push update

Paul Jung (Thanat0s) · Paul Jung (Thanat0s) · commit 336e506929fb · 2025-12-10T23:40:42.000+01:00
diff --git a/lists/alphastrike-research-nt-scanning/list.json b/lists/alphastrike-research-nt-scanning/list.json
@@ -18,5 +18,5 @@
   ],
   "name": "Alphastrike research IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/bufferover-nt-scanning/list.json b/lists/bufferover-nt-scanning/list.json
@@ -32,5 +32,5 @@
   ],
   "name": "Bufferover IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/coalition-signals-intelligence-nt-scanning/list.json b/lists/coalition-signals-intelligence-nt-scanning/list.json
@@ -773,5 +773,5 @@
   ],
   "name": "Coalition signals intelligence IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/cybergreen-nt-scanning/list.json b/lists/cybergreen-nt-scanning/list.json
@@ -12,5 +12,5 @@
   ],
   "name": "Cybergreen IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/cyberresilience-nt-scanning/list.json b/lists/cyberresilience-nt-scanning/list.json
@@ -26,5 +26,5 @@
   ],
   "name": "Cyberresilience IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/cypex-nt-scanning/list.json b/lists/cypex-nt-scanning/list.json
@@ -18,5 +18,5 @@
   ],
   "name": "Cypex IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/f6-nt-scanning/list.json b/lists/f6-nt-scanning/list.json
@@ -0,0 +1,19 @@
+{
+  "description": "List containing IP's associated with the F6 scanners. This scanner CIDR range is extracted from CIRCL Network Telescope analysis on 2025/12/10",
+  "list": [
+    "176.32.195.85/32",
+    "46.161.50.108/32",
+    "5.101.64.6/32",
+    "95.215.0.144/32"
+  ],
+  "matching_attributes": [
+    "ip-src",
+    "ip-dst",
+    "domain|ip",
+    "ip-dst|port",
+    "ip-src|port"
+  ],
+  "name": "F6 IP Ranges Used for Scanning",
+  "type": "cidr",
+  "version": 25121022
+}
diff --git a/lists/internet-census-nt-scanning/list.json b/lists/internet-census-nt-scanning/list.json
@@ -237,5 +237,5 @@
   ],
   "name": "Internet census IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/intrinsec-nt-scanning/list.json b/lists/intrinsec-nt-scanning/list.json
@@ -14,5 +14,5 @@
   ],
   "name": "Intrinsec IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/ipinfo-nt-scanning/list.json b/lists/ipinfo-nt-scanning/list.json
@@ -35,5 +35,5 @@
   ],
   "name": "Ipinfo IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/ipip-nt-scanning/list.json b/lists/ipip-nt-scanning/list.json
@@ -80,5 +80,5 @@
   ],
   "name": "Ipip IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/modat-nt-scanning/list.json b/lists/modat-nt-scanning/list.json
@@ -84,5 +84,5 @@
   ],
   "name": "Modat IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/netsecscan-nt-scanning/list.json b/lists/netsecscan-nt-scanning/list.json
@@ -22,5 +22,5 @@
   ],
   "name": "Netsecscan IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/onyphe-nt-scanning/list.json b/lists/onyphe-nt-scanning/list.json
@@ -60,5 +60,5 @@
   ],
   "name": "Onyphe IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/probethenet-nt-scanning/list.json b/lists/probethenet-nt-scanning/list.json
@@ -17,5 +17,5 @@
   ],
   "name": "Probethenet IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/rapid7-nt-scanning/list.json b/lists/rapid7-nt-scanning/list.json
@@ -35,5 +35,5 @@
   ],
   "name": "Rapid7 IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/research-scanner-nt-scanning/list.json b/lists/research-scanner-nt-scanning/list.json
@@ -13,5 +13,5 @@
   ],
   "name": "Research scanner IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/shadowforce-nt-scanning/list.json b/lists/shadowforce-nt-scanning/list.json
@@ -0,0 +1,46 @@
+{
+  "description": "List containing IP's associated with the Shadowforce scanners. This scanner CIDR range is extracted from CIRCL Network Telescope analysis on 2025/12/10",
+  "list": [
+    "128.199.44.215/32",
+    "142.93.135.160/32",
+    "146.190.21.73/32",
+    "152.42.136.22/32",
+    "159.223.0.20/32",
+    "159.223.231.254/32",
+    "159.65.193.17/32",
+    "159.65.206.235/32",
+    "161.35.145.35/32",
+    "164.92.148.118/32",
+    "164.92.159.100/32",
+    "164.92.215.178/32",
+    "164.92.219.121/32",
+    "165.22.193.223/32",
+    "167.172.47.74/32",
+    "167.99.211.88/32",
+    "178.128.250.218/32",
+    "192.165.198.129/32",
+    "192.165.198.130/31",
+    "192.165.198.132/30",
+    "192.165.198.136/29",
+    "192.165.198.144/28",
+    "192.165.198.160/28",
+    "192.165.198.176/29",
+    "192.165.198.184/30",
+    "192.165.198.188/31",
+    "192.165.198.190/32",
+    "193.235.193.186/32",
+    "209.38.96.38/32",
+    "68.183.11.224/32",
+    "68.183.3.153/32"
+  ],
+  "matching_attributes": [
+    "ip-src",
+    "ip-dst",
+    "domain|ip",
+    "ip-dst|port",
+    "ip-src|port"
+  ],
+  "name": "Shadowforce IP Ranges Used for Scanning",
+  "type": "cidr",
+  "version": 25121022
+}
diff --git a/lists/shadowserver-nt-scanning/list.json b/lists/shadowserver-nt-scanning/list.json
@@ -53,13 +53,8 @@
     "64.62.156.32/27",
     "64.62.156.64/26",
     "64.62.195.158/32",
-    "64.62.197.128/28",
-    "64.62.197.144/29",
-    "64.62.197.153/32",
-    "64.62.197.154/31",
-    "64.62.197.156/30",
+    "64.62.197.128/26",
     "64.62.197.16/32",
-    "64.62.197.160/27",
     "64.62.197.18/31",
     "64.62.197.192/27",
     "64.62.197.2/31",
@@ -110,5 +105,5 @@
   ],
   "name": "Shadowserver IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/shodan-nt-scanning/list.json b/lists/shodan-nt-scanning/list.json
@@ -37,5 +37,5 @@
   ],
   "name": "Shodan IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }
diff --git a/lists/skipa-nt-scanning/list.json b/lists/skipa-nt-scanning/list.json
@@ -12,5 +12,5 @@
   ],
   "name": "Skipa IP Ranges Used for Scanning",
   "type": "cidr",
-  "version": 25121020
+  "version": 25121022
 }

Original file line number	Diff line number	Diff line change
`@@ -18,5 +18,5 @@`
`18`	`18`	`],`
`19`	`19`	`"name": "Alphastrike research IP Ranges Used for Scanning",`
`20`	`20`	`"type": "cidr",`
`21`		`- "version": 25121020`
	`21`	`+ "version": 25121022`
`22`	`22`	`}`
Original file line number	Diff line number	Diff line change
`@@ -32,5 +32,5 @@`
`32`	`32`	`],`
`33`	`33`	`"name": "Bufferover IP Ranges Used for Scanning",`
`34`	`34`	`"type": "cidr",`
`35`		`- "version": 25121020`
	`35`	`+ "version": 25121022`
`36`	`36`	`}`
Original file line number	Diff line number	Diff line change
`@@ -773,5 +773,5 @@`
`773`	`773`	`],`
`774`	`774`	`"name": "Coalition signals intelligence IP Ranges Used for Scanning",`
`775`	`775`	`"type": "cidr",`
`776`		`- "version": 25121020`
	`776`	`+ "version": 25121022`
`777`	`777`	`}`
Original file line number	Diff line number	Diff line change
`@@ -12,5 +12,5 @@`
`12`	`12`	`],`
`13`	`13`	`"name": "Cybergreen IP Ranges Used for Scanning",`
`14`	`14`	`"type": "cidr",`
`15`		`- "version": 25121020`
	`15`	`+ "version": 25121022`
`16`	`16`	`}`
Original file line number	Diff line number	Diff line change
`@@ -26,5 +26,5 @@`
`26`	`26`	`],`
`27`	`27`	`"name": "Cyberresilience IP Ranges Used for Scanning",`
`28`	`28`	`"type": "cidr",`
`29`		`- "version": 25121020`
	`29`	`+ "version": 25121022`
`30`	`30`	`}`
Original file line number	Diff line number	Diff line change
`@@ -237,5 +237,5 @@`
`237`	`237`	`],`
`238`	`238`	`"name": "Internet census IP Ranges Used for Scanning",`
`239`	`239`	`"type": "cidr",`
`240`		`- "version": 25121020`
	`240`	`+ "version": 25121022`
`241`	`241`	`}`
Original file line number	Diff line number	Diff line change
`@@ -14,5 +14,5 @@`
`14`	`14`	`],`
`15`	`15`	`"name": "Intrinsec IP Ranges Used for Scanning",`
`16`	`16`	`"type": "cidr",`
`17`		`- "version": 25121020`
	`17`	`+ "version": 25121022`
`18`	`18`	`}`
Original file line number	Diff line number	Diff line change
`@@ -35,5 +35,5 @@`
`35`	`35`	`],`
`36`	`36`	`"name": "Ipinfo IP Ranges Used for Scanning",`
`37`	`37`	`"type": "cidr",`
`38`		`- "version": 25121020`
	`38`	`+ "version": 25121022`
`39`	`39`	`}`