MozDef/alerts/nsm_scan_address.json

{
    "sourcemustmatch":"[10.0.0.0 TO 10.255.255.255]",
    "sourcemustnotmatch":"10.33.44.54 OR 10.88.77.54 OR 10.76.54.54 OR 10.251.30.138 OR 10.54.65.234"
}