Skip to content

add: [apple-ipv4] [apple-ipv6] first generation of the Apple IP range lists - #384

Merged
adulau merged 1 commit into
MISP:mainfrom
elhoim:warninglists/add-apple-asn-lists
Aug 30, 2026
Merged

add: [apple-ipv4] [apple-ipv6] first generation of the Apple IP range lists#384
adulau merged 1 commit into
MISP:mainfrom
elhoim:warninglists/add-apple-asn-lists

Conversation

@elhoim

@elhoim elhoim commented Aug 29, 2026

Copy link
Copy Markdown
Member

What changed

First generation of two new lists, plus their README index lines:

list entries
apple-ipv4 5
apple-ipv6 5

Produced by tools/generate-apple-ip-ranges.py (companion PR) from the RIPEstat announced-prefixes API for Apple's two ASNs, AS714 and AS6185.

Why the counts are small

They are aggregates, not a loss of coverage. The two ASNs announce 1,616 IPv4 and 498 IPv6 prefixes; consolidate_networks() collapses them because nearly every IPv4 announcement is a subnet of Apple's 17.0.0.0/8:

apple-ipv4: 17.0.0.0/8, 57.102.0.0/15, 65.199.22.0/23, 139.178.128.0/18, 144.178.0.0/18
apple-ipv6: 2403:300::/32, 2620:0:1b00::/48, 2620:149::/32, 2a01:b740::/32, 2a01:b747::/32

This was re-derived independently with ipaddress.collapse_addresses and matches exactly.

Relationship to the existing apple list

lists/apple/list.json (4 hand-maintained CIDRs, frozen since 2024-10-23) is not modified by this PR. Maintainers may want to consider whether it should now be deprecated in favour of these generated lists.

Verification

  • jsonschema — exit 0 for both lists
  • tools/validate_values.py — exit 0; every entry passes ip_network(value, strict=True) (no host bits set)
  • jq -S normalised, no exec bit, version an int (20260829)

🤖 Generated with Claude Code

https://claude.ai/code/session_0121gk7vaCXX9bMri7tC9XVd

@adulau
adulau merged commit 295e661 into MISP:main Aug 30, 2026
5 checks passed
@elhoim
elhoim deleted the warninglists/add-apple-asn-lists branch August 31, 2026 18:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants