From 31c7b30e3b56affda6e57a6978058b927bf7a608 Mon Sep 17 00:00:00 2001 From: TomOgs <72506922+TomOgs@users.noreply.github.com> Date: Wed, 30 Aug 2023 18:15:48 +0800 Subject: [PATCH 1/5] Create list.json List of IP ranges used by Censys for scanning public facing systems --- lists/Censys_Scanning/list.json | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 lists/Censys_Scanning/list.json diff --git a/lists/Censys_Scanning/list.json b/lists/Censys_Scanning/list.json new file mode 100644 index 0000000..f596e46 --- /dev/null +++ b/lists/Censys_Scanning/list.json @@ -0,0 +1,22 @@ +{ + "name": "Censys IP Ranges Used for Scanning", + "type": "cidr", + "version": 1, + "description": "List containing IP's accocaited with Censys scanning", + "matching_attributes": [ + "ip-src", + "ip-dst", + "domain|ip", + "ip-dst|port", + "ip-src|port" + ], + "list": [ + "162.142.125.0/24", + "167.94.138.0/24", + "167.94.145.0/24", + "167.94.146.0/24", + "167.248.133.0/24", + "2602:80d:1000:b0cc:e::/80", + "2620:96:e000:b0cc:e::/80" + ] +} From f48d0a4ca542184dde7b99d236b8f0cf7c01bfba Mon Sep 17 00:00:00 2001 From: TomOgs <72506922+TomOgs@users.noreply.github.com> Date: Wed, 30 Aug 2023 19:06:58 +0800 Subject: [PATCH 2/5] Update list.json Added URL for reference --- lists/Censys_Scanning/list.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lists/Censys_Scanning/list.json b/lists/Censys_Scanning/list.json index f596e46..5936e3e 100644 --- a/lists/Censys_Scanning/list.json +++ b/lists/Censys_Scanning/list.json @@ -2,7 +2,7 @@ "name": "Censys IP Ranges Used for Scanning", "type": "cidr", "version": 1, - "description": "List containing IP's accocaited with Censys scanning", + "description": "List containing IP's accocaited with Censys scanning [https://support.censys.io/hc/en-us/articles/360043177092-Opt-Out-of-Data-Collection#Can_I_opt_out_of_Censys_data_collection?]", "matching_attributes": [ "ip-src", "ip-dst", From cb70ff931106d92077da937b27d7f215d0f0a79e Mon Sep 17 00:00:00 2001 From: TomOgs <72506922+TomOgs@users.noreply.github.com> Date: Wed, 30 Aug 2023 19:19:37 +0800 Subject: [PATCH 3/5] Updating Censys List Spelling correction --- lists/Censys_Scanning/list.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lists/Censys_Scanning/list.json b/lists/Censys_Scanning/list.json index 5936e3e..a2583bd 100644 --- a/lists/Censys_Scanning/list.json +++ b/lists/Censys_Scanning/list.json @@ -2,7 +2,7 @@ "name": "Censys IP Ranges Used for Scanning", "type": "cidr", "version": 1, - "description": "List containing IP's accocaited with Censys scanning [https://support.censys.io/hc/en-us/articles/360043177092-Opt-Out-of-Data-Collection#Can_I_opt_out_of_Censys_data_collection?]", + "description": "List containing IP's associated with Censys scanning [https://support.censys.io/hc/en-us/articles/360043177092-Opt-Out-of-Data-Collection#Can_I_opt_out_of_Censys_data_collection?]", "matching_attributes": [ "ip-src", "ip-dst", From 8554db2df97e7c9a1cc153766bb72f1bc1e243ae Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 30 Aug 2023 14:48:26 +0200 Subject: [PATCH 4/5] chg: [censys] jq all the things --- lists/Censys_Scanning/list.json | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/lists/Censys_Scanning/list.json b/lists/Censys_Scanning/list.json index a2583bd..653ba46 100644 --- a/lists/Censys_Scanning/list.json +++ b/lists/Censys_Scanning/list.json @@ -1,8 +1,14 @@ { - "name": "Censys IP Ranges Used for Scanning", - "type": "cidr", - "version": 1, "description": "List containing IP's associated with Censys scanning [https://support.censys.io/hc/en-us/articles/360043177092-Opt-Out-of-Data-Collection#Can_I_opt_out_of_Censys_data_collection?]", + "list": [ + "162.142.125.0/24", + "167.248.133.0/24", + "167.94.138.0/24", + "167.94.145.0/24", + "167.94.146.0/24", + "2602:80d:1000:b0cc:e::/80", + "2620:96:e000:b0cc:e::/80" + ], "matching_attributes": [ "ip-src", "ip-dst", @@ -10,13 +16,7 @@ "ip-dst|port", "ip-src|port" ], - "list": [ - "162.142.125.0/24", - "167.94.138.0/24", - "167.94.145.0/24", - "167.94.146.0/24", - "167.248.133.0/24", - "2602:80d:1000:b0cc:e::/80", - "2620:96:e000:b0cc:e::/80" - ] + "name": "Censys IP Ranges Used for Scanning", + "type": "cidr", + "version": 1 } From 1ff40b9acced90f7ad47a3620737582701fe58f2 Mon Sep 17 00:00:00 2001 From: Alexandre Dulaunoy Date: Wed, 30 Aug 2023 14:49:15 +0200 Subject: [PATCH 5/5] chg: [censys] warning-list renamed --- lists/{Censys_Scanning => censys-scanning}/list.json | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename lists/{Censys_Scanning => censys-scanning}/list.json (100%) diff --git a/lists/Censys_Scanning/list.json b/lists/censys-scanning/list.json similarity index 100% rename from lists/Censys_Scanning/list.json rename to lists/censys-scanning/list.json