Rapid7 (Project Sonar) — scanner via reverse DNS scanners.labs.rapid7.com
by shop owners for shop owners.
How the PARC feed for Rapid7 came about: the Project Sonar / Labs scanner, 24 CIDR blocks, all self-identifying via reverse DNS scanners.labs.rapid7.com — 108 of 108 IPs confirmed individually.
Rapid7 runs an internet-wide scanner (US) for security research with Project Sonar / Labs. Not an SEO tool. The scan IPs are self-identifying: they all reverse to scanners.labs.rapid7.com. We confirmed every single one of the 108 IPs by reverse DNS. Part of our PARC Security feed.
rapid7.json — view feed Project Sonar →
Verification
109.123.117.229 → scanners.labs.rapid7.com ✓
24 CIDR blocks = 108 IPs. Only the IP operator can set the reverse PTR scanners.labs.rapid7.com — i.e. Rapid7. We took the range seed from the MISP warninglist and reverse-verified every IP individually: 108 of 108 confirmed. No sampling, no extrapolation.