search

armbues / ioc_parser

Tool to extract indicators of compromise from security reports in PDF format
MIT License
428 stars 171 forks source link

Improve whitelist regex: Reserved IP addresses #35

Open cgi1 opened 7 years ago

cgi1 commented 7 years ago

Reference

        self.reserved_address_ranges = [
            ['0.0.0.0', 8, 'Broadcast messages to the current (this)'],
            ['10.0.0.0', 8, 'Local communication in private network'],
            ['100.64.0.0', 10, 'carrier-grade NAT'],
            ['127.0.0.0', 8, 'Local Loopback'],
            ['169.254.0.0', 16, 'link-local addresses'],
            ['172.16.0.0', 12, 'Local communication in private network'],
            ['192.0.0.0', 24, 'IANA IPv4 Special Purpose Address Registry'],
            ['192.0.2.0', 24, ''],
            ['192.88.99.0', 24, ''],
            ['192.168.0.0', 16, 'Local communication in private network'],
            ['198.18.0.0', 15, ''],
            ['198.51.100.0', 24, ''],
            ['203.0.113.0', 24, ''],
            ['224.0.0.0', 4, 'Reserved for multicast'],
            ['240.0.0.0', 4, '']
        ]