there is yara support though … for subnet lookup not sure it could be abused ...