misp-warninglists/lists/bufferover-nt-scanning/list.json at main · MISP/misp-warninglists · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
{
  "description": "List containing IP's associated with the Bufferover scanners. This scanner CIDR range is extracted from CIRCL Network Telescope analysis on 2026/04/09",
  "list": [
    "139.144.235.132/32",
    "139.144.239.72/32",
    "139.144.239.74/32",
    "162.216.18.113/32",
    "170.187.163.117/32",
    "170.187.163.133/32",
    "170.187.163.90/32",
    "170.187.165.134/32",
    "170.187.165.139/32",
    "170.187.165.218/31",
    "170.187.165.242/32",
    "172.104.19.160/32",
    "198.74.58.148/32",
    "45.33.78.24/32",
    "45.33.78.70/32",
    "45.33.83.115/32",
    "45.33.84.124/32",
    "45.33.89.53/32",
    "45.33.94.76/32",
    "45.33.95.64/32",
    "45.56.111.60/32",
    "45.79.132.41/32",
    "45.79.153.51/32",
    "45.79.153.72/32",
    "45.79.177.245/32",
    "45.79.186.176/32",
    "45.79.191.178/32",
    "66.228.40.98/32",
    "69.164.214.243/32",
    "97.107.133.213/32",
    "97.107.141.150/32"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-dst|port",
    "ip-src|port"
  ],
  "name": "Bufferover IP Ranges Used for Scanning",
  "type": "cidr",
  "version": 26040914
}