Potential Malicious IP on "Warning List of known Microsoft Azure Datacenter IP Ranges"

MISP / misp-warninglists

Warning lists to inform users of MISP about potential false-positives or other information in indicators

http://misp.github.io/misp-warninglists/

520 stars 170 forks source link

Potential Malicious IP on "Warning List of known Microsoft Azure Datacenter IP Ranges" #261

Open Tyrell20 opened 7 months ago

Tyrell20 commented 7 months ago

Hi All, We used the warning list of "Microsoft Azure Datacenter IP Ranges" but we are facing to different IP with massive inbound scan activity. We kindly ask to evaluate to divide the list considering apart from Indian IP.

In particular we received scan event from:

4.224.240.93 --> 4.224.0.0/13
40.80.93.32 -->40.80.64.0/19
20.219.155.180 -->20.218.0.0/15

Alternatively, is it possible to consider excluding these subnets from the waning list?.

Thanks.