Hello,
Here is a Generic DataCenter JSON file that might be useful for you.
It contains most well known Internet port scanners:
- SHODAN
- INTERNET-CENSUS
- CENSYS
- CRIMINALIP
- SHADOWSERVER
- NET SYSTEMS RESEARCH
- ARBOR NETWORKS
Download from GitHub:
https://github.com/HGrigorov/checkpoint/blob/main/dc-files/port-scanners.json
Follow CheckPoint sk167210 on how to setup and use Generic DataCenter objects.
Once you import them in SmartConsole you can select which one (or all) of them to block/allow. For example, you may choose to block only SHODAN.
NOTE: I do not in any way guarantee list is not missing something or have something that should not be there. If you notice addresses or networks that can be added or removed, please let me know and I will update it accordingly.