Update README.md

IP Updates

README.md

@@ -1,16 +1,39 @@
-# TMW Shield - Internal IP List
+# 🛡️ TMW Shield - Internal DDoS IP List
 
-Welcome to the official repository for the **TMW Shield** internal IP list. This list is shared freely with the public to help enhance cybersecurity efforts by mitigating DDoS attacks and preventing unwanted traffic. Our list is updated daily (internaly) to ensure accuracy and relevance in the rapidly evolving landscape of online security threats.
+Welcome to the official repository for **TMW Shield**, a curated list of internal IPs aimed at enhancing **cybersecurity**, **mitigating DDoS attacks**, and **blocking malicious traffic**. This list is updated **daily** (not here internaly) and is **freely available** for community use and integration into firewalls, threat intelligence systems, and web application filters.
 
-## Features
+## 🔐 What is This?
 
-- **Free to use**: The internal IP list is publicly available for anyone to access, ensuring more people can benefit from our efforts to improve network security.
-- **Comprehensive**: The list contains a wide range of IP addresses collected and vetted for reliability and effectiveness in security applications.
+**TMW Shield** provides a list of IP addresses associated with:
 
-## Download
+- Known DDoS attack patterns (Layer 7 HTTP floods)
+- Malicious or bot-generated traffic
+- Probing or scraping activity
 
-[Here](https://raw.githubusercontent.com/Tizian-Maxime-Weigt/L7-HTTP-DDoS-Flood-IP-Signature-IP-List/refs/heads/main/ddos-signatures.txt)
+Use this list to protect your infrastructure by blocking, rate-limiting, or analyzing incoming requests from flagged sources.
 
-## Disclaimer:
+---
 
-The IP lists are provided without warranty of any kind!
+## ✅ Features
+
+- **📂 Free and Open Source**  
+  Publicly available for all cybersecurity professionals, developers, and network admins.
+
+- **📈 Regularly Updated**  
+  Updated internally every day to reflect the latest threat intel.
+
+- **🧠 Vetted and Curated**  
+  The IPs are collected from real-world traffic and reviewed for accuracy.
+
+- **🔧 Easy Integration**  
+  Use the raw list with firewalls, WAFs, NGINX/Apache rules, or SIEM tools.
+
+---
+
+## 📥 Download the Latest IP List
+
+📄 **Raw IP List (Updated Daily):**  
+[🔗 Click here to download](https://raw.githubusercontent.com/Tizian-Maxime-Weigt/L7-HTTP-DDoS-Flood-IP-Signature-IP-List/refs/heads/main/ddos-signatures.txt)
+
+```bash
+curl -O https://raw.githubusercontent.com/Tizian-Maxime-Weigt/L7-HTTP-DDoS-Flood-IP-Signature-IP-List/refs/heads/main/ddos-signatures.txt

ddos-signatures.txt

@@ -2379,3 +2379,48 @@
 185.73.103.23
 189.51.171.226
 45.123.142.5
+
+103.122.0.162
+181.13.216.202
+181.143.181.35
+152.32.67.243
+181.119.67.133
+103.247.23.250
+58.69.206.64
+103.169.187.221
+180.245.220.213
+103.174.122.203
+138.0.140.13
+147.79.66.184
+201.230.81.71
+200.201.134.184
+185.174.211.154
+192.81.122.15
+157.10.97.185
+187.62.191.3
+103.86.117.49
+190.97.231.0
+103.177.189.29
+181.78.82.210
+103.242.104.226
+161.49.91.13
+95.135.41.211
+112.198.131.71
+179.42.78.2
+95.135.101.21
+206.238.163.128
+45.174.191.19
+103.172.23.114
+190.2.214.135
+191.242.111.26
+45.189.253.141
+103.81.110.182
+103.126.86.150
+102.219.208.86
+175.138.75.137
+109.201.13.186
+143.255.85.178
+157.10.3.9
+102.210.25.172
+157.125.220.80
+185.49.25.198