
    "181.214.234.0/24",
    "181.214.245.0/24",
    "181.214.62.0/24",
    "181.214.90.0/24",
    "181.215.138.0/24",
    "181.215.145.0/24",
    "181.215.208.0/24",
    "181.41.192.0/24",
    "185.181.1.0/24",
    "185.91.204.0/24",
    "191.101.103.0/24",
    "191.96.127.0/24",
    "191.96.20.0/24",
    "191.96.22.0/24",
    "2001:550:d0c::/48",
    "45.143.160.0/24",
    "50.114.88.0/24"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-dst|port",
    "ip-src|port"
  ],
  "name": "Shadowserver IP-Ranges, pot. used for Scanning",
  "type": "cidr",
  "version": 1
}