{
  "description": "Published source ranges of the internet-wide scanning organisation Mandiant ASM / GTI (mandiant.com), as tracked by https://github.com/OpenFilters/internet-scanners",
  "list": [
    "103.66.28.0/22",
    "13.58.114.74/32",
    "13.58.203.73/32",
    "13.58.84.198/32",
    "13.59.120.77/32",
    "13.59.132.170/32",
    "13.59.16.128/32",
    "13.59.242.100/32",
    "13.59.59.233/32",
    "18.116.202.164/32",
    "18.116.239.38/32",
    "18.117.109.14/32",
    "18.117.218.107/32",
    "18.118.100.31/32",
    "18.118.107.228/32",
    "18.119.11.223/32",
    "18.119.13.69/32",
    "18.188.134.51/32",
    "18.188.229.2/32",
    "18.188.53.152/32",
    "18.189.28.87/32",
    "18.190.152.179/32",
    "18.191.16.102/32",
    "18.191.173.38/32",
    "18.191.255.164/32",
    "18.191.69.170/32",
    "18.191.84.177/32",
    "18.217.102.23/32",
    "18.217.128.63/32",
    "18.218.168.5/32",
    "18.218.230.153/32",
    "18.218.94.172/32",
    "18.219.11.104/32",
    "18.219.157.186/32",
    "18.219.193.156/32",
    "18.219.37.54/32",
    "18.219.47.173/32",
    "18.219.56.153/32",
    "18.220.248.172/32",
    "18.221.100.43/32",
    "18.221.18.194/32",
    "18.221.180.165/32",
    "18.221.214.151/32",
    "18.222.192.238/32",
    "18.222.201.82/32",
    "18.222.255.237/32",
    "18.223.2.197/32",
    "18.224.184.103/32",
    "18.224.39.133/32",
    "18.224.93.149/32",
    "18.225.7.162/32",
    "3.129.92.250/32",
    "3.133.84.157/32",
    "3.134.100.58/32",
    "3.134.101.147/32",
    "3.134.93.22/32",
    "3.137.136.201/32",
    "3.137.141.123/32",
    "3.137.146.232/32",
    "3.137.148.99/32",
    "3.137.151.234/32",
    "3.138.190.72/32",
    "3.139.58.65/32",
    "3.14.73.254/32",
    "3.14.82.245/32",
    "3.14.84.197/32",
    "3.14.86.234/32",
    "3.141.153.201/32",
    "3.141.168.125/32",
    "3.142.219.55/32",
    "3.142.97.232/32",
    "3.144.120.14/32",
    "3.144.120.21/32",
    "3.144.192.36/32",
    "3.144.236.65/32",
    "3.144.239.16/32",
    "3.144.245.141/32",
    "3.144.44.57/32",
    "3.144.77.222/32",
    "3.15.169.123/32",
    "3.15.179.241/32",
    "3.15.180.31/32",
    "3.16.148.58/32",
    "3.16.213.130/32",
    "3.17.206.73/32",
    "3.17.207.148/32",
    "3.17.72.122/32",
    "3.17.73.23/32",
    "3.18.101.236/32",
    "3.18.108.78/32",
    "3.19.14.190/32",
    "3.19.14.223/32",
    "3.19.223.104/32",
    "3.19.240.76/32",
    "3.21.171.90/32",
    "3.22.234.7/32",
    "3.23.104.96/32",
    "3.23.59.18/32",
    "34.19.116.48/28",
    "34.19.127.192/27",
    "34.68.34.64/27",
    "52.14.202.153/32",
    "52.15.76.227/32",
    "52.15.78.25/32",
    "8.34.210.32/27"
  ],
  "matching_attributes": [
    "ip-src",
    "ip-dst",
    "domain|ip",
    "ip-src|port",
    "ip-dst|port"
  ],
  "name": "Mandiant ASM / GTI (mandiant.com) IP ranges used for scanning",
  "type": "cidr",
  "version": 20260829
}