misp-warninglists/lists/rapid7-nt-scanning/list.json at master · elhoim/misp-warninglists · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
{
  "description": "List containing IP's associated with the Rapid7 scanners. This scanner CIDR range is extracted from CIRCL Network Telescope analysis on 2026/08/10",
  "list": [
    "109.123.117.228/30",
    "109.123.117.232/29",
    "109.123.117.240/29",
    "109.123.117.248/30",
    "109.123.117.252/31",
    "109.123.117.254/32",
    "146.185.25.164/30",
    "146.185.25.168/29",
    "146.185.25.176/29",
    "146.185.25.184/30",
    "146.185.25.188/31",
    "146.185.25.190/32",
    "88.202.190.132/30",
    "88.202.190.136/29",
    "88.202.190.144/29",
    "88.202.190.152/30",
    "88.202.190.156/31",
    "88.202.190.158/32"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-dst|port",
    "ip-src|port"
  ],
  "name": "Rapid7 IP Ranges Used for Scanning",
  "type": "cidr",
  "version": 26081010
}