{
  "description": "Published source ranges of the internet-wide scanning organisation Infrawatch (infrawat.ch / infrawatch.com / infrawatch.app), as tracked by https://github.com/OpenFilters/internet-scanners",
  "list": [
    "154.16.44.0/24",
    "185.216.145.160/27",
    "185.223.235.0/26",
    "188.240.59.0/26",
    "193.124.20.224/27",
    "193.176.29.0/27",
    "193.176.31.144/28",
    "193.176.31.192/26",
    "193.32.209.224/27",
    "194.50.235.128/27",
    "194.88.98.80/28",
    "194.88.98.96/27",
    "195.140.214.16/28",
    "195.206.182.192/27",
    "195.206.182.224/32",
    "2.57.17.0/24",
    "213.166.84.32/27",
    "217.146.80.96/27",
    "2a01:4020:1:1::/64",
    "2a01:4020:2:b::/64",
    "2a01:4020:31::/64",
    "31.14.254.0/25",
    "37.10.113.208/28",
    "45.133.173.0/24",
    "5.226.140.0/25",
    "5.252.83.0/24",
    "69.5.169.0/24",
    "81.19.216.64/26",
    "81.19.219.192/26",
    "89.21.67.128/26",
    "89.37.172.128/27"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-src|port",
    "ip-dst|port"
  ],
  "name": "Infrawatch (infrawat.ch / infrawatch.com / infrawatch.app) IP ranges used for scanning",
  "type": "cidr",
  "version": 20260829
}