diff --git a/.github/workflows/update_blacklists.yml b/.github/workflows/update_blacklists.yml index f581e62..cca4a50 100644 --- a/.github/workflows/update_blacklists.yml +++ b/.github/workflows/update_blacklists.yml @@ -9,6 +9,9 @@ on: workflow_dispatch: schedule: - cron: '0 6 * * *' + push: + branches: + - main jobs: update: @@ -26,7 +29,9 @@ jobs: fetch-depth: 0 # this is required to fetch all history for all branches and tags token: ${{ env.GH_PAT }} - uses: ./.github/actions/pyInstall - - run: ./blacklists_updater.sh + - run: ./blacklists_updater_txt.sh + - run: ./blacklists_updater_nginx.sh + - run: ./blacklists_updater_iptables.sh - uses: ./.github/actions/gitPush env: - PUSH_FILES: blacklists/ + PUSH_FILES: blacklists/ blacklists_nginx/ blacklists_iptables/ diff --git a/README.md b/README.md index 30a711d..8c68a67 100644 --- a/README.md +++ b/README.md @@ -4,33 +4,101 @@ This repository contains Python scripts that allow you to retrieve network lists based on either an Autonomous System (AS) name or a Network name. Also you can download and parse the whole RIPE database to get information about Networks for the further analysis. -- [Look at compiled blacklists in the folder `blacklists/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists) -- [Look at other network and ASN lists in the folder `auto/`](https://github.com/C24Be/AS_Network_List/tree/main/auto) +**Ready-to-use blacklists in multiple formats:** + +- [Text blacklists in `blacklists/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists) - Plain text format with IPv4/IPv6 separation +- [Nginx configurations in `blacklists_nginx/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists_nginx) - Ready to include in your nginx config +- [IPTables/IPSet files in `blacklists_iptables/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists_iptables) - Optimized for iptables with ipset +- [Other network and ASN lists in `auto/`](https://github.com/C24Be/AS_Network_List/tree/main/auto) - Comprehensive Russian network data ## Files and features +### Core Scripts + - `network_list_from_as.py`: Retrieves a list of networks associated with a given AS name. - `network_list_from_netname.py`: Retrieves a list of networks associated with a given Network name. - `get_info_from_ripe.py`: Retrieves information about Russian AS numbers and Networks from RIPE database for the further analysis. -- `get_description.py`: Retrieves network names, AS names and organisation names from RIPE. Updates te lists in the folder `auto/`. +- `get_description.py`: Retrieves network names, AS names and organisation names from RIPE. Updates the lists in the folder `auto/`. - `parse_ripe_db.py`: Parses the whole RIPE database to get information about Networks for the further analysis. -- **Contributors are welcome!** - - `lists/ru-gov-netnames.txt`: A list of network names associated with the Russian government. - - `lists/ru-gov-asns.txt`: A list of AS numbers associated with the Russian government. +### Blacklist Generators -- `blacklist_updater.sh`: Static blacklist updater. +- `blacklists_updater_txt.sh`: Generates text-based blacklists with IPv4/IPv6 separation +- `blacklists_updater_nginx.sh`: Generates nginx configuration files with deny directives +- `blacklists_updater_iptables.sh`: Generates ipset configuration files for iptables/ip6tables -- `blacklists/blacklist.txt`: Static **daily generated** blacklist! -- `blacklists/blacklist_with_comments.txt`: Static **daily generated** blacklist with comments! +### Generated Blacklists -- `auto/all-ru-*.txt`: Static **monthly generated** lists of Russian networks and ASNs! -- `auto/ripe-ru-*.txt`: Static **weekly generated** lists of Russian networks from RIPE database! +**Text Format** (`blacklists/` folder): + +- `blacklist.txt`: Mixed IPv4/IPv6 blacklist (**daily generated**) +- `blacklist-v4.txt`: IPv4-only blacklist (**daily generated**) +- `blacklist-v6.txt`: IPv6-only blacklist (**daily generated**) +- `blacklist_with_comments.txt`: Blacklist with network metadata (**daily generated**) + +**Nginx Format** (`blacklists_nginx/` folder): + +- `blacklist.conf`: Nginx deny rules for mixed IPv4/IPv6 (**daily generated**) +- `blacklist-v4.conf`: Nginx deny rules for IPv4 only (**daily generated**) +- `blacklist-v6.conf`: Nginx deny rules for IPv6 only (**daily generated**) +- `README.md`: Complete usage documentation for nginx integration + +**IPTables/IPSet Format** (`blacklists_iptables/` folder): + +- `blacklist.ipset`: IPSet configuration for mixed IPv4/IPv6 (**daily generated**) +- `blacklist-v4.ipset`: IPSet configuration for IPv4 only (**daily generated**) +- `blacklist-v6.ipset`: IPSet configuration for IPv6 only (**daily generated**) +- `README.md`: Complete usage documentation for iptables integration + +### Reference Lists + +**Contributors are welcome!** + +- `lists/ru-gov-netnames.txt`: A list of network names associated with the Russian government. +- `lists/ru-gov-asns.txt`: A list of AS numbers associated with the Russian government. + +### Auto-Generated Data + +- `auto/all-ru-*.txt`: **Monthly generated** lists of all Russian networks and ASNs +- `auto/ripe-ru-*.txt`: **Weekly generated** lists of Russian networks from RIPE database image These scripts have been tested on MacOS, FreeBSD and Linux. +## Quick Start + +### Using Pre-Generated Blacklists + +No setup required! Just download and use: + +**For Nginx:** + +```bash +# Download and include in your nginx configuration +wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nginx/blacklist.conf +# Then add to your nginx config: include /path/to/blacklist.conf; +``` + +**For IPTables/IPSet:** + +```bash +# Download and load into ipset +wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_iptables/blacklist.ipset +ipset restore < blacklist.ipset +iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP +ip6tables -I INPUT -m set --match-set blacklist-v6 src -j DROP +``` + +**For Custom Applications:** + +```bash +# Download plain text blacklist +wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists/blacklist.txt +``` + +See the README files in each folder for detailed usage instructions. + ## Prerequisites - Python 3: Download it from the [official website](https://www.python.org/downloads/). @@ -120,10 +188,31 @@ These scripts have been tested on MacOS, FreeBSD and Linux. image image +## Automated Workflows + +This repository uses GitHub Actions to automatically update blacklists: + +- **Daily Updates**: `update_blacklists.yml` - Updates all blacklist formats (text, nginx, iptables) +- **Monthly Updates**: `update_ru_all_lists.yml` - Updates comprehensive Russian network lists +- **Weekly Updates**: `parse_ripe_database.yml` - Parses RIPE database for Russian networks +- **Network Resolution**: `resolve_networks.yml` - Resolves network names and descriptions + +All blacklists are automatically regenerated and committed to ensure you always have the latest data. + +## Blacklist Format Comparison + +| Format | Best For | Performance | Ease of Use | File Size | +|--------|----------|-------------|-------------|-----------| +| **Text** | Custom scripts, analysis | N/A | ⭐⭐⭐⭐⭐ | Small | +| **Nginx** | Web servers, reverse proxies | Good | ⭐⭐⭐⭐ | Medium | +| **IPSet** | Firewalls, large-scale blocking | Excellent | ⭐⭐⭐ | Medium | + +**Recommendation**: Use IPSet for firewall-level blocking (best performance), Nginx for web application layer, and text format for custom integrations. + ## Additional information - [RIPE DB Inetnum](https://ftp.ripe.net/ripe/dbase/split/ripe.db.inetnum.gz) ## Contributing -We are welcome contributions! Feel free to submit a pull request or open an issue. +We welcome contributions! Feel free to submit a pull request or open an issue. diff --git a/blacklists/blacklist-v4.txt b/blacklists/blacklist-v4.txt new file mode 100644 index 0000000..8453e7f --- /dev/null +++ b/blacklists/blacklist-v4.txt @@ -0,0 +1,806 @@ +109.124.119.88/29 +109.124.66.128/30 +109.124.66.160/28 +109.124.71.64/29 +109.124.78.108/30 +109.124.80.132/30 +109.124.83.20/30 +109.124.87.96/29 +109.124.89.140/30 +109.124.89.212/30 +109.124.89.36/30 +109.124.90.128/30 +109.124.90.32/30 +109.124.97.4/30 +109.124.99.16/30 +109.124.99.160/28 +109.204.204.232/29 +109.207.0.0/20 +109.232.187.16/29 +109.248.197.0/24 +109.73.4.224/27 +145.255.238.240/28 +149.62.55.240/30 +176.109.0.0/21 +176.116.96.0/20 +178.16.156.148/30 +178.237.206.0/24 +178.237.240.0/20 +178.237.248.0/21 +178.248.232.137/32 +178.248.232.60/32 +178.248.233.136/32 +178.248.233.244/32 +178.248.233.245/32 +178.248.233.26/32 +178.248.233.32/32 +178.248.233.60/32 +178.248.234.136/32 +178.248.234.204/32 +178.248.234.228/32 +178.248.234.238/32 +178.248.234.30/32 +178.248.234.33/32 +178.248.234.60/32 +178.248.234.79/32 +178.248.234.83/32 +178.248.235.244/32 +178.248.235.60/32 +178.248.235.75/32 +178.248.236.20/32 +178.248.236.244/32 +178.248.236.83/32 +178.248.237.136/32 +178.248.237.18/32 +178.248.237.242/32 +178.248.237.98/32 +178.248.238.102/32 +178.248.238.128/32 +178.248.238.129/32 +178.248.238.136/32 +178.248.238.155/32 +178.248.238.172/32 +178.248.238.205/32 +178.248.238.255/32 +178.248.238.55/32 +178.248.239.215/32 +178.49.148.176/29 +185.149.160.0/24 +185.149.161.0/24 +185.149.162.0/24 +185.149.163.0/24 +185.168.60.0/24 +185.168.61.0/24 +185.168.62.0/24 +185.168.63.0/24 +185.179.224.0/24 +185.179.225.0/24 +185.179.226.0/24 +185.179.227.0/24 +185.183.172.0/23 +185.183.174.0/23 +185.224.228.0/24 +185.224.229.0/24 +185.224.230.0/24 +185.224.231.0/24 +185.65.149.170/32 +185.7.234.188/30 +188.128.101.108/30 +188.128.11.196/30 +188.128.112.216/29 +188.128.112.240/29 +188.128.113.0/28 +188.128.114.128/28 +188.128.115.232/29 +188.128.118.224/27 +188.128.119.104/30 +188.128.8.240/30 +188.128.89.0/30 +188.128.92.104/30 +188.128.94.204/30 +188.128.98.204/30 +188.247.36.124/30 +188.247.36.128/30 +188.247.36.132/30 +188.247.36.136/30 +188.247.36.140/30 +188.247.36.204/30 +193.232.70.0/24 +193.47.146.0/24 +194.140.247.0/25 +194.140.247.128/25 +194.150.202.0/23 +194.165.22.0/23 +194.186.112.80/28 +194.190.9.0/24 +194.215.248.0/24 +194.226.116.0/22 +194.226.127.0/24 +194.226.80.0/21 +194.226.88.0/21 +194.67.63.200/30 +194.8.246.0/23 +194.8.70.0/23 +195.128.157.0/24 +195.131.53.248/29 +195.131.61.80/29 +195.131.63.24/29 +195.131.7.8/29 +195.144.232.144/30 +195.144.240.128/28 +195.149.110.0/24 +195.151.25.48/29 +195.16.55.224/27 +195.162.36.64/28 +195.170.218.24/29 +195.170.218.88/29 +195.182.142.128/26 +195.182.145.64/28 +195.182.151.212/30 +195.182.151.216/30 +195.182.155.164/30 +195.182.156.96/30 +195.209.120.0/22 +195.209.122.0/24 +195.209.123.0/24 +195.218.175.40/29 +195.239.113.0/24 +195.3.240.0/22 +195.42.75.8/29 +195.54.20.168/29 +195.54.221.0/24 +195.54.28.72/30 +195.58.13.120/30 +195.58.21.196/30 +195.58.29.57/32 +195.58.30.164/30 +195.58.30.200/29 +195.58.5.16/30 +195.58.5.20/30 +195.80.224.0/24 +195.98.38.16/28 +195.98.43.104/29 +195.98.73.56/29 +195.98.77.100/30 +212.119.174.0/24 +212.119.175.0/24 +212.120.169.48/29 +212.120.174.88/29 +212.120.184.48/29 +212.120.184.56/29 +212.120.184.64/29 +212.120.189.208/29 +212.120.189.224/29 +212.120.190.112/29 +212.120.190.240/29 +212.120.191.120/29 +212.120.191.248/29 +212.13.104.116/30 +212.13.113.100/30 +212.15.105.64/28 +212.15.114.156/30 +212.15.115.80/28 +212.17.16.192/27 +212.17.17.176/28 +212.17.8.176/29 +212.17.9.144/28 +212.192.156.0/22 +212.192.156.0/24 +212.192.157.0/24 +212.192.158.0/24 +212.23.85.48/30 +212.23.85.56/29 +212.32.198.64/29 +212.48.134.192/26 +212.48.138.240/28 +212.48.141.160/27 +212.48.34.176/29 +212.48.34.184/29 +212.48.53.100/30 +212.48.53.144/30 +212.48.53.152/30 +212.48.53.156/30 +212.48.53.160/30 +212.48.53.164/30 +212.48.53.184/30 +212.48.53.188/30 +212.48.53.192/30 +212.48.53.196/30 +212.48.53.200/30 +212.48.53.216/30 +212.48.53.236/30 +212.48.53.240/30 +212.48.53.244/30 +212.48.53.248/30 +212.48.53.252/30 +212.48.53.76/30 +212.48.53.84/30 +212.48.53.88/30 +212.48.53.92/30 +212.48.54.0/30 +212.48.54.100/30 +212.48.54.104/30 +212.48.54.108/30 +212.48.54.112/30 +212.48.54.116/30 +212.48.54.12/30 +212.48.54.120/30 +212.48.54.124/30 +212.48.54.128/30 +212.48.54.132/30 +212.48.54.136/30 +212.48.54.140/30 +212.48.54.144/30 +212.48.54.148/30 +212.48.54.152/30 +212.48.54.156/30 +212.48.54.16/30 +212.48.54.164/30 +212.48.54.168/30 +212.48.54.172/30 +212.48.54.176/30 +212.48.54.180/30 +212.48.54.184/30 +212.48.54.188/30 +212.48.54.196/30 +212.48.54.20/30 +212.48.54.200/30 +212.48.54.208/30 +212.48.54.212/30 +212.48.54.216/30 +212.48.54.220/30 +212.48.54.24/30 +212.48.54.240/30 +212.48.54.244/30 +212.48.54.248/30 +212.48.54.252/30 +212.48.54.28/30 +212.48.54.32/30 +212.48.54.36/30 +212.48.54.44/30 +212.48.54.48/30 +212.48.54.52/30 +212.48.54.56/30 +212.48.54.60/30 +212.48.54.64/30 +212.48.54.68/30 +212.48.54.72/30 +212.48.54.76/30 +212.48.54.8/30 +212.48.54.80/30 +212.48.54.84/30 +212.48.54.92/30 +212.48.54.96/30 +212.49.107.224/27 +212.49.124.0/26 +212.57.133.0/24 +212.57.159.0/24 +212.59.98.48/29 +212.59.99.96/27 +213.172.17.252/30 +213.172.18.124/30 +213.172.18.148/30 +213.172.18.160/30 +213.172.18.164/30 +213.172.18.252/30 +213.172.18.60/30 +213.172.27.0/30 +213.172.27.116/30 +213.172.27.160/30 +213.172.27.204/30 +213.172.27.212/30 +213.172.27.224/30 +213.172.27.252/30 +213.172.30.136/30 +213.177.111.0/24 +213.183.253.56/29 +213.219.237.68/30 +213.234.13.60/30 +213.234.15.228/30 +213.234.15.248/30 +213.234.18.52/30 +213.234.8.8/30 +213.24.128.0/22 +213.24.143.0/24 +213.24.152.0/22 +213.24.160.0/28 +213.24.34.0/24 +213.24.75.0/24 +213.24.76.0/23 +213.242.204.236/30 +213.242.204.76/30 +213.242.205.88/30 +213.242.215.192/29 +213.242.215.68/30 +213.243.106.48/28 +213.243.116.0/24 +213.243.84.80/28 +213.33.171.240/29 +213.59.59.120/29 +213.59.59.128/29 +213.59.59.144/29 +213.59.59.16/29 +213.59.59.168/29 +213.59.59.64/29 +213.59.91.128/27 +213.59.91.176/28 +213.59.91.48/29 +213.85.142.176/28 +213.85.2.64/28 +213.85.2.80/29 +213.85.20.32/30 +213.85.20.8/30 +213.85.20.84/30 +213.85.77.64/27 +217.106.0.0/16 +217.106.115.168/29 +217.106.147.0/29 +217.106.147.8/29 +217.106.150.224/29 +217.106.150.72/29 +217.106.150.80/29 +217.106.150.88/29 +217.106.203.240/29 +217.106.203.88/29 +217.106.93.192/26 +217.106.95.112/28 +217.107.200.0/21 +217.107.5.112/29 +217.107.5.16/29 +217.107.5.24/29 +217.107.5.40/29 +217.107.5.8/29 +217.107.5.80/29 +217.107.5.88/29 +217.107.5.96/29 +217.147.23.112/28 +217.148.216.156/30 +217.148.220.160/29 +217.172.18.0/23 +217.195.92.16/28 +217.195.93.144/29 +217.195.94.200/29 +217.20.86.128/26 +217.20.86.232/29 +217.23.88.168/29 +217.23.88.248/29 +217.27.142.176/30 +217.65.214.24/29 +217.65.219.160/29 +217.67.177.208/29 +31.177.95.0/24 +31.44.63.64/29 +37.28.161.48/30 +37.29.53.16/30 +37.29.57.52/30 +37.29.57.64/30 +37.29.59.56/30 +46.20.70.160/28 +46.228.0.232/29 +46.29.152.0/22 +46.46.142.160/28 +46.46.148.40/29 +46.47.197.128/30 +46.47.199.76/30 +46.47.203.52/30 +46.47.207.96/30 +46.47.208.84/30 +46.47.210.76/30 +46.47.211.0/24 +46.47.212.204/30 +46.47.213.0/24 +46.47.214.200/30 +46.47.219.200/30 +46.47.223.196/30 +46.47.229.0/28 +46.47.238.144/30 +46.47.249.176/29 +46.61.208.0/24 +62.112.110.64/28 +62.118.0.208/28 +62.118.101.184/29 +62.118.113.232/29 +62.118.125.188/30 +62.118.127.240/28 +62.118.15.16/28 +62.118.17.152/29 +62.118.19.112/30 +62.118.19.40/30 +62.118.193.8/29 +62.118.205.68/30 +62.118.208.100/30 +62.118.209.192/30 +62.118.21.160/29 +62.118.216.60/30 +62.118.219.184/30 +62.118.230.4/30 +62.118.233.224/29 +62.118.234.64/29 +62.118.239.128/29 +62.118.25.112/28 +62.118.37.168/30 +62.118.37.180/30 +62.118.37.4/30 +62.118.38.212/30 +62.141.125.0/25 +62.181.52.56/29 +62.28.169.168/30 +62.33.199.80/29 +62.33.34.16/28 +62.33.87.128/28 +62.33.87.152/29 +62.5.130.104/29 +62.5.132.224/29 +62.5.189.80/29 +62.5.202.60/30 +62.5.218.204/30 +62.5.224.188/30 +62.5.242.80/28 +62.63.100.160/30 +62.63.101.80/29 +62.63.96.32/28 +62.63.98.24/29 +62.76.98.0/24 +77.243.9.80/28 +77.34.209.160/28 +77.35.76.80/28 +77.35.98.240/28 +77.37.128.0/17 +77.72.139.0/28 +77.82.124.112/29 +78.107.13.208/28 +78.107.16.96/28 +78.107.18.112/28 +78.107.3.208/28 +78.107.40.160/28 +78.107.42.144/28 +78.107.51.16/28 +78.107.61.96/28 +78.107.86.32/28 +78.108.192.0/21 +78.108.200.0/24 +78.109.140.112/29 +78.24.159.48/29 +78.37.104.0/29 +78.37.67.24/29 +78.37.69.160/27 +78.37.84.120/29 +78.37.97.88/29 +79.133.74.160/30 +79.133.74.168/30 +79.133.75.176/30 +79.133.75.44/30 +79.142.88.0/28 +80.237.11.88/29 +80.237.39.112/29 +80.237.98.80/28 +80.247.32.0/20 +80.247.32.0/24 +80.247.46.0/24 +80.254.100.40/29 +80.254.119.168/29 +80.73.16.0/20 +80.73.16.0/21 +80.73.16.0/24 +80.73.168.80/28 +80.73.169.244/30 +80.82.43.24/29 +80.89.152.220/30 +81.1.195.0/28 +81.1.205.96/27 +81.17.2.192/28 +81.17.3.16/29 +81.176.235.0/27 +81.176.70.0/26 +81.177.156.0/24 +81.195.105.160/28 +81.195.108.164/30 +81.195.112.36/30 +81.195.118.128/30 +81.195.118.48/30 +81.195.120.16/29 +81.195.124.52/30 +81.195.125.96/30 +81.195.148.140/30 +81.195.150.248/30 +81.195.151.172/30 +81.195.155.0/30 +81.195.161.12/30 +81.195.165.64/28 +81.195.168.24/30 +81.195.177.160/30 +81.195.178.224/27 +81.195.182.64/28 +81.195.192.96/30 +81.195.231.128/26 +81.195.244.32/29 +81.195.245.0/28 +81.195.247.128/28 +81.195.250.16/29 +81.195.36.48/28 +81.195.44.248/30 +81.195.45.64/30 +81.195.50.72/29 +81.195.90.44/30 +81.195.92.48/30 +81.195.93.192/27 +81.195.94.72/29 +81.2.1.0/28 +81.2.10.192/27 +81.211.32.16/28 +81.222.194.200/29 +81.222.209.136/29 +81.222.210.24/29 +81.3.168.148/30 +82.110.69.200/29 +82.140.65.240/29 +82.151.107.136/29 +82.162.103.144/28 +82.162.126.96/28 +82.162.149.160/28 +82.162.157.64/28 +82.162.158.176/28 +82.162.172.112/28 +82.162.72.208/28 +82.162.76.176/28 +82.162.80.192/28 +82.162.87.192/28 +82.162.90.0/28 +82.179.86.32/27 +82.196.130.0/27 +82.196.69.152/30 +82.198.176.144/29 +82.198.176.16/29 +82.198.176.208/29 +82.198.189.128/26 +82.198.190.64/26 +82.198.191.248/29 +82.198.191.96/27 +82.200.13.0/27 +82.200.22.136/29 +82.200.22.144/28 +82.200.64.0/24 +82.208.68.240/28 +82.208.77.104/29 +82.208.81.0/24 +82.208.93.160/27 +83.149.42.64/29 +83.172.36.224/29 +83.219.13.128/29 +83.219.13.184/29 +83.219.138.16/28 +83.219.23.48/29 +83.219.23.8/29 +83.219.25.0/29 +83.219.25.112/29 +83.219.5.248/29 +83.219.6.72/29 +83.220.53.16/28 +83.229.181.192/26 +83.229.232.16/29 +83.69.207.248/29 +84.204.143.44/30 +84.204.154.16/30 +84.204.170.220/30 +84.204.217.164/30 +84.204.245.208/29 +84.204.7.144/29 +84.53.210.144/28 +85.114.30.192/30 +85.114.30.204/30 +85.114.93.88/29 +85.141.17.112/30 +85.141.17.24/30 +85.141.18.80/30 +85.141.19.56/30 +85.141.21.236/30 +85.141.28.0/30 +85.141.31.68/30 +85.141.32.96/28 +85.141.33.0/28 +85.141.33.64/28 +85.141.60.96/28 +85.141.61.160/28 +85.143.125.0/24 +85.21.102.224/28 +85.21.103.64/28 +85.21.104.192/27 +85.21.148.0/26 +85.21.149.48/28 +85.21.155.208/28 +85.21.157.48/28 +85.21.204.208/28 +85.21.99.48/28 +85.21.99.64/28 +85.236.29.160/27 +85.90.100.72/29 +85.90.101.112/28 +85.90.101.192/29 +85.90.102.168/29 +85.90.120.72/29 +85.90.121.72/29 +85.90.125.96/29 +85.90.127.16/29 +85.90.98.144/30 +85.90.99.168/29 +86.102.100.48/28 +86.102.108.32/28 +86.102.109.32/28 +86.102.109.48/28 +86.102.115.80/28 +86.102.126.160/28 +86.102.126.80/28 +86.102.72.240/28 +86.102.74.64/28 +87.117.18.144/29 +87.117.20.128/28 +87.117.20.64/27 +87.117.20.96/27 +87.117.21.0/29 +87.117.21.16/29 +87.117.21.24/29 +87.117.21.32/29 +87.117.21.40/29 +87.117.21.48/29 +87.117.21.56/29 +87.117.21.64/29 +87.117.21.72/29 +87.117.21.8/29 +87.117.21.80/29 +87.117.23.128/28 +87.117.31.56/29 +87.225.56.224/28 +87.226.156.64/26 +87.226.191.0/24 +87.226.213.0/24 +87.226.239.180/30 +87.237.47.204/30 +87.245.133.0/24 +87.249.16.32/28 +87.249.18.60/30 +87.249.22.72/29 +87.249.28.232/29 +87.249.3.64/28 +87.249.30.176/30 +87.249.5.48/30 +87.249.7.120/29 +88.151.200.0/24 +88.200.208.112/29 +88.83.195.248/30 +89.106.172.160/29 +89.107.123.120/29 +89.107.123.136/29 +89.107.127.136/29 +89.109.250.88/29 +89.109.7.176/29 +89.111.176.0/22 +89.175.10.160/30 +89.175.165.208/28 +89.175.170.144/28 +89.175.174.136/29 +89.175.176.140/30 +89.175.176.176/30 +89.175.176.88/30 +89.175.188.184/29 +89.175.6.64/27 +89.175.8.104/30 +89.175.8.140/30 +89.175.8.192/30 +89.175.8.36/30 +89.175.8.40/30 +89.175.8.44/30 +89.175.8.52/30 +89.175.8.68/30 +89.175.9.4/30 +89.179.155.192/28 +89.179.179.16/28 +89.179.181.0/24 +89.21.129.16/28 +89.21.140.104/29 +89.21.152.104/29 +89.28.253.168/29 +89.28.255.56/29 +90.150.176.52/30 +90.150.189.128/29 +90.150.189.136/29 +90.150.189.144/29 +90.150.189.152/29 +90.150.189.160/29 +90.150.189.168/29 +90.150.189.176/29 +90.150.189.184/29 +90.150.189.192/29 +90.150.189.200/29 +90.150.189.208/29 +90.150.189.216/29 +90.150.189.224/29 +90.150.189.232/29 +90.150.189.248/29 +90.150.189.32/29 +91.103.194.184/29 +91.215.168.0/22 +91.217.34.0/23 +91.219.192.0/22 +91.221.140.0/23 +91.221.140.0/24 +91.221.141.0/24 +91.226.250.0/24 +91.227.32.0/24 +92.101.253.152/29 +92.39.106.168/30 +92.39.106.20/30 +92.39.111.84/30 +92.39.128.0/21 +92.50.198.124/30 +92.50.198.72/30 +92.50.219.136/29 +92.50.238.224/29 +92.60.186.0/28 +93.153.135.88/30 +93.153.136.132/30 +93.153.144.60/30 +93.153.171.204/30 +93.153.172.100/30 +93.153.175.44/30 +93.153.183.104/30 +93.153.194.160/29 +93.153.220.192/29 +93.153.223.8/29 +93.153.229.232/29 +93.153.244.188/30 +93.153.244.248/29 +93.153.251.0/24 +93.178.104.32/30 +93.178.104.36/30 +93.178.104.64/30 +93.178.104.68/30 +93.178.106.0/26 +93.182.23.48/29 +93.188.20.72/29 +93.190.110.0/24 +94.124.192.192/29 +94.199.64.0/21 +94.25.119.228/30 +94.25.53.56/29 +94.25.57.176/29 +94.25.57.224/28 +94.25.65.16/29 +94.25.70.64/30 +94.25.90.240/29 +94.25.95.136/30 +95.167.113.48/30 +95.167.114.48/30 +95.167.121.68/30 +95.167.122.128/28 +95.167.142.32/30 +95.167.157.156/30 +95.167.162.236/30 +95.167.162.76/30 +95.167.176.0/23 +95.167.2.4/30 +95.167.21.104/29 +95.167.213.0/24 +95.167.29.104/29 +95.167.4.168/29 +95.167.5.64/28 +95.167.5.80/28 +95.167.54.76/30 +95.167.59.244/30 +95.167.64.20/30 +95.167.68.216/29 +95.167.69.116/30 +95.167.70.136/29 +95.167.70.176/28 +95.167.70.32/28 +95.167.72.140/30 +95.167.72.204/30 +95.167.72.48/30 +95.167.74.136/29 +95.167.74.180/30 +95.167.76.160/27 +95.167.99.48/28 +95.173.128.0/19 +95.173.128.0/20 +95.173.144.0/20 +95.53.248.0/29 +95.54.193.80/28 diff --git a/blacklists/blacklist-v6.txt b/blacklists/blacklist-v6.txt new file mode 100644 index 0000000..743eac7 --- /dev/null +++ b/blacklists/blacklist-v6.txt @@ -0,0 +1,3 @@ +2a0c:a9c7:156::/48 +2a0c:a9c7:157::/48 +2a0c:a9c7:158::/48 diff --git a/blacklists/blacklist_with_comments.txt b/blacklists/blacklist_with_comments.txt index 5e19a39..8ee42f1 100644 --- a/blacklists/blacklist_with_comments.txt +++ b/blacklists/blacklist_with_comments.txt @@ -1,30 +1,30 @@ # Networks announced by AS34500 # AS-Name (ORG): CTSPI (FGUP CTSPI MGA Russia) -80.73.16.0/24 -80.73.16.0/21 80.73.16.0/20 +80.73.16.0/21 +80.73.16.0/24 # Networks announced by AS51932 # AS-Name (ORG): ORVD-AS (FGUP Goskorporatsiya po OrVD) -91.221.140.0/24 91.221.140.0/23 +91.221.140.0/24 91.221.141.0/24 # Networks announced by AS57835 # AS-Name (ORG): FGUP-ELEKTROSVYAZ-AS (JSC ELEKTROSVYAZ) 176.109.0.0/21 # Networks announced by AS61280 # AS-Name (ORG): CMU_GRCHC (FGUP "GRCHC") -185.224.230.0/24 212.192.157.0/24 -185.224.228.0/24 -185.224.231.0/24 -212.192.156.0/24 -185.224.229.0/24 -195.209.122.0/24 -2a0c:a9c7:156::/48 -2a0c:a9c7:157::/48 -212.192.158.0/24 195.209.123.0/24 +185.224.231.0/24 2a0c:a9c7:158::/48 +212.192.156.0/24 +2a0c:a9c7:157::/48 +185.224.229.0/24 +185.224.230.0/24 +212.192.158.0/24 +185.224.228.0/24 +2a0c:a9c7:156::/48 +195.209.122.0/24 # Networks announced by AS197153 # AS-Name (ORG): guvd (Glavnoe Upravlenie Vnutrennih Del po Sverdlovskoi Oblasti) 91.217.34.0/23 diff --git a/blacklists_iptables/.keep b/blacklists_iptables/.keep new file mode 100644 index 0000000..e69de29 diff --git a/blacklists_iptables/README.md b/blacklists_iptables/README.md new file mode 100644 index 0000000..2e8b393 --- /dev/null +++ b/blacklists_iptables/README.md @@ -0,0 +1,109 @@ +# IPTables/IPSet Blacklist Configurations + +Auto-generated ipset configuration files for blocking networks and IP addresses with iptables/ip6tables. + +## Available Files + +### IPv4 Only + +- **`blacklist-v4.ipset`** - Contains only IPv4 networks (806 entries) + +### IPv6 Only + +- **`blacklist-v6.ipset`** - Contains only IPv6 networks (3 entries) + +### Mixed IPv4/IPv6 + +- **`blacklist.ipset`** - Contains both IPv4 and IPv6 sets (809 total entries) + +## Usage + +### 1. Load the IPSet + +```bash +# For IPv4 only +ipset restore < blacklist-v4.ipset + +# For IPv6 only +ipset restore < blacklist-v6.ipset + +# For both IPv4 and IPv6 (loads both sets) +ipset restore < blacklist.ipset +``` + +### 2. Apply IPTables Rules + +```bash +# For IPv4 +iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP +iptables -I FORWARD -m set --match-set blacklist-v4 src -j DROP + +# For IPv6 +ip6tables -I INPUT -m set --match-set blacklist-v6 src -j DROP +ip6tables -I FORWARD -m set --match-set blacklist-v6 src -j DROP +``` + +### 3. Persist Rules (Optional) + +To make the rules persistent across reboots: + +**On Debian/Ubuntu:** + +```bash +# Save iptables rules +iptables-save > /etc/iptables/rules.v4 +ip6tables-save > /etc/iptables/rules.v6 + +# Save ipset +ipset save > /etc/ipset.conf +``` + +**On RHEL/CentOS:** + +```bash +# Save iptables rules +service iptables save +service ip6tables save + +# Save ipset +ipset save > /etc/sysconfig/ipset +``` + +### 4. Update Existing Sets + +To update the blacklist without restarting iptables: + +```bash +# Flush and reload +ipset flush blacklist-v4 +ipset restore < blacklist-v4.ipset +``` + +### 5. Remove Sets + +```bash +# Remove IPv4 set +ipset flush blacklist-v4 +ipset destroy blacklist-v4 + +# Remove IPv6 set +ipset flush blacklist-v6 +ipset destroy blacklist-v6 +``` + +## Performance Benefits + +IPSet uses hash tables for O(1) lookup performance, making it ideal for large blacklists: + +- Much faster than individual iptables rules +- Minimal CPU overhead +- Supports up to 65536 entries per set (configurable) +- Kernel-level implementation for maximum efficiency + +## Automatic Updates + +These files are automatically regenerated when the blacklists are updated via the GitHub Actions workflow. + +## Source + +Generated from the blacklist files in the `blacklists/` directory. diff --git a/blacklists_iptables/blacklist-v4.ipset b/blacklists_iptables/blacklist-v4.ipset new file mode 100644 index 0000000..bafa9a9 --- /dev/null +++ b/blacklists_iptables/blacklist-v4.ipset @@ -0,0 +1,824 @@ +# IPSet blacklist configuration (IPv4 only) +# Auto-generated from blacklist-v4.txt +# Last updated: 2025-10-23 09:43:00 UTC +# +# Usage: +# 1. Load the ipset: +# ipset restore < blacklist-v4.ipset +# +# 2. Use with iptables/ip6tables: +# iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP +# iptables -I FORWARD -m set --match-set blacklist-v4 src -j DROP +# +# 3. To flush/delete the set: +# ipset flush blacklist-v4 +# ipset destroy blacklist-v4 +# + +create blacklist-v4 hash:net family inet hashsize 1024 maxelem 1612 +add blacklist-v4 109.124.119.88/29 +add blacklist-v4 109.124.66.128/30 +add blacklist-v4 109.124.66.160/28 +add blacklist-v4 109.124.71.64/29 +add blacklist-v4 109.124.78.108/30 +add blacklist-v4 109.124.80.132/30 +add blacklist-v4 109.124.83.20/30 +add blacklist-v4 109.124.87.96/29 +add blacklist-v4 109.124.89.140/30 +add blacklist-v4 109.124.89.212/30 +add blacklist-v4 109.124.89.36/30 +add blacklist-v4 109.124.90.128/30 +add blacklist-v4 109.124.90.32/30 +add blacklist-v4 109.124.97.4/30 +add blacklist-v4 109.124.99.16/30 +add blacklist-v4 109.124.99.160/28 +add blacklist-v4 109.204.204.232/29 +add blacklist-v4 109.207.0.0/20 +add blacklist-v4 109.232.187.16/29 +add blacklist-v4 109.248.197.0/24 +add blacklist-v4 109.73.4.224/27 +add blacklist-v4 145.255.238.240/28 +add blacklist-v4 149.62.55.240/30 +add blacklist-v4 176.109.0.0/21 +add blacklist-v4 176.116.96.0/20 +add blacklist-v4 178.16.156.148/30 +add blacklist-v4 178.237.206.0/24 +add blacklist-v4 178.237.240.0/20 +add blacklist-v4 178.237.248.0/21 +add blacklist-v4 178.248.232.137/32 +add blacklist-v4 178.248.232.60/32 +add blacklist-v4 178.248.233.136/32 +add blacklist-v4 178.248.233.244/32 +add blacklist-v4 178.248.233.245/32 +add blacklist-v4 178.248.233.26/32 +add blacklist-v4 178.248.233.32/32 +add blacklist-v4 178.248.233.60/32 +add blacklist-v4 178.248.234.136/32 +add blacklist-v4 178.248.234.204/32 +add blacklist-v4 178.248.234.228/32 +add blacklist-v4 178.248.234.238/32 +add blacklist-v4 178.248.234.30/32 +add blacklist-v4 178.248.234.33/32 +add blacklist-v4 178.248.234.60/32 +add blacklist-v4 178.248.234.79/32 +add blacklist-v4 178.248.234.83/32 +add blacklist-v4 178.248.235.244/32 +add blacklist-v4 178.248.235.60/32 +add blacklist-v4 178.248.235.75/32 +add blacklist-v4 178.248.236.20/32 +add blacklist-v4 178.248.236.244/32 +add blacklist-v4 178.248.236.83/32 +add blacklist-v4 178.248.237.136/32 +add blacklist-v4 178.248.237.18/32 +add blacklist-v4 178.248.237.242/32 +add blacklist-v4 178.248.237.98/32 +add blacklist-v4 178.248.238.102/32 +add blacklist-v4 178.248.238.128/32 +add blacklist-v4 178.248.238.129/32 +add blacklist-v4 178.248.238.136/32 +add blacklist-v4 178.248.238.155/32 +add blacklist-v4 178.248.238.172/32 +add blacklist-v4 178.248.238.205/32 +add blacklist-v4 178.248.238.255/32 +add blacklist-v4 178.248.238.55/32 +add blacklist-v4 178.248.239.215/32 +add blacklist-v4 178.49.148.176/29 +add blacklist-v4 185.149.160.0/24 +add blacklist-v4 185.149.161.0/24 +add blacklist-v4 185.149.162.0/24 +add blacklist-v4 185.149.163.0/24 +add blacklist-v4 185.168.60.0/24 +add blacklist-v4 185.168.61.0/24 +add blacklist-v4 185.168.62.0/24 +add blacklist-v4 185.168.63.0/24 +add blacklist-v4 185.179.224.0/24 +add blacklist-v4 185.179.225.0/24 +add blacklist-v4 185.179.226.0/24 +add blacklist-v4 185.179.227.0/24 +add blacklist-v4 185.183.172.0/23 +add blacklist-v4 185.183.174.0/23 +add blacklist-v4 185.224.228.0/24 +add blacklist-v4 185.224.229.0/24 +add blacklist-v4 185.224.230.0/24 +add blacklist-v4 185.224.231.0/24 +add blacklist-v4 185.65.149.170/32 +add blacklist-v4 185.7.234.188/30 +add blacklist-v4 188.128.101.108/30 +add blacklist-v4 188.128.11.196/30 +add blacklist-v4 188.128.112.216/29 +add blacklist-v4 188.128.112.240/29 +add blacklist-v4 188.128.113.0/28 +add blacklist-v4 188.128.114.128/28 +add blacklist-v4 188.128.115.232/29 +add blacklist-v4 188.128.118.224/27 +add blacklist-v4 188.128.119.104/30 +add blacklist-v4 188.128.8.240/30 +add blacklist-v4 188.128.89.0/30 +add blacklist-v4 188.128.92.104/30 +add blacklist-v4 188.128.94.204/30 +add blacklist-v4 188.128.98.204/30 +add blacklist-v4 188.247.36.124/30 +add blacklist-v4 188.247.36.128/30 +add blacklist-v4 188.247.36.132/30 +add blacklist-v4 188.247.36.136/30 +add blacklist-v4 188.247.36.140/30 +add blacklist-v4 188.247.36.204/30 +add blacklist-v4 193.232.70.0/24 +add blacklist-v4 193.47.146.0/24 +add blacklist-v4 194.140.247.0/25 +add blacklist-v4 194.140.247.128/25 +add blacklist-v4 194.150.202.0/23 +add blacklist-v4 194.165.22.0/23 +add blacklist-v4 194.186.112.80/28 +add blacklist-v4 194.190.9.0/24 +add blacklist-v4 194.215.248.0/24 +add blacklist-v4 194.226.116.0/22 +add blacklist-v4 194.226.127.0/24 +add blacklist-v4 194.226.80.0/21 +add blacklist-v4 194.226.88.0/21 +add blacklist-v4 194.67.63.200/30 +add blacklist-v4 194.8.246.0/23 +add blacklist-v4 194.8.70.0/23 +add blacklist-v4 195.128.157.0/24 +add blacklist-v4 195.131.53.248/29 +add blacklist-v4 195.131.61.80/29 +add blacklist-v4 195.131.63.24/29 +add blacklist-v4 195.131.7.8/29 +add blacklist-v4 195.144.232.144/30 +add blacklist-v4 195.144.240.128/28 +add blacklist-v4 195.149.110.0/24 +add blacklist-v4 195.151.25.48/29 +add blacklist-v4 195.16.55.224/27 +add blacklist-v4 195.162.36.64/28 +add blacklist-v4 195.170.218.24/29 +add blacklist-v4 195.170.218.88/29 +add blacklist-v4 195.182.142.128/26 +add blacklist-v4 195.182.145.64/28 +add blacklist-v4 195.182.151.212/30 +add blacklist-v4 195.182.151.216/30 +add blacklist-v4 195.182.155.164/30 +add blacklist-v4 195.182.156.96/30 +add blacklist-v4 195.209.120.0/22 +add blacklist-v4 195.209.122.0/24 +add blacklist-v4 195.209.123.0/24 +add blacklist-v4 195.218.175.40/29 +add blacklist-v4 195.239.113.0/24 +add blacklist-v4 195.3.240.0/22 +add blacklist-v4 195.42.75.8/29 +add blacklist-v4 195.54.20.168/29 +add blacklist-v4 195.54.221.0/24 +add blacklist-v4 195.54.28.72/30 +add blacklist-v4 195.58.13.120/30 +add blacklist-v4 195.58.21.196/30 +add blacklist-v4 195.58.29.57/32 +add blacklist-v4 195.58.30.164/30 +add blacklist-v4 195.58.30.200/29 +add blacklist-v4 195.58.5.16/30 +add blacklist-v4 195.58.5.20/30 +add blacklist-v4 195.80.224.0/24 +add blacklist-v4 195.98.38.16/28 +add blacklist-v4 195.98.43.104/29 +add blacklist-v4 195.98.73.56/29 +add blacklist-v4 195.98.77.100/30 +add blacklist-v4 212.119.174.0/24 +add blacklist-v4 212.119.175.0/24 +add blacklist-v4 212.120.169.48/29 +add blacklist-v4 212.120.174.88/29 +add blacklist-v4 212.120.184.48/29 +add blacklist-v4 212.120.184.56/29 +add blacklist-v4 212.120.184.64/29 +add blacklist-v4 212.120.189.208/29 +add blacklist-v4 212.120.189.224/29 +add blacklist-v4 212.120.190.112/29 +add blacklist-v4 212.120.190.240/29 +add blacklist-v4 212.120.191.120/29 +add blacklist-v4 212.120.191.248/29 +add blacklist-v4 212.13.104.116/30 +add blacklist-v4 212.13.113.100/30 +add blacklist-v4 212.15.105.64/28 +add blacklist-v4 212.15.114.156/30 +add blacklist-v4 212.15.115.80/28 +add blacklist-v4 212.17.16.192/27 +add blacklist-v4 212.17.17.176/28 +add blacklist-v4 212.17.8.176/29 +add blacklist-v4 212.17.9.144/28 +add blacklist-v4 212.192.156.0/22 +add blacklist-v4 212.192.156.0/24 +add blacklist-v4 212.192.157.0/24 +add blacklist-v4 212.192.158.0/24 +add blacklist-v4 212.23.85.48/30 +add blacklist-v4 212.23.85.56/29 +add blacklist-v4 212.32.198.64/29 +add blacklist-v4 212.48.134.192/26 +add blacklist-v4 212.48.138.240/28 +add blacklist-v4 212.48.141.160/27 +add blacklist-v4 212.48.34.176/29 +add blacklist-v4 212.48.34.184/29 +add blacklist-v4 212.48.53.100/30 +add blacklist-v4 212.48.53.144/30 +add blacklist-v4 212.48.53.152/30 +add blacklist-v4 212.48.53.156/30 +add blacklist-v4 212.48.53.160/30 +add blacklist-v4 212.48.53.164/30 +add blacklist-v4 212.48.53.184/30 +add blacklist-v4 212.48.53.188/30 +add blacklist-v4 212.48.53.192/30 +add blacklist-v4 212.48.53.196/30 +add blacklist-v4 212.48.53.200/30 +add blacklist-v4 212.48.53.216/30 +add blacklist-v4 212.48.53.236/30 +add blacklist-v4 212.48.53.240/30 +add blacklist-v4 212.48.53.244/30 +add blacklist-v4 212.48.53.248/30 +add blacklist-v4 212.48.53.252/30 +add blacklist-v4 212.48.53.76/30 +add blacklist-v4 212.48.53.84/30 +add blacklist-v4 212.48.53.88/30 +add blacklist-v4 212.48.53.92/30 +add blacklist-v4 212.48.54.0/30 +add blacklist-v4 212.48.54.100/30 +add blacklist-v4 212.48.54.104/30 +add blacklist-v4 212.48.54.108/30 +add blacklist-v4 212.48.54.112/30 +add blacklist-v4 212.48.54.116/30 +add blacklist-v4 212.48.54.12/30 +add blacklist-v4 212.48.54.120/30 +add blacklist-v4 212.48.54.124/30 +add blacklist-v4 212.48.54.128/30 +add blacklist-v4 212.48.54.132/30 +add blacklist-v4 212.48.54.136/30 +add blacklist-v4 212.48.54.140/30 +add blacklist-v4 212.48.54.144/30 +add blacklist-v4 212.48.54.148/30 +add blacklist-v4 212.48.54.152/30 +add blacklist-v4 212.48.54.156/30 +add blacklist-v4 212.48.54.16/30 +add blacklist-v4 212.48.54.164/30 +add blacklist-v4 212.48.54.168/30 +add blacklist-v4 212.48.54.172/30 +add blacklist-v4 212.48.54.176/30 +add blacklist-v4 212.48.54.180/30 +add blacklist-v4 212.48.54.184/30 +add blacklist-v4 212.48.54.188/30 +add blacklist-v4 212.48.54.196/30 +add blacklist-v4 212.48.54.20/30 +add blacklist-v4 212.48.54.200/30 +add blacklist-v4 212.48.54.208/30 +add blacklist-v4 212.48.54.212/30 +add blacklist-v4 212.48.54.216/30 +add blacklist-v4 212.48.54.220/30 +add blacklist-v4 212.48.54.24/30 +add blacklist-v4 212.48.54.240/30 +add blacklist-v4 212.48.54.244/30 +add blacklist-v4 212.48.54.248/30 +add blacklist-v4 212.48.54.252/30 +add blacklist-v4 212.48.54.28/30 +add blacklist-v4 212.48.54.32/30 +add blacklist-v4 212.48.54.36/30 +add blacklist-v4 212.48.54.44/30 +add blacklist-v4 212.48.54.48/30 +add blacklist-v4 212.48.54.52/30 +add blacklist-v4 212.48.54.56/30 +add blacklist-v4 212.48.54.60/30 +add blacklist-v4 212.48.54.64/30 +add blacklist-v4 212.48.54.68/30 +add blacklist-v4 212.48.54.72/30 +add blacklist-v4 212.48.54.76/30 +add blacklist-v4 212.48.54.8/30 +add blacklist-v4 212.48.54.80/30 +add blacklist-v4 212.48.54.84/30 +add blacklist-v4 212.48.54.92/30 +add blacklist-v4 212.48.54.96/30 +add blacklist-v4 212.49.107.224/27 +add blacklist-v4 212.49.124.0/26 +add blacklist-v4 212.57.133.0/24 +add blacklist-v4 212.57.159.0/24 +add blacklist-v4 212.59.98.48/29 +add blacklist-v4 212.59.99.96/27 +add blacklist-v4 213.172.17.252/30 +add blacklist-v4 213.172.18.124/30 +add blacklist-v4 213.172.18.148/30 +add blacklist-v4 213.172.18.160/30 +add blacklist-v4 213.172.18.164/30 +add blacklist-v4 213.172.18.252/30 +add blacklist-v4 213.172.18.60/30 +add blacklist-v4 213.172.27.0/30 +add blacklist-v4 213.172.27.116/30 +add blacklist-v4 213.172.27.160/30 +add blacklist-v4 213.172.27.204/30 +add blacklist-v4 213.172.27.212/30 +add blacklist-v4 213.172.27.224/30 +add blacklist-v4 213.172.27.252/30 +add blacklist-v4 213.172.30.136/30 +add blacklist-v4 213.177.111.0/24 +add blacklist-v4 213.183.253.56/29 +add blacklist-v4 213.219.237.68/30 +add blacklist-v4 213.234.13.60/30 +add blacklist-v4 213.234.15.228/30 +add blacklist-v4 213.234.15.248/30 +add blacklist-v4 213.234.18.52/30 +add blacklist-v4 213.234.8.8/30 +add blacklist-v4 213.24.128.0/22 +add blacklist-v4 213.24.143.0/24 +add blacklist-v4 213.24.152.0/22 +add blacklist-v4 213.24.160.0/28 +add blacklist-v4 213.24.34.0/24 +add blacklist-v4 213.24.75.0/24 +add blacklist-v4 213.24.76.0/23 +add blacklist-v4 213.242.204.236/30 +add blacklist-v4 213.242.204.76/30 +add blacklist-v4 213.242.205.88/30 +add blacklist-v4 213.242.215.192/29 +add blacklist-v4 213.242.215.68/30 +add blacklist-v4 213.243.106.48/28 +add blacklist-v4 213.243.116.0/24 +add blacklist-v4 213.243.84.80/28 +add blacklist-v4 213.33.171.240/29 +add blacklist-v4 213.59.59.120/29 +add blacklist-v4 213.59.59.128/29 +add blacklist-v4 213.59.59.144/29 +add blacklist-v4 213.59.59.16/29 +add blacklist-v4 213.59.59.168/29 +add blacklist-v4 213.59.59.64/29 +add blacklist-v4 213.59.91.128/27 +add blacklist-v4 213.59.91.176/28 +add blacklist-v4 213.59.91.48/29 +add blacklist-v4 213.85.142.176/28 +add blacklist-v4 213.85.2.64/28 +add blacklist-v4 213.85.2.80/29 +add blacklist-v4 213.85.20.32/30 +add blacklist-v4 213.85.20.8/30 +add blacklist-v4 213.85.20.84/30 +add blacklist-v4 213.85.77.64/27 +add blacklist-v4 217.106.0.0/16 +add blacklist-v4 217.106.115.168/29 +add blacklist-v4 217.106.147.0/29 +add blacklist-v4 217.106.147.8/29 +add blacklist-v4 217.106.150.224/29 +add blacklist-v4 217.106.150.72/29 +add blacklist-v4 217.106.150.80/29 +add blacklist-v4 217.106.150.88/29 +add blacklist-v4 217.106.203.240/29 +add blacklist-v4 217.106.203.88/29 +add blacklist-v4 217.106.93.192/26 +add blacklist-v4 217.106.95.112/28 +add blacklist-v4 217.107.200.0/21 +add blacklist-v4 217.107.5.112/29 +add blacklist-v4 217.107.5.16/29 +add blacklist-v4 217.107.5.24/29 +add blacklist-v4 217.107.5.40/29 +add blacklist-v4 217.107.5.8/29 +add blacklist-v4 217.107.5.80/29 +add blacklist-v4 217.107.5.88/29 +add blacklist-v4 217.107.5.96/29 +add blacklist-v4 217.147.23.112/28 +add blacklist-v4 217.148.216.156/30 +add blacklist-v4 217.148.220.160/29 +add blacklist-v4 217.172.18.0/23 +add blacklist-v4 217.195.92.16/28 +add blacklist-v4 217.195.93.144/29 +add blacklist-v4 217.195.94.200/29 +add blacklist-v4 217.20.86.128/26 +add blacklist-v4 217.20.86.232/29 +add blacklist-v4 217.23.88.168/29 +add blacklist-v4 217.23.88.248/29 +add blacklist-v4 217.27.142.176/30 +add blacklist-v4 217.65.214.24/29 +add blacklist-v4 217.65.219.160/29 +add blacklist-v4 217.67.177.208/29 +add blacklist-v4 31.177.95.0/24 +add blacklist-v4 31.44.63.64/29 +add blacklist-v4 37.28.161.48/30 +add blacklist-v4 37.29.53.16/30 +add blacklist-v4 37.29.57.52/30 +add blacklist-v4 37.29.57.64/30 +add blacklist-v4 37.29.59.56/30 +add blacklist-v4 46.20.70.160/28 +add blacklist-v4 46.228.0.232/29 +add blacklist-v4 46.29.152.0/22 +add blacklist-v4 46.46.142.160/28 +add blacklist-v4 46.46.148.40/29 +add blacklist-v4 46.47.197.128/30 +add blacklist-v4 46.47.199.76/30 +add blacklist-v4 46.47.203.52/30 +add blacklist-v4 46.47.207.96/30 +add blacklist-v4 46.47.208.84/30 +add blacklist-v4 46.47.210.76/30 +add blacklist-v4 46.47.211.0/24 +add blacklist-v4 46.47.212.204/30 +add blacklist-v4 46.47.213.0/24 +add blacklist-v4 46.47.214.200/30 +add blacklist-v4 46.47.219.200/30 +add blacklist-v4 46.47.223.196/30 +add blacklist-v4 46.47.229.0/28 +add blacklist-v4 46.47.238.144/30 +add blacklist-v4 46.47.249.176/29 +add blacklist-v4 46.61.208.0/24 +add blacklist-v4 62.112.110.64/28 +add blacklist-v4 62.118.0.208/28 +add blacklist-v4 62.118.101.184/29 +add blacklist-v4 62.118.113.232/29 +add blacklist-v4 62.118.125.188/30 +add blacklist-v4 62.118.127.240/28 +add blacklist-v4 62.118.15.16/28 +add blacklist-v4 62.118.17.152/29 +add blacklist-v4 62.118.19.112/30 +add blacklist-v4 62.118.19.40/30 +add blacklist-v4 62.118.193.8/29 +add blacklist-v4 62.118.205.68/30 +add blacklist-v4 62.118.208.100/30 +add blacklist-v4 62.118.209.192/30 +add blacklist-v4 62.118.21.160/29 +add blacklist-v4 62.118.216.60/30 +add blacklist-v4 62.118.219.184/30 +add blacklist-v4 62.118.230.4/30 +add blacklist-v4 62.118.233.224/29 +add blacklist-v4 62.118.234.64/29 +add blacklist-v4 62.118.239.128/29 +add blacklist-v4 62.118.25.112/28 +add blacklist-v4 62.118.37.168/30 +add blacklist-v4 62.118.37.180/30 +add blacklist-v4 62.118.37.4/30 +add blacklist-v4 62.118.38.212/30 +add blacklist-v4 62.141.125.0/25 +add blacklist-v4 62.181.52.56/29 +add blacklist-v4 62.28.169.168/30 +add blacklist-v4 62.33.199.80/29 +add blacklist-v4 62.33.34.16/28 +add blacklist-v4 62.33.87.128/28 +add blacklist-v4 62.33.87.152/29 +add blacklist-v4 62.5.130.104/29 +add blacklist-v4 62.5.132.224/29 +add blacklist-v4 62.5.189.80/29 +add blacklist-v4 62.5.202.60/30 +add blacklist-v4 62.5.218.204/30 +add blacklist-v4 62.5.224.188/30 +add blacklist-v4 62.5.242.80/28 +add blacklist-v4 62.63.100.160/30 +add blacklist-v4 62.63.101.80/29 +add blacklist-v4 62.63.96.32/28 +add blacklist-v4 62.63.98.24/29 +add blacklist-v4 62.76.98.0/24 +add blacklist-v4 77.243.9.80/28 +add blacklist-v4 77.34.209.160/28 +add blacklist-v4 77.35.76.80/28 +add blacklist-v4 77.35.98.240/28 +add blacklist-v4 77.37.128.0/17 +add blacklist-v4 77.72.139.0/28 +add blacklist-v4 77.82.124.112/29 +add blacklist-v4 78.107.13.208/28 +add blacklist-v4 78.107.16.96/28 +add blacklist-v4 78.107.18.112/28 +add blacklist-v4 78.107.3.208/28 +add blacklist-v4 78.107.40.160/28 +add blacklist-v4 78.107.42.144/28 +add blacklist-v4 78.107.51.16/28 +add blacklist-v4 78.107.61.96/28 +add blacklist-v4 78.107.86.32/28 +add blacklist-v4 78.108.192.0/21 +add blacklist-v4 78.108.200.0/24 +add blacklist-v4 78.109.140.112/29 +add blacklist-v4 78.24.159.48/29 +add blacklist-v4 78.37.104.0/29 +add blacklist-v4 78.37.67.24/29 +add blacklist-v4 78.37.69.160/27 +add blacklist-v4 78.37.84.120/29 +add blacklist-v4 78.37.97.88/29 +add blacklist-v4 79.133.74.160/30 +add blacklist-v4 79.133.74.168/30 +add blacklist-v4 79.133.75.176/30 +add blacklist-v4 79.133.75.44/30 +add blacklist-v4 79.142.88.0/28 +add blacklist-v4 80.237.11.88/29 +add blacklist-v4 80.237.39.112/29 +add blacklist-v4 80.237.98.80/28 +add blacklist-v4 80.247.32.0/20 +add blacklist-v4 80.247.32.0/24 +add blacklist-v4 80.247.46.0/24 +add blacklist-v4 80.254.100.40/29 +add blacklist-v4 80.254.119.168/29 +add blacklist-v4 80.73.16.0/20 +add blacklist-v4 80.73.16.0/21 +add blacklist-v4 80.73.16.0/24 +add blacklist-v4 80.73.168.80/28 +add blacklist-v4 80.73.169.244/30 +add blacklist-v4 80.82.43.24/29 +add blacklist-v4 80.89.152.220/30 +add blacklist-v4 81.1.195.0/28 +add blacklist-v4 81.1.205.96/27 +add blacklist-v4 81.17.2.192/28 +add blacklist-v4 81.17.3.16/29 +add blacklist-v4 81.176.235.0/27 +add blacklist-v4 81.176.70.0/26 +add blacklist-v4 81.177.156.0/24 +add blacklist-v4 81.195.105.160/28 +add blacklist-v4 81.195.108.164/30 +add blacklist-v4 81.195.112.36/30 +add blacklist-v4 81.195.118.128/30 +add blacklist-v4 81.195.118.48/30 +add blacklist-v4 81.195.120.16/29 +add blacklist-v4 81.195.124.52/30 +add blacklist-v4 81.195.125.96/30 +add blacklist-v4 81.195.148.140/30 +add blacklist-v4 81.195.150.248/30 +add blacklist-v4 81.195.151.172/30 +add blacklist-v4 81.195.155.0/30 +add blacklist-v4 81.195.161.12/30 +add blacklist-v4 81.195.165.64/28 +add blacklist-v4 81.195.168.24/30 +add blacklist-v4 81.195.177.160/30 +add blacklist-v4 81.195.178.224/27 +add blacklist-v4 81.195.182.64/28 +add blacklist-v4 81.195.192.96/30 +add blacklist-v4 81.195.231.128/26 +add blacklist-v4 81.195.244.32/29 +add blacklist-v4 81.195.245.0/28 +add blacklist-v4 81.195.247.128/28 +add blacklist-v4 81.195.250.16/29 +add blacklist-v4 81.195.36.48/28 +add blacklist-v4 81.195.44.248/30 +add blacklist-v4 81.195.45.64/30 +add blacklist-v4 81.195.50.72/29 +add blacklist-v4 81.195.90.44/30 +add blacklist-v4 81.195.92.48/30 +add blacklist-v4 81.195.93.192/27 +add blacklist-v4 81.195.94.72/29 +add blacklist-v4 81.2.1.0/28 +add blacklist-v4 81.2.10.192/27 +add blacklist-v4 81.211.32.16/28 +add blacklist-v4 81.222.194.200/29 +add blacklist-v4 81.222.209.136/29 +add blacklist-v4 81.222.210.24/29 +add blacklist-v4 81.3.168.148/30 +add blacklist-v4 82.110.69.200/29 +add blacklist-v4 82.140.65.240/29 +add blacklist-v4 82.151.107.136/29 +add blacklist-v4 82.162.103.144/28 +add blacklist-v4 82.162.126.96/28 +add blacklist-v4 82.162.149.160/28 +add blacklist-v4 82.162.157.64/28 +add blacklist-v4 82.162.158.176/28 +add blacklist-v4 82.162.172.112/28 +add blacklist-v4 82.162.72.208/28 +add blacklist-v4 82.162.76.176/28 +add blacklist-v4 82.162.80.192/28 +add blacklist-v4 82.162.87.192/28 +add blacklist-v4 82.162.90.0/28 +add blacklist-v4 82.179.86.32/27 +add blacklist-v4 82.196.130.0/27 +add blacklist-v4 82.196.69.152/30 +add blacklist-v4 82.198.176.144/29 +add blacklist-v4 82.198.176.16/29 +add blacklist-v4 82.198.176.208/29 +add blacklist-v4 82.198.189.128/26 +add blacklist-v4 82.198.190.64/26 +add blacklist-v4 82.198.191.248/29 +add blacklist-v4 82.198.191.96/27 +add blacklist-v4 82.200.13.0/27 +add blacklist-v4 82.200.22.136/29 +add blacklist-v4 82.200.22.144/28 +add blacklist-v4 82.200.64.0/24 +add blacklist-v4 82.208.68.240/28 +add blacklist-v4 82.208.77.104/29 +add blacklist-v4 82.208.81.0/24 +add blacklist-v4 82.208.93.160/27 +add blacklist-v4 83.149.42.64/29 +add blacklist-v4 83.172.36.224/29 +add blacklist-v4 83.219.13.128/29 +add blacklist-v4 83.219.13.184/29 +add blacklist-v4 83.219.138.16/28 +add blacklist-v4 83.219.23.48/29 +add blacklist-v4 83.219.23.8/29 +add blacklist-v4 83.219.25.0/29 +add blacklist-v4 83.219.25.112/29 +add blacklist-v4 83.219.5.248/29 +add blacklist-v4 83.219.6.72/29 +add blacklist-v4 83.220.53.16/28 +add blacklist-v4 83.229.181.192/26 +add blacklist-v4 83.229.232.16/29 +add blacklist-v4 83.69.207.248/29 +add blacklist-v4 84.204.143.44/30 +add blacklist-v4 84.204.154.16/30 +add blacklist-v4 84.204.170.220/30 +add blacklist-v4 84.204.217.164/30 +add blacklist-v4 84.204.245.208/29 +add blacklist-v4 84.204.7.144/29 +add blacklist-v4 84.53.210.144/28 +add blacklist-v4 85.114.30.192/30 +add blacklist-v4 85.114.30.204/30 +add blacklist-v4 85.114.93.88/29 +add blacklist-v4 85.141.17.112/30 +add blacklist-v4 85.141.17.24/30 +add blacklist-v4 85.141.18.80/30 +add blacklist-v4 85.141.19.56/30 +add blacklist-v4 85.141.21.236/30 +add blacklist-v4 85.141.28.0/30 +add blacklist-v4 85.141.31.68/30 +add blacklist-v4 85.141.32.96/28 +add blacklist-v4 85.141.33.0/28 +add blacklist-v4 85.141.33.64/28 +add blacklist-v4 85.141.60.96/28 +add blacklist-v4 85.141.61.160/28 +add blacklist-v4 85.143.125.0/24 +add blacklist-v4 85.21.102.224/28 +add blacklist-v4 85.21.103.64/28 +add blacklist-v4 85.21.104.192/27 +add blacklist-v4 85.21.148.0/26 +add blacklist-v4 85.21.149.48/28 +add blacklist-v4 85.21.155.208/28 +add blacklist-v4 85.21.157.48/28 +add blacklist-v4 85.21.204.208/28 +add blacklist-v4 85.21.99.48/28 +add blacklist-v4 85.21.99.64/28 +add blacklist-v4 85.236.29.160/27 +add blacklist-v4 85.90.100.72/29 +add blacklist-v4 85.90.101.112/28 +add blacklist-v4 85.90.101.192/29 +add blacklist-v4 85.90.102.168/29 +add blacklist-v4 85.90.120.72/29 +add blacklist-v4 85.90.121.72/29 +add blacklist-v4 85.90.125.96/29 +add blacklist-v4 85.90.127.16/29 +add blacklist-v4 85.90.98.144/30 +add blacklist-v4 85.90.99.168/29 +add blacklist-v4 86.102.100.48/28 +add blacklist-v4 86.102.108.32/28 +add blacklist-v4 86.102.109.32/28 +add blacklist-v4 86.102.109.48/28 +add blacklist-v4 86.102.115.80/28 +add blacklist-v4 86.102.126.160/28 +add blacklist-v4 86.102.126.80/28 +add blacklist-v4 86.102.72.240/28 +add blacklist-v4 86.102.74.64/28 +add blacklist-v4 87.117.18.144/29 +add blacklist-v4 87.117.20.128/28 +add blacklist-v4 87.117.20.64/27 +add blacklist-v4 87.117.20.96/27 +add blacklist-v4 87.117.21.0/29 +add blacklist-v4 87.117.21.16/29 +add blacklist-v4 87.117.21.24/29 +add blacklist-v4 87.117.21.32/29 +add blacklist-v4 87.117.21.40/29 +add blacklist-v4 87.117.21.48/29 +add blacklist-v4 87.117.21.56/29 +add blacklist-v4 87.117.21.64/29 +add blacklist-v4 87.117.21.72/29 +add blacklist-v4 87.117.21.8/29 +add blacklist-v4 87.117.21.80/29 +add blacklist-v4 87.117.23.128/28 +add blacklist-v4 87.117.31.56/29 +add blacklist-v4 87.225.56.224/28 +add blacklist-v4 87.226.156.64/26 +add blacklist-v4 87.226.191.0/24 +add blacklist-v4 87.226.213.0/24 +add blacklist-v4 87.226.239.180/30 +add blacklist-v4 87.237.47.204/30 +add blacklist-v4 87.245.133.0/24 +add blacklist-v4 87.249.16.32/28 +add blacklist-v4 87.249.18.60/30 +add blacklist-v4 87.249.22.72/29 +add blacklist-v4 87.249.28.232/29 +add blacklist-v4 87.249.3.64/28 +add blacklist-v4 87.249.30.176/30 +add blacklist-v4 87.249.5.48/30 +add blacklist-v4 87.249.7.120/29 +add blacklist-v4 88.151.200.0/24 +add blacklist-v4 88.200.208.112/29 +add blacklist-v4 88.83.195.248/30 +add blacklist-v4 89.106.172.160/29 +add blacklist-v4 89.107.123.120/29 +add blacklist-v4 89.107.123.136/29 +add blacklist-v4 89.107.127.136/29 +add blacklist-v4 89.109.250.88/29 +add blacklist-v4 89.109.7.176/29 +add blacklist-v4 89.111.176.0/22 +add blacklist-v4 89.175.10.160/30 +add blacklist-v4 89.175.165.208/28 +add blacklist-v4 89.175.170.144/28 +add blacklist-v4 89.175.174.136/29 +add blacklist-v4 89.175.176.140/30 +add blacklist-v4 89.175.176.176/30 +add blacklist-v4 89.175.176.88/30 +add blacklist-v4 89.175.188.184/29 +add blacklist-v4 89.175.6.64/27 +add blacklist-v4 89.175.8.104/30 +add blacklist-v4 89.175.8.140/30 +add blacklist-v4 89.175.8.192/30 +add blacklist-v4 89.175.8.36/30 +add blacklist-v4 89.175.8.40/30 +add blacklist-v4 89.175.8.44/30 +add blacklist-v4 89.175.8.52/30 +add blacklist-v4 89.175.8.68/30 +add blacklist-v4 89.175.9.4/30 +add blacklist-v4 89.179.155.192/28 +add blacklist-v4 89.179.179.16/28 +add blacklist-v4 89.179.181.0/24 +add blacklist-v4 89.21.129.16/28 +add blacklist-v4 89.21.140.104/29 +add blacklist-v4 89.21.152.104/29 +add blacklist-v4 89.28.253.168/29 +add blacklist-v4 89.28.255.56/29 +add blacklist-v4 90.150.176.52/30 +add blacklist-v4 90.150.189.128/29 +add blacklist-v4 90.150.189.136/29 +add blacklist-v4 90.150.189.144/29 +add blacklist-v4 90.150.189.152/29 +add blacklist-v4 90.150.189.160/29 +add blacklist-v4 90.150.189.168/29 +add blacklist-v4 90.150.189.176/29 +add blacklist-v4 90.150.189.184/29 +add blacklist-v4 90.150.189.192/29 +add blacklist-v4 90.150.189.200/29 +add blacklist-v4 90.150.189.208/29 +add blacklist-v4 90.150.189.216/29 +add blacklist-v4 90.150.189.224/29 +add blacklist-v4 90.150.189.232/29 +add blacklist-v4 90.150.189.248/29 +add blacklist-v4 90.150.189.32/29 +add blacklist-v4 91.103.194.184/29 +add blacklist-v4 91.215.168.0/22 +add blacklist-v4 91.217.34.0/23 +add blacklist-v4 91.219.192.0/22 +add blacklist-v4 91.221.140.0/23 +add blacklist-v4 91.221.140.0/24 +add blacklist-v4 91.221.141.0/24 +add blacklist-v4 91.226.250.0/24 +add blacklist-v4 91.227.32.0/24 +add blacklist-v4 92.101.253.152/29 +add blacklist-v4 92.39.106.168/30 +add blacklist-v4 92.39.106.20/30 +add blacklist-v4 92.39.111.84/30 +add blacklist-v4 92.39.128.0/21 +add blacklist-v4 92.50.198.124/30 +add blacklist-v4 92.50.198.72/30 +add blacklist-v4 92.50.219.136/29 +add blacklist-v4 92.50.238.224/29 +add blacklist-v4 92.60.186.0/28 +add blacklist-v4 93.153.135.88/30 +add blacklist-v4 93.153.136.132/30 +add blacklist-v4 93.153.144.60/30 +add blacklist-v4 93.153.171.204/30 +add blacklist-v4 93.153.172.100/30 +add blacklist-v4 93.153.175.44/30 +add blacklist-v4 93.153.183.104/30 +add blacklist-v4 93.153.194.160/29 +add blacklist-v4 93.153.220.192/29 +add blacklist-v4 93.153.223.8/29 +add blacklist-v4 93.153.229.232/29 +add blacklist-v4 93.153.244.188/30 +add blacklist-v4 93.153.244.248/29 +add blacklist-v4 93.153.251.0/24 +add blacklist-v4 93.178.104.32/30 +add blacklist-v4 93.178.104.36/30 +add blacklist-v4 93.178.104.64/30 +add blacklist-v4 93.178.104.68/30 +add blacklist-v4 93.178.106.0/26 +add blacklist-v4 93.182.23.48/29 +add blacklist-v4 93.188.20.72/29 +add blacklist-v4 93.190.110.0/24 +add blacklist-v4 94.124.192.192/29 +add blacklist-v4 94.199.64.0/21 +add blacklist-v4 94.25.119.228/30 +add blacklist-v4 94.25.53.56/29 +add blacklist-v4 94.25.57.176/29 +add blacklist-v4 94.25.57.224/28 +add blacklist-v4 94.25.65.16/29 +add blacklist-v4 94.25.70.64/30 +add blacklist-v4 94.25.90.240/29 +add blacklist-v4 94.25.95.136/30 +add blacklist-v4 95.167.113.48/30 +add blacklist-v4 95.167.114.48/30 +add blacklist-v4 95.167.121.68/30 +add blacklist-v4 95.167.122.128/28 +add blacklist-v4 95.167.142.32/30 +add blacklist-v4 95.167.157.156/30 +add blacklist-v4 95.167.162.236/30 +add blacklist-v4 95.167.162.76/30 +add blacklist-v4 95.167.176.0/23 +add blacklist-v4 95.167.2.4/30 +add blacklist-v4 95.167.21.104/29 +add blacklist-v4 95.167.213.0/24 +add blacklist-v4 95.167.29.104/29 +add blacklist-v4 95.167.4.168/29 +add blacklist-v4 95.167.5.64/28 +add blacklist-v4 95.167.5.80/28 +add blacklist-v4 95.167.54.76/30 +add blacklist-v4 95.167.59.244/30 +add blacklist-v4 95.167.64.20/30 +add blacklist-v4 95.167.68.216/29 +add blacklist-v4 95.167.69.116/30 +add blacklist-v4 95.167.70.136/29 +add blacklist-v4 95.167.70.176/28 +add blacklist-v4 95.167.70.32/28 +add blacklist-v4 95.167.72.140/30 +add blacklist-v4 95.167.72.204/30 +add blacklist-v4 95.167.72.48/30 +add blacklist-v4 95.167.74.136/29 +add blacklist-v4 95.167.74.180/30 +add blacklist-v4 95.167.76.160/27 +add blacklist-v4 95.167.99.48/28 +add blacklist-v4 95.173.128.0/19 +add blacklist-v4 95.173.128.0/20 +add blacklist-v4 95.173.144.0/20 +add blacklist-v4 95.53.248.0/29 +add blacklist-v4 95.54.193.80/28 diff --git a/blacklists_iptables/blacklist-v6.ipset b/blacklists_iptables/blacklist-v6.ipset new file mode 100644 index 0000000..4218450 --- /dev/null +++ b/blacklists_iptables/blacklist-v6.ipset @@ -0,0 +1,21 @@ +# IPSet blacklist configuration (IPv6 only) +# Auto-generated from blacklist-v6.txt +# Last updated: 2025-10-23 09:43:00 UTC +# +# Usage: +# 1. Load the ipset: +# ipset restore < blacklist-v6.ipset +# +# 2. Use with iptables/ip6tables: +# iptables -I INPUT -m set --match-set blacklist-v6 src -j DROP +# iptables -I FORWARD -m set --match-set blacklist-v6 src -j DROP +# +# 3. To flush/delete the set: +# ipset flush blacklist-v6 +# ipset destroy blacklist-v6 +# + +create blacklist-v6 hash:net family inet6 hashsize 1024 maxelem 6 +add blacklist-v6 2a0c:a9c7:156::/48 +add blacklist-v6 2a0c:a9c7:157::/48 +add blacklist-v6 2a0c:a9c7:158::/48 diff --git a/blacklists_iptables/blacklist.ipset b/blacklists_iptables/blacklist.ipset new file mode 100644 index 0000000..88c5e52 --- /dev/null +++ b/blacklists_iptables/blacklist.ipset @@ -0,0 +1,831 @@ +# IPSet blacklist configuration (mixed IPv4/IPv6) +# Auto-generated from blacklist.txt +# Last updated: 2025-10-23 09:43:00 UTC +# +# Usage: +# 1. Load the ipset: +# ipset restore < blacklist.ipset +# +# 2. Use with iptables/ip6tables: +# iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP +# iptables -I FORWARD -m set --match-set blacklist-v4 src -j DROP +# ip6tables -I INPUT -m set --match-set blacklist-v6 src -j DROP +# ip6tables -I FORWARD -m set --match-set blacklist-v6 src -j DROP +# +# 3. To flush/delete the sets: +# ipset flush blacklist-v4 && ipset destroy blacklist-v4 +# ipset flush blacklist-v6 && ipset destroy blacklist-v6 +# + +create blacklist-v4 hash:net family inet hashsize 1024 maxelem 1612 +add blacklist-v4 109.124.119.88/29 +add blacklist-v4 109.124.66.128/30 +add blacklist-v4 109.124.66.160/28 +add blacklist-v4 109.124.71.64/29 +add blacklist-v4 109.124.78.108/30 +add blacklist-v4 109.124.80.132/30 +add blacklist-v4 109.124.83.20/30 +add blacklist-v4 109.124.87.96/29 +add blacklist-v4 109.124.89.140/30 +add blacklist-v4 109.124.89.212/30 +add blacklist-v4 109.124.89.36/30 +add blacklist-v4 109.124.90.128/30 +add blacklist-v4 109.124.90.32/30 +add blacklist-v4 109.124.97.4/30 +add blacklist-v4 109.124.99.16/30 +add blacklist-v4 109.124.99.160/28 +add blacklist-v4 109.204.204.232/29 +add blacklist-v4 109.207.0.0/20 +add blacklist-v4 109.232.187.16/29 +add blacklist-v4 109.248.197.0/24 +add blacklist-v4 109.73.4.224/27 +add blacklist-v4 145.255.238.240/28 +add blacklist-v4 149.62.55.240/30 +add blacklist-v4 176.109.0.0/21 +add blacklist-v4 176.116.96.0/20 +add blacklist-v4 178.16.156.148/30 +add blacklist-v4 178.237.206.0/24 +add blacklist-v4 178.237.240.0/20 +add blacklist-v4 178.237.248.0/21 +add blacklist-v4 178.248.232.137/32 +add blacklist-v4 178.248.232.60/32 +add blacklist-v4 178.248.233.136/32 +add blacklist-v4 178.248.233.244/32 +add blacklist-v4 178.248.233.245/32 +add blacklist-v4 178.248.233.26/32 +add blacklist-v4 178.248.233.32/32 +add blacklist-v4 178.248.233.60/32 +add blacklist-v4 178.248.234.136/32 +add blacklist-v4 178.248.234.204/32 +add blacklist-v4 178.248.234.228/32 +add blacklist-v4 178.248.234.238/32 +add blacklist-v4 178.248.234.30/32 +add blacklist-v4 178.248.234.33/32 +add blacklist-v4 178.248.234.60/32 +add blacklist-v4 178.248.234.79/32 +add blacklist-v4 178.248.234.83/32 +add blacklist-v4 178.248.235.244/32 +add blacklist-v4 178.248.235.60/32 +add blacklist-v4 178.248.235.75/32 +add blacklist-v4 178.248.236.20/32 +add blacklist-v4 178.248.236.244/32 +add blacklist-v4 178.248.236.83/32 +add blacklist-v4 178.248.237.136/32 +add blacklist-v4 178.248.237.18/32 +add blacklist-v4 178.248.237.242/32 +add blacklist-v4 178.248.237.98/32 +add blacklist-v4 178.248.238.102/32 +add blacklist-v4 178.248.238.128/32 +add blacklist-v4 178.248.238.129/32 +add blacklist-v4 178.248.238.136/32 +add blacklist-v4 178.248.238.155/32 +add blacklist-v4 178.248.238.172/32 +add blacklist-v4 178.248.238.205/32 +add blacklist-v4 178.248.238.255/32 +add blacklist-v4 178.248.238.55/32 +add blacklist-v4 178.248.239.215/32 +add blacklist-v4 178.49.148.176/29 +add blacklist-v4 185.149.160.0/24 +add blacklist-v4 185.149.161.0/24 +add blacklist-v4 185.149.162.0/24 +add blacklist-v4 185.149.163.0/24 +add blacklist-v4 185.168.60.0/24 +add blacklist-v4 185.168.61.0/24 +add blacklist-v4 185.168.62.0/24 +add blacklist-v4 185.168.63.0/24 +add blacklist-v4 185.179.224.0/24 +add blacklist-v4 185.179.225.0/24 +add blacklist-v4 185.179.226.0/24 +add blacklist-v4 185.179.227.0/24 +add blacklist-v4 185.183.172.0/23 +add blacklist-v4 185.183.174.0/23 +add blacklist-v4 185.224.228.0/24 +add blacklist-v4 185.224.229.0/24 +add blacklist-v4 185.224.230.0/24 +add blacklist-v4 185.224.231.0/24 +add blacklist-v4 185.65.149.170/32 +add blacklist-v4 185.7.234.188/30 +add blacklist-v4 188.128.101.108/30 +add blacklist-v4 188.128.11.196/30 +add blacklist-v4 188.128.112.216/29 +add blacklist-v4 188.128.112.240/29 +add blacklist-v4 188.128.113.0/28 +add blacklist-v4 188.128.114.128/28 +add blacklist-v4 188.128.115.232/29 +add blacklist-v4 188.128.118.224/27 +add blacklist-v4 188.128.119.104/30 +add blacklist-v4 188.128.8.240/30 +add blacklist-v4 188.128.89.0/30 +add blacklist-v4 188.128.92.104/30 +add blacklist-v4 188.128.94.204/30 +add blacklist-v4 188.128.98.204/30 +add blacklist-v4 188.247.36.124/30 +add blacklist-v4 188.247.36.128/30 +add blacklist-v4 188.247.36.132/30 +add blacklist-v4 188.247.36.136/30 +add blacklist-v4 188.247.36.140/30 +add blacklist-v4 188.247.36.204/30 +add blacklist-v4 193.232.70.0/24 +add blacklist-v4 193.47.146.0/24 +add blacklist-v4 194.140.247.0/25 +add blacklist-v4 194.140.247.128/25 +add blacklist-v4 194.150.202.0/23 +add blacklist-v4 194.165.22.0/23 +add blacklist-v4 194.186.112.80/28 +add blacklist-v4 194.190.9.0/24 +add blacklist-v4 194.215.248.0/24 +add blacklist-v4 194.226.116.0/22 +add blacklist-v4 194.226.127.0/24 +add blacklist-v4 194.226.80.0/21 +add blacklist-v4 194.226.88.0/21 +add blacklist-v4 194.67.63.200/30 +add blacklist-v4 194.8.246.0/23 +add blacklist-v4 194.8.70.0/23 +add blacklist-v4 195.128.157.0/24 +add blacklist-v4 195.131.53.248/29 +add blacklist-v4 195.131.61.80/29 +add blacklist-v4 195.131.63.24/29 +add blacklist-v4 195.131.7.8/29 +add blacklist-v4 195.144.232.144/30 +add blacklist-v4 195.144.240.128/28 +add blacklist-v4 195.149.110.0/24 +add blacklist-v4 195.151.25.48/29 +add blacklist-v4 195.16.55.224/27 +add blacklist-v4 195.162.36.64/28 +add blacklist-v4 195.170.218.24/29 +add blacklist-v4 195.170.218.88/29 +add blacklist-v4 195.182.142.128/26 +add blacklist-v4 195.182.145.64/28 +add blacklist-v4 195.182.151.212/30 +add blacklist-v4 195.182.151.216/30 +add blacklist-v4 195.182.155.164/30 +add blacklist-v4 195.182.156.96/30 +add blacklist-v4 195.209.120.0/22 +add blacklist-v4 195.209.122.0/24 +add blacklist-v4 195.209.123.0/24 +add blacklist-v4 195.218.175.40/29 +add blacklist-v4 195.239.113.0/24 +add blacklist-v4 195.3.240.0/22 +add blacklist-v4 195.42.75.8/29 +add blacklist-v4 195.54.20.168/29 +add blacklist-v4 195.54.221.0/24 +add blacklist-v4 195.54.28.72/30 +add blacklist-v4 195.58.13.120/30 +add blacklist-v4 195.58.21.196/30 +add blacklist-v4 195.58.29.57/32 +add blacklist-v4 195.58.30.164/30 +add blacklist-v4 195.58.30.200/29 +add blacklist-v4 195.58.5.16/30 +add blacklist-v4 195.58.5.20/30 +add blacklist-v4 195.80.224.0/24 +add blacklist-v4 195.98.38.16/28 +add blacklist-v4 195.98.43.104/29 +add blacklist-v4 195.98.73.56/29 +add blacklist-v4 195.98.77.100/30 +add blacklist-v4 212.119.174.0/24 +add blacklist-v4 212.119.175.0/24 +add blacklist-v4 212.120.169.48/29 +add blacklist-v4 212.120.174.88/29 +add blacklist-v4 212.120.184.48/29 +add blacklist-v4 212.120.184.56/29 +add blacklist-v4 212.120.184.64/29 +add blacklist-v4 212.120.189.208/29 +add blacklist-v4 212.120.189.224/29 +add blacklist-v4 212.120.190.112/29 +add blacklist-v4 212.120.190.240/29 +add blacklist-v4 212.120.191.120/29 +add blacklist-v4 212.120.191.248/29 +add blacklist-v4 212.13.104.116/30 +add blacklist-v4 212.13.113.100/30 +add blacklist-v4 212.15.105.64/28 +add blacklist-v4 212.15.114.156/30 +add blacklist-v4 212.15.115.80/28 +add blacklist-v4 212.17.16.192/27 +add blacklist-v4 212.17.17.176/28 +add blacklist-v4 212.17.8.176/29 +add blacklist-v4 212.17.9.144/28 +add blacklist-v4 212.192.156.0/22 +add blacklist-v4 212.192.156.0/24 +add blacklist-v4 212.192.157.0/24 +add blacklist-v4 212.192.158.0/24 +add blacklist-v4 212.23.85.48/30 +add blacklist-v4 212.23.85.56/29 +add blacklist-v4 212.32.198.64/29 +add blacklist-v4 212.48.134.192/26 +add blacklist-v4 212.48.138.240/28 +add blacklist-v4 212.48.141.160/27 +add blacklist-v4 212.48.34.176/29 +add blacklist-v4 212.48.34.184/29 +add blacklist-v4 212.48.53.100/30 +add blacklist-v4 212.48.53.144/30 +add blacklist-v4 212.48.53.152/30 +add blacklist-v4 212.48.53.156/30 +add blacklist-v4 212.48.53.160/30 +add blacklist-v4 212.48.53.164/30 +add blacklist-v4 212.48.53.184/30 +add blacklist-v4 212.48.53.188/30 +add blacklist-v4 212.48.53.192/30 +add blacklist-v4 212.48.53.196/30 +add blacklist-v4 212.48.53.200/30 +add blacklist-v4 212.48.53.216/30 +add blacklist-v4 212.48.53.236/30 +add blacklist-v4 212.48.53.240/30 +add blacklist-v4 212.48.53.244/30 +add blacklist-v4 212.48.53.248/30 +add blacklist-v4 212.48.53.252/30 +add blacklist-v4 212.48.53.76/30 +add blacklist-v4 212.48.53.84/30 +add blacklist-v4 212.48.53.88/30 +add blacklist-v4 212.48.53.92/30 +add blacklist-v4 212.48.54.0/30 +add blacklist-v4 212.48.54.100/30 +add blacklist-v4 212.48.54.104/30 +add blacklist-v4 212.48.54.108/30 +add blacklist-v4 212.48.54.112/30 +add blacklist-v4 212.48.54.116/30 +add blacklist-v4 212.48.54.12/30 +add blacklist-v4 212.48.54.120/30 +add blacklist-v4 212.48.54.124/30 +add blacklist-v4 212.48.54.128/30 +add blacklist-v4 212.48.54.132/30 +add blacklist-v4 212.48.54.136/30 +add blacklist-v4 212.48.54.140/30 +add blacklist-v4 212.48.54.144/30 +add blacklist-v4 212.48.54.148/30 +add blacklist-v4 212.48.54.152/30 +add blacklist-v4 212.48.54.156/30 +add blacklist-v4 212.48.54.16/30 +add blacklist-v4 212.48.54.164/30 +add blacklist-v4 212.48.54.168/30 +add blacklist-v4 212.48.54.172/30 +add blacklist-v4 212.48.54.176/30 +add blacklist-v4 212.48.54.180/30 +add blacklist-v4 212.48.54.184/30 +add blacklist-v4 212.48.54.188/30 +add blacklist-v4 212.48.54.196/30 +add blacklist-v4 212.48.54.20/30 +add blacklist-v4 212.48.54.200/30 +add blacklist-v4 212.48.54.208/30 +add blacklist-v4 212.48.54.212/30 +add blacklist-v4 212.48.54.216/30 +add blacklist-v4 212.48.54.220/30 +add blacklist-v4 212.48.54.24/30 +add blacklist-v4 212.48.54.240/30 +add blacklist-v4 212.48.54.244/30 +add blacklist-v4 212.48.54.248/30 +add blacklist-v4 212.48.54.252/30 +add blacklist-v4 212.48.54.28/30 +add blacklist-v4 212.48.54.32/30 +add blacklist-v4 212.48.54.36/30 +add blacklist-v4 212.48.54.44/30 +add blacklist-v4 212.48.54.48/30 +add blacklist-v4 212.48.54.52/30 +add blacklist-v4 212.48.54.56/30 +add blacklist-v4 212.48.54.60/30 +add blacklist-v4 212.48.54.64/30 +add blacklist-v4 212.48.54.68/30 +add blacklist-v4 212.48.54.72/30 +add blacklist-v4 212.48.54.76/30 +add blacklist-v4 212.48.54.8/30 +add blacklist-v4 212.48.54.80/30 +add blacklist-v4 212.48.54.84/30 +add blacklist-v4 212.48.54.92/30 +add blacklist-v4 212.48.54.96/30 +add blacklist-v4 212.49.107.224/27 +add blacklist-v4 212.49.124.0/26 +add blacklist-v4 212.57.133.0/24 +add blacklist-v4 212.57.159.0/24 +add blacklist-v4 212.59.98.48/29 +add blacklist-v4 212.59.99.96/27 +add blacklist-v4 213.172.17.252/30 +add blacklist-v4 213.172.18.124/30 +add blacklist-v4 213.172.18.148/30 +add blacklist-v4 213.172.18.160/30 +add blacklist-v4 213.172.18.164/30 +add blacklist-v4 213.172.18.252/30 +add blacklist-v4 213.172.18.60/30 +add blacklist-v4 213.172.27.0/30 +add blacklist-v4 213.172.27.116/30 +add blacklist-v4 213.172.27.160/30 +add blacklist-v4 213.172.27.204/30 +add blacklist-v4 213.172.27.212/30 +add blacklist-v4 213.172.27.224/30 +add blacklist-v4 213.172.27.252/30 +add blacklist-v4 213.172.30.136/30 +add blacklist-v4 213.177.111.0/24 +add blacklist-v4 213.183.253.56/29 +add blacklist-v4 213.219.237.68/30 +add blacklist-v4 213.234.13.60/30 +add blacklist-v4 213.234.15.228/30 +add blacklist-v4 213.234.15.248/30 +add blacklist-v4 213.234.18.52/30 +add blacklist-v4 213.234.8.8/30 +add blacklist-v4 213.24.128.0/22 +add blacklist-v4 213.24.143.0/24 +add blacklist-v4 213.24.152.0/22 +add blacklist-v4 213.24.160.0/28 +add blacklist-v4 213.24.34.0/24 +add blacklist-v4 213.24.75.0/24 +add blacklist-v4 213.24.76.0/23 +add blacklist-v4 213.242.204.236/30 +add blacklist-v4 213.242.204.76/30 +add blacklist-v4 213.242.205.88/30 +add blacklist-v4 213.242.215.192/29 +add blacklist-v4 213.242.215.68/30 +add blacklist-v4 213.243.106.48/28 +add blacklist-v4 213.243.116.0/24 +add blacklist-v4 213.243.84.80/28 +add blacklist-v4 213.33.171.240/29 +add blacklist-v4 213.59.59.120/29 +add blacklist-v4 213.59.59.128/29 +add blacklist-v4 213.59.59.144/29 +add blacklist-v4 213.59.59.16/29 +add blacklist-v4 213.59.59.168/29 +add blacklist-v4 213.59.59.64/29 +add blacklist-v4 213.59.91.128/27 +add blacklist-v4 213.59.91.176/28 +add blacklist-v4 213.59.91.48/29 +add blacklist-v4 213.85.142.176/28 +add blacklist-v4 213.85.2.64/28 +add blacklist-v4 213.85.2.80/29 +add blacklist-v4 213.85.20.32/30 +add blacklist-v4 213.85.20.8/30 +add blacklist-v4 213.85.20.84/30 +add blacklist-v4 213.85.77.64/27 +add blacklist-v4 217.106.0.0/16 +add blacklist-v4 217.106.115.168/29 +add blacklist-v4 217.106.147.0/29 +add blacklist-v4 217.106.147.8/29 +add blacklist-v4 217.106.150.224/29 +add blacklist-v4 217.106.150.72/29 +add blacklist-v4 217.106.150.80/29 +add blacklist-v4 217.106.150.88/29 +add blacklist-v4 217.106.203.240/29 +add blacklist-v4 217.106.203.88/29 +add blacklist-v4 217.106.93.192/26 +add blacklist-v4 217.106.95.112/28 +add blacklist-v4 217.107.200.0/21 +add blacklist-v4 217.107.5.112/29 +add blacklist-v4 217.107.5.16/29 +add blacklist-v4 217.107.5.24/29 +add blacklist-v4 217.107.5.40/29 +add blacklist-v4 217.107.5.8/29 +add blacklist-v4 217.107.5.80/29 +add blacklist-v4 217.107.5.88/29 +add blacklist-v4 217.107.5.96/29 +add blacklist-v4 217.147.23.112/28 +add blacklist-v4 217.148.216.156/30 +add blacklist-v4 217.148.220.160/29 +add blacklist-v4 217.172.18.0/23 +add blacklist-v4 217.195.92.16/28 +add blacklist-v4 217.195.93.144/29 +add blacklist-v4 217.195.94.200/29 +add blacklist-v4 217.20.86.128/26 +add blacklist-v4 217.20.86.232/29 +add blacklist-v4 217.23.88.168/29 +add blacklist-v4 217.23.88.248/29 +add blacklist-v4 217.27.142.176/30 +add blacklist-v4 217.65.214.24/29 +add blacklist-v4 217.65.219.160/29 +add blacklist-v4 217.67.177.208/29 +add blacklist-v4 31.177.95.0/24 +add blacklist-v4 31.44.63.64/29 +add blacklist-v4 37.28.161.48/30 +add blacklist-v4 37.29.53.16/30 +add blacklist-v4 37.29.57.52/30 +add blacklist-v4 37.29.57.64/30 +add blacklist-v4 37.29.59.56/30 +add blacklist-v4 46.20.70.160/28 +add blacklist-v4 46.228.0.232/29 +add blacklist-v4 46.29.152.0/22 +add blacklist-v4 46.46.142.160/28 +add blacklist-v4 46.46.148.40/29 +add blacklist-v4 46.47.197.128/30 +add blacklist-v4 46.47.199.76/30 +add blacklist-v4 46.47.203.52/30 +add blacklist-v4 46.47.207.96/30 +add blacklist-v4 46.47.208.84/30 +add blacklist-v4 46.47.210.76/30 +add blacklist-v4 46.47.211.0/24 +add blacklist-v4 46.47.212.204/30 +add blacklist-v4 46.47.213.0/24 +add blacklist-v4 46.47.214.200/30 +add blacklist-v4 46.47.219.200/30 +add blacklist-v4 46.47.223.196/30 +add blacklist-v4 46.47.229.0/28 +add blacklist-v4 46.47.238.144/30 +add blacklist-v4 46.47.249.176/29 +add blacklist-v4 46.61.208.0/24 +add blacklist-v4 62.112.110.64/28 +add blacklist-v4 62.118.0.208/28 +add blacklist-v4 62.118.101.184/29 +add blacklist-v4 62.118.113.232/29 +add blacklist-v4 62.118.125.188/30 +add blacklist-v4 62.118.127.240/28 +add blacklist-v4 62.118.15.16/28 +add blacklist-v4 62.118.17.152/29 +add blacklist-v4 62.118.19.112/30 +add blacklist-v4 62.118.19.40/30 +add blacklist-v4 62.118.193.8/29 +add blacklist-v4 62.118.205.68/30 +add blacklist-v4 62.118.208.100/30 +add blacklist-v4 62.118.209.192/30 +add blacklist-v4 62.118.21.160/29 +add blacklist-v4 62.118.216.60/30 +add blacklist-v4 62.118.219.184/30 +add blacklist-v4 62.118.230.4/30 +add blacklist-v4 62.118.233.224/29 +add blacklist-v4 62.118.234.64/29 +add blacklist-v4 62.118.239.128/29 +add blacklist-v4 62.118.25.112/28 +add blacklist-v4 62.118.37.168/30 +add blacklist-v4 62.118.37.180/30 +add blacklist-v4 62.118.37.4/30 +add blacklist-v4 62.118.38.212/30 +add blacklist-v4 62.141.125.0/25 +add blacklist-v4 62.181.52.56/29 +add blacklist-v4 62.28.169.168/30 +add blacklist-v4 62.33.199.80/29 +add blacklist-v4 62.33.34.16/28 +add blacklist-v4 62.33.87.128/28 +add blacklist-v4 62.33.87.152/29 +add blacklist-v4 62.5.130.104/29 +add blacklist-v4 62.5.132.224/29 +add blacklist-v4 62.5.189.80/29 +add blacklist-v4 62.5.202.60/30 +add blacklist-v4 62.5.218.204/30 +add blacklist-v4 62.5.224.188/30 +add blacklist-v4 62.5.242.80/28 +add blacklist-v4 62.63.100.160/30 +add blacklist-v4 62.63.101.80/29 +add blacklist-v4 62.63.96.32/28 +add blacklist-v4 62.63.98.24/29 +add blacklist-v4 62.76.98.0/24 +add blacklist-v4 77.243.9.80/28 +add blacklist-v4 77.34.209.160/28 +add blacklist-v4 77.35.76.80/28 +add blacklist-v4 77.35.98.240/28 +add blacklist-v4 77.37.128.0/17 +add blacklist-v4 77.72.139.0/28 +add blacklist-v4 77.82.124.112/29 +add blacklist-v4 78.107.13.208/28 +add blacklist-v4 78.107.16.96/28 +add blacklist-v4 78.107.18.112/28 +add blacklist-v4 78.107.3.208/28 +add blacklist-v4 78.107.40.160/28 +add blacklist-v4 78.107.42.144/28 +add blacklist-v4 78.107.51.16/28 +add blacklist-v4 78.107.61.96/28 +add blacklist-v4 78.107.86.32/28 +add blacklist-v4 78.108.192.0/21 +add blacklist-v4 78.108.200.0/24 +add blacklist-v4 78.109.140.112/29 +add blacklist-v4 78.24.159.48/29 +add blacklist-v4 78.37.104.0/29 +add blacklist-v4 78.37.67.24/29 +add blacklist-v4 78.37.69.160/27 +add blacklist-v4 78.37.84.120/29 +add blacklist-v4 78.37.97.88/29 +add blacklist-v4 79.133.74.160/30 +add blacklist-v4 79.133.74.168/30 +add blacklist-v4 79.133.75.176/30 +add blacklist-v4 79.133.75.44/30 +add blacklist-v4 79.142.88.0/28 +add blacklist-v4 80.237.11.88/29 +add blacklist-v4 80.237.39.112/29 +add blacklist-v4 80.237.98.80/28 +add blacklist-v4 80.247.32.0/20 +add blacklist-v4 80.247.32.0/24 +add blacklist-v4 80.247.46.0/24 +add blacklist-v4 80.254.100.40/29 +add blacklist-v4 80.254.119.168/29 +add blacklist-v4 80.73.16.0/20 +add blacklist-v4 80.73.16.0/21 +add blacklist-v4 80.73.16.0/24 +add blacklist-v4 80.73.168.80/28 +add blacklist-v4 80.73.169.244/30 +add blacklist-v4 80.82.43.24/29 +add blacklist-v4 80.89.152.220/30 +add blacklist-v4 81.1.195.0/28 +add blacklist-v4 81.1.205.96/27 +add blacklist-v4 81.17.2.192/28 +add blacklist-v4 81.17.3.16/29 +add blacklist-v4 81.176.235.0/27 +add blacklist-v4 81.176.70.0/26 +add blacklist-v4 81.177.156.0/24 +add blacklist-v4 81.195.105.160/28 +add blacklist-v4 81.195.108.164/30 +add blacklist-v4 81.195.112.36/30 +add blacklist-v4 81.195.118.128/30 +add blacklist-v4 81.195.118.48/30 +add blacklist-v4 81.195.120.16/29 +add blacklist-v4 81.195.124.52/30 +add blacklist-v4 81.195.125.96/30 +add blacklist-v4 81.195.148.140/30 +add blacklist-v4 81.195.150.248/30 +add blacklist-v4 81.195.151.172/30 +add blacklist-v4 81.195.155.0/30 +add blacklist-v4 81.195.161.12/30 +add blacklist-v4 81.195.165.64/28 +add blacklist-v4 81.195.168.24/30 +add blacklist-v4 81.195.177.160/30 +add blacklist-v4 81.195.178.224/27 +add blacklist-v4 81.195.182.64/28 +add blacklist-v4 81.195.192.96/30 +add blacklist-v4 81.195.231.128/26 +add blacklist-v4 81.195.244.32/29 +add blacklist-v4 81.195.245.0/28 +add blacklist-v4 81.195.247.128/28 +add blacklist-v4 81.195.250.16/29 +add blacklist-v4 81.195.36.48/28 +add blacklist-v4 81.195.44.248/30 +add blacklist-v4 81.195.45.64/30 +add blacklist-v4 81.195.50.72/29 +add blacklist-v4 81.195.90.44/30 +add blacklist-v4 81.195.92.48/30 +add blacklist-v4 81.195.93.192/27 +add blacklist-v4 81.195.94.72/29 +add blacklist-v4 81.2.1.0/28 +add blacklist-v4 81.2.10.192/27 +add blacklist-v4 81.211.32.16/28 +add blacklist-v4 81.222.194.200/29 +add blacklist-v4 81.222.209.136/29 +add blacklist-v4 81.222.210.24/29 +add blacklist-v4 81.3.168.148/30 +add blacklist-v4 82.110.69.200/29 +add blacklist-v4 82.140.65.240/29 +add blacklist-v4 82.151.107.136/29 +add blacklist-v4 82.162.103.144/28 +add blacklist-v4 82.162.126.96/28 +add blacklist-v4 82.162.149.160/28 +add blacklist-v4 82.162.157.64/28 +add blacklist-v4 82.162.158.176/28 +add blacklist-v4 82.162.172.112/28 +add blacklist-v4 82.162.72.208/28 +add blacklist-v4 82.162.76.176/28 +add blacklist-v4 82.162.80.192/28 +add blacklist-v4 82.162.87.192/28 +add blacklist-v4 82.162.90.0/28 +add blacklist-v4 82.179.86.32/27 +add blacklist-v4 82.196.130.0/27 +add blacklist-v4 82.196.69.152/30 +add blacklist-v4 82.198.176.144/29 +add blacklist-v4 82.198.176.16/29 +add blacklist-v4 82.198.176.208/29 +add blacklist-v4 82.198.189.128/26 +add blacklist-v4 82.198.190.64/26 +add blacklist-v4 82.198.191.248/29 +add blacklist-v4 82.198.191.96/27 +add blacklist-v4 82.200.13.0/27 +add blacklist-v4 82.200.22.136/29 +add blacklist-v4 82.200.22.144/28 +add blacklist-v4 82.200.64.0/24 +add blacklist-v4 82.208.68.240/28 +add blacklist-v4 82.208.77.104/29 +add blacklist-v4 82.208.81.0/24 +add blacklist-v4 82.208.93.160/27 +add blacklist-v4 83.149.42.64/29 +add blacklist-v4 83.172.36.224/29 +add blacklist-v4 83.219.13.128/29 +add blacklist-v4 83.219.13.184/29 +add blacklist-v4 83.219.138.16/28 +add blacklist-v4 83.219.23.48/29 +add blacklist-v4 83.219.23.8/29 +add blacklist-v4 83.219.25.0/29 +add blacklist-v4 83.219.25.112/29 +add blacklist-v4 83.219.5.248/29 +add blacklist-v4 83.219.6.72/29 +add blacklist-v4 83.220.53.16/28 +add blacklist-v4 83.229.181.192/26 +add blacklist-v4 83.229.232.16/29 +add blacklist-v4 83.69.207.248/29 +add blacklist-v4 84.204.143.44/30 +add blacklist-v4 84.204.154.16/30 +add blacklist-v4 84.204.170.220/30 +add blacklist-v4 84.204.217.164/30 +add blacklist-v4 84.204.245.208/29 +add blacklist-v4 84.204.7.144/29 +add blacklist-v4 84.53.210.144/28 +add blacklist-v4 85.114.30.192/30 +add blacklist-v4 85.114.30.204/30 +add blacklist-v4 85.114.93.88/29 +add blacklist-v4 85.141.17.112/30 +add blacklist-v4 85.141.17.24/30 +add blacklist-v4 85.141.18.80/30 +add blacklist-v4 85.141.19.56/30 +add blacklist-v4 85.141.21.236/30 +add blacklist-v4 85.141.28.0/30 +add blacklist-v4 85.141.31.68/30 +add blacklist-v4 85.141.32.96/28 +add blacklist-v4 85.141.33.0/28 +add blacklist-v4 85.141.33.64/28 +add blacklist-v4 85.141.60.96/28 +add blacklist-v4 85.141.61.160/28 +add blacklist-v4 85.143.125.0/24 +add blacklist-v4 85.21.102.224/28 +add blacklist-v4 85.21.103.64/28 +add blacklist-v4 85.21.104.192/27 +add blacklist-v4 85.21.148.0/26 +add blacklist-v4 85.21.149.48/28 +add blacklist-v4 85.21.155.208/28 +add blacklist-v4 85.21.157.48/28 +add blacklist-v4 85.21.204.208/28 +add blacklist-v4 85.21.99.48/28 +add blacklist-v4 85.21.99.64/28 +add blacklist-v4 85.236.29.160/27 +add blacklist-v4 85.90.100.72/29 +add blacklist-v4 85.90.101.112/28 +add blacklist-v4 85.90.101.192/29 +add blacklist-v4 85.90.102.168/29 +add blacklist-v4 85.90.120.72/29 +add blacklist-v4 85.90.121.72/29 +add blacklist-v4 85.90.125.96/29 +add blacklist-v4 85.90.127.16/29 +add blacklist-v4 85.90.98.144/30 +add blacklist-v4 85.90.99.168/29 +add blacklist-v4 86.102.100.48/28 +add blacklist-v4 86.102.108.32/28 +add blacklist-v4 86.102.109.32/28 +add blacklist-v4 86.102.109.48/28 +add blacklist-v4 86.102.115.80/28 +add blacklist-v4 86.102.126.160/28 +add blacklist-v4 86.102.126.80/28 +add blacklist-v4 86.102.72.240/28 +add blacklist-v4 86.102.74.64/28 +add blacklist-v4 87.117.18.144/29 +add blacklist-v4 87.117.20.128/28 +add blacklist-v4 87.117.20.64/27 +add blacklist-v4 87.117.20.96/27 +add blacklist-v4 87.117.21.0/29 +add blacklist-v4 87.117.21.16/29 +add blacklist-v4 87.117.21.24/29 +add blacklist-v4 87.117.21.32/29 +add blacklist-v4 87.117.21.40/29 +add blacklist-v4 87.117.21.48/29 +add blacklist-v4 87.117.21.56/29 +add blacklist-v4 87.117.21.64/29 +add blacklist-v4 87.117.21.72/29 +add blacklist-v4 87.117.21.8/29 +add blacklist-v4 87.117.21.80/29 +add blacklist-v4 87.117.23.128/28 +add blacklist-v4 87.117.31.56/29 +add blacklist-v4 87.225.56.224/28 +add blacklist-v4 87.226.156.64/26 +add blacklist-v4 87.226.191.0/24 +add blacklist-v4 87.226.213.0/24 +add blacklist-v4 87.226.239.180/30 +add blacklist-v4 87.237.47.204/30 +add blacklist-v4 87.245.133.0/24 +add blacklist-v4 87.249.16.32/28 +add blacklist-v4 87.249.18.60/30 +add blacklist-v4 87.249.22.72/29 +add blacklist-v4 87.249.28.232/29 +add blacklist-v4 87.249.3.64/28 +add blacklist-v4 87.249.30.176/30 +add blacklist-v4 87.249.5.48/30 +add blacklist-v4 87.249.7.120/29 +add blacklist-v4 88.151.200.0/24 +add blacklist-v4 88.200.208.112/29 +add blacklist-v4 88.83.195.248/30 +add blacklist-v4 89.106.172.160/29 +add blacklist-v4 89.107.123.120/29 +add blacklist-v4 89.107.123.136/29 +add blacklist-v4 89.107.127.136/29 +add blacklist-v4 89.109.250.88/29 +add blacklist-v4 89.109.7.176/29 +add blacklist-v4 89.111.176.0/22 +add blacklist-v4 89.175.10.160/30 +add blacklist-v4 89.175.165.208/28 +add blacklist-v4 89.175.170.144/28 +add blacklist-v4 89.175.174.136/29 +add blacklist-v4 89.175.176.140/30 +add blacklist-v4 89.175.176.176/30 +add blacklist-v4 89.175.176.88/30 +add blacklist-v4 89.175.188.184/29 +add blacklist-v4 89.175.6.64/27 +add blacklist-v4 89.175.8.104/30 +add blacklist-v4 89.175.8.140/30 +add blacklist-v4 89.175.8.192/30 +add blacklist-v4 89.175.8.36/30 +add blacklist-v4 89.175.8.40/30 +add blacklist-v4 89.175.8.44/30 +add blacklist-v4 89.175.8.52/30 +add blacklist-v4 89.175.8.68/30 +add blacklist-v4 89.175.9.4/30 +add blacklist-v4 89.179.155.192/28 +add blacklist-v4 89.179.179.16/28 +add blacklist-v4 89.179.181.0/24 +add blacklist-v4 89.21.129.16/28 +add blacklist-v4 89.21.140.104/29 +add blacklist-v4 89.21.152.104/29 +add blacklist-v4 89.28.253.168/29 +add blacklist-v4 89.28.255.56/29 +add blacklist-v4 90.150.176.52/30 +add blacklist-v4 90.150.189.128/29 +add blacklist-v4 90.150.189.136/29 +add blacklist-v4 90.150.189.144/29 +add blacklist-v4 90.150.189.152/29 +add blacklist-v4 90.150.189.160/29 +add blacklist-v4 90.150.189.168/29 +add blacklist-v4 90.150.189.176/29 +add blacklist-v4 90.150.189.184/29 +add blacklist-v4 90.150.189.192/29 +add blacklist-v4 90.150.189.200/29 +add blacklist-v4 90.150.189.208/29 +add blacklist-v4 90.150.189.216/29 +add blacklist-v4 90.150.189.224/29 +add blacklist-v4 90.150.189.232/29 +add blacklist-v4 90.150.189.248/29 +add blacklist-v4 90.150.189.32/29 +add blacklist-v4 91.103.194.184/29 +add blacklist-v4 91.215.168.0/22 +add blacklist-v4 91.217.34.0/23 +add blacklist-v4 91.219.192.0/22 +add blacklist-v4 91.221.140.0/23 +add blacklist-v4 91.221.140.0/24 +add blacklist-v4 91.221.141.0/24 +add blacklist-v4 91.226.250.0/24 +add blacklist-v4 91.227.32.0/24 +add blacklist-v4 92.101.253.152/29 +add blacklist-v4 92.39.106.168/30 +add blacklist-v4 92.39.106.20/30 +add blacklist-v4 92.39.111.84/30 +add blacklist-v4 92.39.128.0/21 +add blacklist-v4 92.50.198.124/30 +add blacklist-v4 92.50.198.72/30 +add blacklist-v4 92.50.219.136/29 +add blacklist-v4 92.50.238.224/29 +add blacklist-v4 92.60.186.0/28 +add blacklist-v4 93.153.135.88/30 +add blacklist-v4 93.153.136.132/30 +add blacklist-v4 93.153.144.60/30 +add blacklist-v4 93.153.171.204/30 +add blacklist-v4 93.153.172.100/30 +add blacklist-v4 93.153.175.44/30 +add blacklist-v4 93.153.183.104/30 +add blacklist-v4 93.153.194.160/29 +add blacklist-v4 93.153.220.192/29 +add blacklist-v4 93.153.223.8/29 +add blacklist-v4 93.153.229.232/29 +add blacklist-v4 93.153.244.188/30 +add blacklist-v4 93.153.244.248/29 +add blacklist-v4 93.153.251.0/24 +add blacklist-v4 93.178.104.32/30 +add blacklist-v4 93.178.104.36/30 +add blacklist-v4 93.178.104.64/30 +add blacklist-v4 93.178.104.68/30 +add blacklist-v4 93.178.106.0/26 +add blacklist-v4 93.182.23.48/29 +add blacklist-v4 93.188.20.72/29 +add blacklist-v4 93.190.110.0/24 +add blacklist-v4 94.124.192.192/29 +add blacklist-v4 94.199.64.0/21 +add blacklist-v4 94.25.119.228/30 +add blacklist-v4 94.25.53.56/29 +add blacklist-v4 94.25.57.176/29 +add blacklist-v4 94.25.57.224/28 +add blacklist-v4 94.25.65.16/29 +add blacklist-v4 94.25.70.64/30 +add blacklist-v4 94.25.90.240/29 +add blacklist-v4 94.25.95.136/30 +add blacklist-v4 95.167.113.48/30 +add blacklist-v4 95.167.114.48/30 +add blacklist-v4 95.167.121.68/30 +add blacklist-v4 95.167.122.128/28 +add blacklist-v4 95.167.142.32/30 +add blacklist-v4 95.167.157.156/30 +add blacklist-v4 95.167.162.236/30 +add blacklist-v4 95.167.162.76/30 +add blacklist-v4 95.167.176.0/23 +add blacklist-v4 95.167.2.4/30 +add blacklist-v4 95.167.21.104/29 +add blacklist-v4 95.167.213.0/24 +add blacklist-v4 95.167.29.104/29 +add blacklist-v4 95.167.4.168/29 +add blacklist-v4 95.167.5.64/28 +add blacklist-v4 95.167.5.80/28 +add blacklist-v4 95.167.54.76/30 +add blacklist-v4 95.167.59.244/30 +add blacklist-v4 95.167.64.20/30 +add blacklist-v4 95.167.68.216/29 +add blacklist-v4 95.167.69.116/30 +add blacklist-v4 95.167.70.136/29 +add blacklist-v4 95.167.70.176/28 +add blacklist-v4 95.167.70.32/28 +add blacklist-v4 95.167.72.140/30 +add blacklist-v4 95.167.72.204/30 +add blacklist-v4 95.167.72.48/30 +add blacklist-v4 95.167.74.136/29 +add blacklist-v4 95.167.74.180/30 +add blacklist-v4 95.167.76.160/27 +add blacklist-v4 95.167.99.48/28 +add blacklist-v4 95.173.128.0/19 +add blacklist-v4 95.173.128.0/20 +add blacklist-v4 95.173.144.0/20 +add blacklist-v4 95.53.248.0/29 +add blacklist-v4 95.54.193.80/28 + +create blacklist-v6 hash:net family inet6 hashsize 1024 maxelem 6 +add blacklist-v6 2a0c:a9c7:156::/48 +add blacklist-v6 2a0c:a9c7:157::/48 +add blacklist-v6 2a0c:a9c7:158::/48 diff --git a/blacklists_nginx/.keep b/blacklists_nginx/.keep new file mode 100644 index 0000000..e69de29 diff --git a/blacklists_nginx/README.md b/blacklists_nginx/README.md new file mode 100644 index 0000000..ec9fdc5 --- /dev/null +++ b/blacklists_nginx/README.md @@ -0,0 +1,302 @@ +# Nginx Blacklist Configurations + +Auto-generated nginx configuration files for blocking networks and IP addresses. + +## Available Files + +### Mixed IPv4/IPv6 + +- **`blacklist.conf`** - Contains both IPv4 and IPv6 deny rules (809 entries) + +### IPv4 Only + +- **`blacklist-v4.conf`** - Contains only IPv4 deny rules (806 entries) + +### IPv6 Only + +- **`blacklist-v6.conf`** - Contains only IPv6 deny rules (3 entries) + +## Usage + +### Basic Usage + +Include the desired configuration file in your nginx `server` or `location` block: + +```nginx +server { + listen 80; + server_name example.com; + + # Include the blacklist + include /path/to/blacklist.conf; + + location / { + # your configuration + } +} +``` + +### Separate IPv4/IPv6 Files + +For more granular control, use separate files: + +```nginx +server { + listen 80; + listen [::]:80; + server_name example.com; + + # Include both IPv4 and IPv6 blacklists + include /path/to/blacklist-v4.conf; + include /path/to/blacklist-v6.conf; + + location / { + # your configuration + } +} +``` + +### HTTP Block Level + +Apply the blacklist globally to all virtual hosts: + +```nginx +http { + # Apply blacklist globally + include /path/to/blacklist.conf; + + server { + listen 80; + server_name example.com; + # ... + } + + server { + listen 80; + server_name another.com; + # ... + } +} +``` + +### Location Block Level + +For selective blocking within specific locations: + +```nginx +server { + listen 80; + server_name example.com; + + location /admin { + # Apply blacklist only to admin area + include /path/to/blacklist.conf; + # ... + } + + location /public { + # Public area without blacklist + # ... + } +} +``` + +## Testing Configuration + +After adding the blacklist, always test your nginx configuration: + +```bash +# Test configuration +nginx -t + +# Reload nginx if test passes +nginx -s reload +# or +systemctl reload nginx +``` + +## Custom Response + +By default, denied IPs receive a connection drop. To customize the response: + +```nginx +server { + listen 80; + server_name example.com; + + # Return custom error page + error_page 403 /403.html; + + include /path/to/blacklist.conf; + + location = /403.html { + root /usr/share/nginx/html; + internal; + } +} +``` + +Note: For large blacklists, using `deny` directives (as in these files) is more efficient than `if` statements. + +## Performance Considerations + +- **Deny directives** are processed in order and stop at the first match +- For optimal performance, most frequently matched IPs should be at the top +- Current files are sorted for consistency +- Nginx handles hundreds of deny rules efficiently +- For very large blacklists (10,000+ entries), consider using: + - Nginx GeoIP2 module for geographic blocking + - nftables/iptables at the firewall level for better performance + - Stream module for TCP/UDP level blocking + +## Integration Examples + +### Docker Deployment + +```dockerfile +FROM nginx:alpine + +# Copy blacklist +COPY blacklist.conf /etc/nginx/blacklist.conf + +# Copy nginx config that includes the blacklist +COPY nginx.conf /etc/nginx/nginx.conf + +EXPOSE 80 443 +CMD ["nginx", "-g", "daemon off;"] +``` + +### Kubernetes ConfigMap + +```yaml +apiVersion: v1 +kind: ConfigMap +metadata: + name: nginx-blacklist +data: + blacklist.conf: | + # Include blacklist content here + deny 109.124.119.88/29; + deny 109.124.66.128/30; + # ... +``` + +### Automated Updates + +Set up a cron job to automatically fetch the latest blacklist: + +```bash +#!/bin/bash +# /etc/cron.daily/update-nginx-blacklist + +# Download latest blacklist +wget -q https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nginx/blacklist.conf \ + -O /etc/nginx/blacklist.conf.new + +# Test nginx configuration +nginx -t -c /etc/nginx/nginx.conf + +# If test passes, reload nginx +if [ $? -eq 0 ]; then + mv /etc/nginx/blacklist.conf.new /etc/nginx/blacklist.conf + systemctl reload nginx + echo "Blacklist updated successfully" +else + rm /etc/nginx/blacklist.conf.new + echo "Nginx config test failed, blacklist not updated" +fi +``` + +## Logging Blocked Requests + +To log denied requests: + +```nginx +server { + listen 80; + server_name example.com; + + # Custom log format for denied IPs + log_format blocked '$remote_addr - $remote_user [$time_local] ' + '"$request" 403 0 ' + '"$http_referer" "$http_user_agent"'; + + access_log /var/log/nginx/blocked.log blocked; + + include /path/to/blacklist.conf; + + location / { + # your configuration + } +} +``` + +## Monitoring + +Check how many IPs are being blocked: + +```bash +# Count deny rules +grep -c "deny" /path/to/blacklist.conf + +# Check blocked access logs +tail -f /var/log/nginx/blocked.log + +# Count blocked requests today +grep "$(date +%d/%b/%Y)" /var/log/nginx/access.log | grep " 403 " | wc -l +``` + +## Troubleshooting + +### Configuration Test Fails + +```bash +# Check syntax +nginx -t + +# Check for duplicate includes +grep -r "include.*blacklist" /etc/nginx/ + +# Verify file permissions +ls -l /path/to/blacklist.conf +``` + +### Legitimate Users Blocked + +Check if their IP is in the blacklist: + +```bash +grep "YOUR_IP" /path/to/blacklist.conf +``` + +Whitelist specific IPs before applying the blacklist: + +```nginx +server { + listen 80; + server_name example.com; + + # Whitelist before blacklist + allow 192.168.1.100; # Trusted IP + + # Then apply blacklist + include /path/to/blacklist.conf; + + # Deny all others not explicitly allowed + # deny all; # Optional +} +``` + +## Automatic Updates + +These files are automatically regenerated daily when the blacklists are updated via the GitHub Actions workflow. + +## Source + +Generated from the blacklist files in the `blacklists/` directory by `blacklists_updater_nginx.sh`. + +## See Also + +- [IPTables/IPSet Format](../blacklists_iptables/README.md) - For firewall-level blocking +- [Text Format](../blacklists/README.md) - For custom integrations +- [Main Repository](https://github.com/C24Be/AS_Network_List) - Complete documentation diff --git a/blacklists_nginx/blacklist-v4.conf b/blacklists_nginx/blacklist-v4.conf new file mode 100644 index 0000000..d586c24 --- /dev/null +++ b/blacklists_nginx/blacklist-v4.conf @@ -0,0 +1,815 @@ +# Nginx blacklist configuration (IPv4 only) +# Auto-generated from blacklist-v4.txt +# Last updated: 2025-10-23 09:43:00 UTC +# +# Usage: Include this file in your nginx server or location block: +# include /path/to/blacklist-v4.conf; +# + +deny 109.124.119.88/29; +deny 109.124.66.128/30; +deny 109.124.66.160/28; +deny 109.124.71.64/29; +deny 109.124.78.108/30; +deny 109.124.80.132/30; +deny 109.124.83.20/30; +deny 109.124.87.96/29; +deny 109.124.89.140/30; +deny 109.124.89.212/30; +deny 109.124.89.36/30; +deny 109.124.90.128/30; +deny 109.124.90.32/30; +deny 109.124.97.4/30; +deny 109.124.99.16/30; +deny 109.124.99.160/28; +deny 109.204.204.232/29; +deny 109.207.0.0/20; +deny 109.232.187.16/29; +deny 109.248.197.0/24; +deny 109.73.4.224/27; +deny 145.255.238.240/28; +deny 149.62.55.240/30; +deny 176.109.0.0/21; +deny 176.116.96.0/20; +deny 178.16.156.148/30; +deny 178.237.206.0/24; +deny 178.237.240.0/20; +deny 178.237.248.0/21; +deny 178.248.232.137/32; +deny 178.248.232.60/32; +deny 178.248.233.136/32; +deny 178.248.233.244/32; +deny 178.248.233.245/32; +deny 178.248.233.26/32; +deny 178.248.233.32/32; +deny 178.248.233.60/32; +deny 178.248.234.136/32; +deny 178.248.234.204/32; +deny 178.248.234.228/32; +deny 178.248.234.238/32; +deny 178.248.234.30/32; +deny 178.248.234.33/32; +deny 178.248.234.60/32; +deny 178.248.234.79/32; +deny 178.248.234.83/32; +deny 178.248.235.244/32; +deny 178.248.235.60/32; +deny 178.248.235.75/32; +deny 178.248.236.20/32; +deny 178.248.236.244/32; +deny 178.248.236.83/32; +deny 178.248.237.136/32; +deny 178.248.237.18/32; +deny 178.248.237.242/32; +deny 178.248.237.98/32; +deny 178.248.238.102/32; +deny 178.248.238.128/32; +deny 178.248.238.129/32; +deny 178.248.238.136/32; +deny 178.248.238.155/32; +deny 178.248.238.172/32; +deny 178.248.238.205/32; +deny 178.248.238.255/32; +deny 178.248.238.55/32; +deny 178.248.239.215/32; +deny 178.49.148.176/29; +deny 185.149.160.0/24; +deny 185.149.161.0/24; +deny 185.149.162.0/24; +deny 185.149.163.0/24; +deny 185.168.60.0/24; +deny 185.168.61.0/24; +deny 185.168.62.0/24; +deny 185.168.63.0/24; +deny 185.179.224.0/24; +deny 185.179.225.0/24; +deny 185.179.226.0/24; +deny 185.179.227.0/24; +deny 185.183.172.0/23; +deny 185.183.174.0/23; +deny 185.224.228.0/24; +deny 185.224.229.0/24; +deny 185.224.230.0/24; +deny 185.224.231.0/24; +deny 185.65.149.170/32; +deny 185.7.234.188/30; +deny 188.128.101.108/30; +deny 188.128.11.196/30; +deny 188.128.112.216/29; +deny 188.128.112.240/29; +deny 188.128.113.0/28; +deny 188.128.114.128/28; +deny 188.128.115.232/29; +deny 188.128.118.224/27; +deny 188.128.119.104/30; +deny 188.128.8.240/30; +deny 188.128.89.0/30; +deny 188.128.92.104/30; +deny 188.128.94.204/30; +deny 188.128.98.204/30; +deny 188.247.36.124/30; +deny 188.247.36.128/30; +deny 188.247.36.132/30; +deny 188.247.36.136/30; +deny 188.247.36.140/30; +deny 188.247.36.204/30; +deny 193.232.70.0/24; +deny 193.47.146.0/24; +deny 194.140.247.0/25; +deny 194.140.247.128/25; +deny 194.150.202.0/23; +deny 194.165.22.0/23; +deny 194.186.112.80/28; +deny 194.190.9.0/24; +deny 194.215.248.0/24; +deny 194.226.116.0/22; +deny 194.226.127.0/24; +deny 194.226.80.0/21; +deny 194.226.88.0/21; +deny 194.67.63.200/30; +deny 194.8.246.0/23; +deny 194.8.70.0/23; +deny 195.128.157.0/24; +deny 195.131.53.248/29; +deny 195.131.61.80/29; +deny 195.131.63.24/29; +deny 195.131.7.8/29; +deny 195.144.232.144/30; +deny 195.144.240.128/28; +deny 195.149.110.0/24; +deny 195.151.25.48/29; +deny 195.16.55.224/27; +deny 195.162.36.64/28; +deny 195.170.218.24/29; +deny 195.170.218.88/29; +deny 195.182.142.128/26; +deny 195.182.145.64/28; +deny 195.182.151.212/30; +deny 195.182.151.216/30; +deny 195.182.155.164/30; +deny 195.182.156.96/30; +deny 195.209.120.0/22; +deny 195.209.122.0/24; +deny 195.209.123.0/24; +deny 195.218.175.40/29; +deny 195.239.113.0/24; +deny 195.3.240.0/22; +deny 195.42.75.8/29; +deny 195.54.20.168/29; +deny 195.54.221.0/24; +deny 195.54.28.72/30; +deny 195.58.13.120/30; +deny 195.58.21.196/30; +deny 195.58.29.57/32; +deny 195.58.30.164/30; +deny 195.58.30.200/29; +deny 195.58.5.16/30; +deny 195.58.5.20/30; +deny 195.80.224.0/24; +deny 195.98.38.16/28; +deny 195.98.43.104/29; +deny 195.98.73.56/29; +deny 195.98.77.100/30; +deny 212.119.174.0/24; +deny 212.119.175.0/24; +deny 212.120.169.48/29; +deny 212.120.174.88/29; +deny 212.120.184.48/29; +deny 212.120.184.56/29; +deny 212.120.184.64/29; +deny 212.120.189.208/29; +deny 212.120.189.224/29; +deny 212.120.190.112/29; +deny 212.120.190.240/29; +deny 212.120.191.120/29; +deny 212.120.191.248/29; +deny 212.13.104.116/30; +deny 212.13.113.100/30; +deny 212.15.105.64/28; +deny 212.15.114.156/30; +deny 212.15.115.80/28; +deny 212.17.16.192/27; +deny 212.17.17.176/28; +deny 212.17.8.176/29; +deny 212.17.9.144/28; +deny 212.192.156.0/22; +deny 212.192.156.0/24; +deny 212.192.157.0/24; +deny 212.192.158.0/24; +deny 212.23.85.48/30; +deny 212.23.85.56/29; +deny 212.32.198.64/29; +deny 212.48.134.192/26; +deny 212.48.138.240/28; +deny 212.48.141.160/27; +deny 212.48.34.176/29; +deny 212.48.34.184/29; +deny 212.48.53.100/30; +deny 212.48.53.144/30; +deny 212.48.53.152/30; +deny 212.48.53.156/30; +deny 212.48.53.160/30; +deny 212.48.53.164/30; +deny 212.48.53.184/30; +deny 212.48.53.188/30; +deny 212.48.53.192/30; +deny 212.48.53.196/30; +deny 212.48.53.200/30; +deny 212.48.53.216/30; +deny 212.48.53.236/30; +deny 212.48.53.240/30; +deny 212.48.53.244/30; +deny 212.48.53.248/30; +deny 212.48.53.252/30; +deny 212.48.53.76/30; +deny 212.48.53.84/30; +deny 212.48.53.88/30; +deny 212.48.53.92/30; +deny 212.48.54.0/30; +deny 212.48.54.100/30; +deny 212.48.54.104/30; +deny 212.48.54.108/30; +deny 212.48.54.112/30; +deny 212.48.54.116/30; +deny 212.48.54.12/30; +deny 212.48.54.120/30; +deny 212.48.54.124/30; +deny 212.48.54.128/30; +deny 212.48.54.132/30; +deny 212.48.54.136/30; +deny 212.48.54.140/30; +deny 212.48.54.144/30; +deny 212.48.54.148/30; +deny 212.48.54.152/30; +deny 212.48.54.156/30; +deny 212.48.54.16/30; +deny 212.48.54.164/30; +deny 212.48.54.168/30; +deny 212.48.54.172/30; +deny 212.48.54.176/30; +deny 212.48.54.180/30; +deny 212.48.54.184/30; +deny 212.48.54.188/30; +deny 212.48.54.196/30; +deny 212.48.54.20/30; +deny 212.48.54.200/30; +deny 212.48.54.208/30; +deny 212.48.54.212/30; +deny 212.48.54.216/30; +deny 212.48.54.220/30; +deny 212.48.54.24/30; +deny 212.48.54.240/30; +deny 212.48.54.244/30; +deny 212.48.54.248/30; +deny 212.48.54.252/30; +deny 212.48.54.28/30; +deny 212.48.54.32/30; +deny 212.48.54.36/30; +deny 212.48.54.44/30; +deny 212.48.54.48/30; +deny 212.48.54.52/30; +deny 212.48.54.56/30; +deny 212.48.54.60/30; +deny 212.48.54.64/30; +deny 212.48.54.68/30; +deny 212.48.54.72/30; +deny 212.48.54.76/30; +deny 212.48.54.8/30; +deny 212.48.54.80/30; +deny 212.48.54.84/30; +deny 212.48.54.92/30; +deny 212.48.54.96/30; +deny 212.49.107.224/27; +deny 212.49.124.0/26; +deny 212.57.133.0/24; +deny 212.57.159.0/24; +deny 212.59.98.48/29; +deny 212.59.99.96/27; +deny 213.172.17.252/30; +deny 213.172.18.124/30; +deny 213.172.18.148/30; +deny 213.172.18.160/30; +deny 213.172.18.164/30; +deny 213.172.18.252/30; +deny 213.172.18.60/30; +deny 213.172.27.0/30; +deny 213.172.27.116/30; +deny 213.172.27.160/30; +deny 213.172.27.204/30; +deny 213.172.27.212/30; +deny 213.172.27.224/30; +deny 213.172.27.252/30; +deny 213.172.30.136/30; +deny 213.177.111.0/24; +deny 213.183.253.56/29; +deny 213.219.237.68/30; +deny 213.234.13.60/30; +deny 213.234.15.228/30; +deny 213.234.15.248/30; +deny 213.234.18.52/30; +deny 213.234.8.8/30; +deny 213.24.128.0/22; +deny 213.24.143.0/24; +deny 213.24.152.0/22; +deny 213.24.160.0/28; +deny 213.24.34.0/24; +deny 213.24.75.0/24; +deny 213.24.76.0/23; +deny 213.242.204.236/30; +deny 213.242.204.76/30; +deny 213.242.205.88/30; +deny 213.242.215.192/29; +deny 213.242.215.68/30; +deny 213.243.106.48/28; +deny 213.243.116.0/24; +deny 213.243.84.80/28; +deny 213.33.171.240/29; +deny 213.59.59.120/29; +deny 213.59.59.128/29; +deny 213.59.59.144/29; +deny 213.59.59.16/29; +deny 213.59.59.168/29; +deny 213.59.59.64/29; +deny 213.59.91.128/27; +deny 213.59.91.176/28; +deny 213.59.91.48/29; +deny 213.85.142.176/28; +deny 213.85.2.64/28; +deny 213.85.2.80/29; +deny 213.85.20.32/30; +deny 213.85.20.8/30; +deny 213.85.20.84/30; +deny 213.85.77.64/27; +deny 217.106.0.0/16; +deny 217.106.115.168/29; +deny 217.106.147.0/29; +deny 217.106.147.8/29; +deny 217.106.150.224/29; +deny 217.106.150.72/29; +deny 217.106.150.80/29; +deny 217.106.150.88/29; +deny 217.106.203.240/29; +deny 217.106.203.88/29; +deny 217.106.93.192/26; +deny 217.106.95.112/28; +deny 217.107.200.0/21; +deny 217.107.5.112/29; +deny 217.107.5.16/29; +deny 217.107.5.24/29; +deny 217.107.5.40/29; +deny 217.107.5.8/29; +deny 217.107.5.80/29; +deny 217.107.5.88/29; +deny 217.107.5.96/29; +deny 217.147.23.112/28; +deny 217.148.216.156/30; +deny 217.148.220.160/29; +deny 217.172.18.0/23; +deny 217.195.92.16/28; +deny 217.195.93.144/29; +deny 217.195.94.200/29; +deny 217.20.86.128/26; +deny 217.20.86.232/29; +deny 217.23.88.168/29; +deny 217.23.88.248/29; +deny 217.27.142.176/30; +deny 217.65.214.24/29; +deny 217.65.219.160/29; +deny 217.67.177.208/29; +deny 31.177.95.0/24; +deny 31.44.63.64/29; +deny 37.28.161.48/30; +deny 37.29.53.16/30; +deny 37.29.57.52/30; +deny 37.29.57.64/30; +deny 37.29.59.56/30; +deny 46.20.70.160/28; +deny 46.228.0.232/29; +deny 46.29.152.0/22; +deny 46.46.142.160/28; +deny 46.46.148.40/29; +deny 46.47.197.128/30; +deny 46.47.199.76/30; +deny 46.47.203.52/30; +deny 46.47.207.96/30; +deny 46.47.208.84/30; +deny 46.47.210.76/30; +deny 46.47.211.0/24; +deny 46.47.212.204/30; +deny 46.47.213.0/24; +deny 46.47.214.200/30; +deny 46.47.219.200/30; +deny 46.47.223.196/30; +deny 46.47.229.0/28; +deny 46.47.238.144/30; +deny 46.47.249.176/29; +deny 46.61.208.0/24; +deny 62.112.110.64/28; +deny 62.118.0.208/28; +deny 62.118.101.184/29; +deny 62.118.113.232/29; +deny 62.118.125.188/30; +deny 62.118.127.240/28; +deny 62.118.15.16/28; +deny 62.118.17.152/29; +deny 62.118.19.112/30; +deny 62.118.19.40/30; +deny 62.118.193.8/29; +deny 62.118.205.68/30; +deny 62.118.208.100/30; +deny 62.118.209.192/30; +deny 62.118.21.160/29; +deny 62.118.216.60/30; +deny 62.118.219.184/30; +deny 62.118.230.4/30; +deny 62.118.233.224/29; +deny 62.118.234.64/29; +deny 62.118.239.128/29; +deny 62.118.25.112/28; +deny 62.118.37.168/30; +deny 62.118.37.180/30; +deny 62.118.37.4/30; +deny 62.118.38.212/30; +deny 62.141.125.0/25; +deny 62.181.52.56/29; +deny 62.28.169.168/30; +deny 62.33.199.80/29; +deny 62.33.34.16/28; +deny 62.33.87.128/28; +deny 62.33.87.152/29; +deny 62.5.130.104/29; +deny 62.5.132.224/29; +deny 62.5.189.80/29; +deny 62.5.202.60/30; +deny 62.5.218.204/30; +deny 62.5.224.188/30; +deny 62.5.242.80/28; +deny 62.63.100.160/30; +deny 62.63.101.80/29; +deny 62.63.96.32/28; +deny 62.63.98.24/29; +deny 62.76.98.0/24; +deny 77.243.9.80/28; +deny 77.34.209.160/28; +deny 77.35.76.80/28; +deny 77.35.98.240/28; +deny 77.37.128.0/17; +deny 77.72.139.0/28; +deny 77.82.124.112/29; +deny 78.107.13.208/28; +deny 78.107.16.96/28; +deny 78.107.18.112/28; +deny 78.107.3.208/28; +deny 78.107.40.160/28; +deny 78.107.42.144/28; +deny 78.107.51.16/28; +deny 78.107.61.96/28; +deny 78.107.86.32/28; +deny 78.108.192.0/21; +deny 78.108.200.0/24; +deny 78.109.140.112/29; +deny 78.24.159.48/29; +deny 78.37.104.0/29; +deny 78.37.67.24/29; +deny 78.37.69.160/27; +deny 78.37.84.120/29; +deny 78.37.97.88/29; +deny 79.133.74.160/30; +deny 79.133.74.168/30; +deny 79.133.75.176/30; +deny 79.133.75.44/30; +deny 79.142.88.0/28; +deny 80.237.11.88/29; +deny 80.237.39.112/29; +deny 80.237.98.80/28; +deny 80.247.32.0/20; +deny 80.247.32.0/24; +deny 80.247.46.0/24; +deny 80.254.100.40/29; +deny 80.254.119.168/29; +deny 80.73.16.0/20; +deny 80.73.16.0/21; +deny 80.73.16.0/24; +deny 80.73.168.80/28; +deny 80.73.169.244/30; +deny 80.82.43.24/29; +deny 80.89.152.220/30; +deny 81.1.195.0/28; +deny 81.1.205.96/27; +deny 81.17.2.192/28; +deny 81.17.3.16/29; +deny 81.176.235.0/27; +deny 81.176.70.0/26; +deny 81.177.156.0/24; +deny 81.195.105.160/28; +deny 81.195.108.164/30; +deny 81.195.112.36/30; +deny 81.195.118.128/30; +deny 81.195.118.48/30; +deny 81.195.120.16/29; +deny 81.195.124.52/30; +deny 81.195.125.96/30; +deny 81.195.148.140/30; +deny 81.195.150.248/30; +deny 81.195.151.172/30; +deny 81.195.155.0/30; +deny 81.195.161.12/30; +deny 81.195.165.64/28; +deny 81.195.168.24/30; +deny 81.195.177.160/30; +deny 81.195.178.224/27; +deny 81.195.182.64/28; +deny 81.195.192.96/30; +deny 81.195.231.128/26; +deny 81.195.244.32/29; +deny 81.195.245.0/28; +deny 81.195.247.128/28; +deny 81.195.250.16/29; +deny 81.195.36.48/28; +deny 81.195.44.248/30; +deny 81.195.45.64/30; +deny 81.195.50.72/29; +deny 81.195.90.44/30; +deny 81.195.92.48/30; +deny 81.195.93.192/27; +deny 81.195.94.72/29; +deny 81.2.1.0/28; +deny 81.2.10.192/27; +deny 81.211.32.16/28; +deny 81.222.194.200/29; +deny 81.222.209.136/29; +deny 81.222.210.24/29; +deny 81.3.168.148/30; +deny 82.110.69.200/29; +deny 82.140.65.240/29; +deny 82.151.107.136/29; +deny 82.162.103.144/28; +deny 82.162.126.96/28; +deny 82.162.149.160/28; +deny 82.162.157.64/28; +deny 82.162.158.176/28; +deny 82.162.172.112/28; +deny 82.162.72.208/28; +deny 82.162.76.176/28; +deny 82.162.80.192/28; +deny 82.162.87.192/28; +deny 82.162.90.0/28; +deny 82.179.86.32/27; +deny 82.196.130.0/27; +deny 82.196.69.152/30; +deny 82.198.176.144/29; +deny 82.198.176.16/29; +deny 82.198.176.208/29; +deny 82.198.189.128/26; +deny 82.198.190.64/26; +deny 82.198.191.248/29; +deny 82.198.191.96/27; +deny 82.200.13.0/27; +deny 82.200.22.136/29; +deny 82.200.22.144/28; +deny 82.200.64.0/24; +deny 82.208.68.240/28; +deny 82.208.77.104/29; +deny 82.208.81.0/24; +deny 82.208.93.160/27; +deny 83.149.42.64/29; +deny 83.172.36.224/29; +deny 83.219.13.128/29; +deny 83.219.13.184/29; +deny 83.219.138.16/28; +deny 83.219.23.48/29; +deny 83.219.23.8/29; +deny 83.219.25.0/29; +deny 83.219.25.112/29; +deny 83.219.5.248/29; +deny 83.219.6.72/29; +deny 83.220.53.16/28; +deny 83.229.181.192/26; +deny 83.229.232.16/29; +deny 83.69.207.248/29; +deny 84.204.143.44/30; +deny 84.204.154.16/30; +deny 84.204.170.220/30; +deny 84.204.217.164/30; +deny 84.204.245.208/29; +deny 84.204.7.144/29; +deny 84.53.210.144/28; +deny 85.114.30.192/30; +deny 85.114.30.204/30; +deny 85.114.93.88/29; +deny 85.141.17.112/30; +deny 85.141.17.24/30; +deny 85.141.18.80/30; +deny 85.141.19.56/30; +deny 85.141.21.236/30; +deny 85.141.28.0/30; +deny 85.141.31.68/30; +deny 85.141.32.96/28; +deny 85.141.33.0/28; +deny 85.141.33.64/28; +deny 85.141.60.96/28; +deny 85.141.61.160/28; +deny 85.143.125.0/24; +deny 85.21.102.224/28; +deny 85.21.103.64/28; +deny 85.21.104.192/27; +deny 85.21.148.0/26; +deny 85.21.149.48/28; +deny 85.21.155.208/28; +deny 85.21.157.48/28; +deny 85.21.204.208/28; +deny 85.21.99.48/28; +deny 85.21.99.64/28; +deny 85.236.29.160/27; +deny 85.90.100.72/29; +deny 85.90.101.112/28; +deny 85.90.101.192/29; +deny 85.90.102.168/29; +deny 85.90.120.72/29; +deny 85.90.121.72/29; +deny 85.90.125.96/29; +deny 85.90.127.16/29; +deny 85.90.98.144/30; +deny 85.90.99.168/29; +deny 86.102.100.48/28; +deny 86.102.108.32/28; +deny 86.102.109.32/28; +deny 86.102.109.48/28; +deny 86.102.115.80/28; +deny 86.102.126.160/28; +deny 86.102.126.80/28; +deny 86.102.72.240/28; +deny 86.102.74.64/28; +deny 87.117.18.144/29; +deny 87.117.20.128/28; +deny 87.117.20.64/27; +deny 87.117.20.96/27; +deny 87.117.21.0/29; +deny 87.117.21.16/29; +deny 87.117.21.24/29; +deny 87.117.21.32/29; +deny 87.117.21.40/29; +deny 87.117.21.48/29; +deny 87.117.21.56/29; +deny 87.117.21.64/29; +deny 87.117.21.72/29; +deny 87.117.21.8/29; +deny 87.117.21.80/29; +deny 87.117.23.128/28; +deny 87.117.31.56/29; +deny 87.225.56.224/28; +deny 87.226.156.64/26; +deny 87.226.191.0/24; +deny 87.226.213.0/24; +deny 87.226.239.180/30; +deny 87.237.47.204/30; +deny 87.245.133.0/24; +deny 87.249.16.32/28; +deny 87.249.18.60/30; +deny 87.249.22.72/29; +deny 87.249.28.232/29; +deny 87.249.3.64/28; +deny 87.249.30.176/30; +deny 87.249.5.48/30; +deny 87.249.7.120/29; +deny 88.151.200.0/24; +deny 88.200.208.112/29; +deny 88.83.195.248/30; +deny 89.106.172.160/29; +deny 89.107.123.120/29; +deny 89.107.123.136/29; +deny 89.107.127.136/29; +deny 89.109.250.88/29; +deny 89.109.7.176/29; +deny 89.111.176.0/22; +deny 89.175.10.160/30; +deny 89.175.165.208/28; +deny 89.175.170.144/28; +deny 89.175.174.136/29; +deny 89.175.176.140/30; +deny 89.175.176.176/30; +deny 89.175.176.88/30; +deny 89.175.188.184/29; +deny 89.175.6.64/27; +deny 89.175.8.104/30; +deny 89.175.8.140/30; +deny 89.175.8.192/30; +deny 89.175.8.36/30; +deny 89.175.8.40/30; +deny 89.175.8.44/30; +deny 89.175.8.52/30; +deny 89.175.8.68/30; +deny 89.175.9.4/30; +deny 89.179.155.192/28; +deny 89.179.179.16/28; +deny 89.179.181.0/24; +deny 89.21.129.16/28; +deny 89.21.140.104/29; +deny 89.21.152.104/29; +deny 89.28.253.168/29; +deny 89.28.255.56/29; +deny 90.150.176.52/30; +deny 90.150.189.128/29; +deny 90.150.189.136/29; +deny 90.150.189.144/29; +deny 90.150.189.152/29; +deny 90.150.189.160/29; +deny 90.150.189.168/29; +deny 90.150.189.176/29; +deny 90.150.189.184/29; +deny 90.150.189.192/29; +deny 90.150.189.200/29; +deny 90.150.189.208/29; +deny 90.150.189.216/29; +deny 90.150.189.224/29; +deny 90.150.189.232/29; +deny 90.150.189.248/29; +deny 90.150.189.32/29; +deny 91.103.194.184/29; +deny 91.215.168.0/22; +deny 91.217.34.0/23; +deny 91.219.192.0/22; +deny 91.221.140.0/23; +deny 91.221.140.0/24; +deny 91.221.141.0/24; +deny 91.226.250.0/24; +deny 91.227.32.0/24; +deny 92.101.253.152/29; +deny 92.39.106.168/30; +deny 92.39.106.20/30; +deny 92.39.111.84/30; +deny 92.39.128.0/21; +deny 92.50.198.124/30; +deny 92.50.198.72/30; +deny 92.50.219.136/29; +deny 92.50.238.224/29; +deny 92.60.186.0/28; +deny 93.153.135.88/30; +deny 93.153.136.132/30; +deny 93.153.144.60/30; +deny 93.153.171.204/30; +deny 93.153.172.100/30; +deny 93.153.175.44/30; +deny 93.153.183.104/30; +deny 93.153.194.160/29; +deny 93.153.220.192/29; +deny 93.153.223.8/29; +deny 93.153.229.232/29; +deny 93.153.244.188/30; +deny 93.153.244.248/29; +deny 93.153.251.0/24; +deny 93.178.104.32/30; +deny 93.178.104.36/30; +deny 93.178.104.64/30; +deny 93.178.104.68/30; +deny 93.178.106.0/26; +deny 93.182.23.48/29; +deny 93.188.20.72/29; +deny 93.190.110.0/24; +deny 94.124.192.192/29; +deny 94.199.64.0/21; +deny 94.25.119.228/30; +deny 94.25.53.56/29; +deny 94.25.57.176/29; +deny 94.25.57.224/28; +deny 94.25.65.16/29; +deny 94.25.70.64/30; +deny 94.25.90.240/29; +deny 94.25.95.136/30; +deny 95.167.113.48/30; +deny 95.167.114.48/30; +deny 95.167.121.68/30; +deny 95.167.122.128/28; +deny 95.167.142.32/30; +deny 95.167.157.156/30; +deny 95.167.162.236/30; +deny 95.167.162.76/30; +deny 95.167.176.0/23; +deny 95.167.2.4/30; +deny 95.167.21.104/29; +deny 95.167.213.0/24; +deny 95.167.29.104/29; +deny 95.167.4.168/29; +deny 95.167.5.64/28; +deny 95.167.5.80/28; +deny 95.167.54.76/30; +deny 95.167.59.244/30; +deny 95.167.64.20/30; +deny 95.167.68.216/29; +deny 95.167.69.116/30; +deny 95.167.70.136/29; +deny 95.167.70.176/28; +deny 95.167.70.32/28; +deny 95.167.72.140/30; +deny 95.167.72.204/30; +deny 95.167.72.48/30; +deny 95.167.74.136/29; +deny 95.167.74.180/30; +deny 95.167.76.160/27; +deny 95.167.99.48/28; +deny 95.173.128.0/19; +deny 95.173.128.0/20; +deny 95.173.144.0/20; +deny 95.53.248.0/29; +deny 95.54.193.80/28; + diff --git a/blacklists_nginx/blacklist-v6.conf b/blacklists_nginx/blacklist-v6.conf new file mode 100644 index 0000000..459cdc3 --- /dev/null +++ b/blacklists_nginx/blacklist-v6.conf @@ -0,0 +1,12 @@ +# Nginx blacklist configuration (IPv6 only) +# Auto-generated from blacklist-v6.txt +# Last updated: 2025-10-23 09:43:00 UTC +# +# Usage: Include this file in your nginx server or location block: +# include /path/to/blacklist-v6.conf; +# + +deny 2a0c:a9c7:156::/48; +deny 2a0c:a9c7:157::/48; +deny 2a0c:a9c7:158::/48; + diff --git a/blacklists_nginx/blacklist.conf b/blacklists_nginx/blacklist.conf new file mode 100644 index 0000000..a66b788 --- /dev/null +++ b/blacklists_nginx/blacklist.conf @@ -0,0 +1,818 @@ +# Nginx blacklist configuration (mixed IPv4/IPv6) +# Auto-generated from blacklist.txt +# Last updated: 2025-10-23 09:43:00 UTC +# +# Usage: Include this file in your nginx server or location block: +# include /path/to/blacklist.conf; +# + +deny 109.124.119.88/29; +deny 109.124.66.128/30; +deny 109.124.66.160/28; +deny 109.124.71.64/29; +deny 109.124.78.108/30; +deny 109.124.80.132/30; +deny 109.124.83.20/30; +deny 109.124.87.96/29; +deny 109.124.89.140/30; +deny 109.124.89.212/30; +deny 109.124.89.36/30; +deny 109.124.90.128/30; +deny 109.124.90.32/30; +deny 109.124.97.4/30; +deny 109.124.99.16/30; +deny 109.124.99.160/28; +deny 109.204.204.232/29; +deny 109.207.0.0/20; +deny 109.232.187.16/29; +deny 109.248.197.0/24; +deny 109.73.4.224/27; +deny 145.255.238.240/28; +deny 149.62.55.240/30; +deny 176.109.0.0/21; +deny 176.116.96.0/20; +deny 178.16.156.148/30; +deny 178.237.206.0/24; +deny 178.237.240.0/20; +deny 178.237.248.0/21; +deny 178.248.232.137/32; +deny 178.248.232.60/32; +deny 178.248.233.136/32; +deny 178.248.233.244/32; +deny 178.248.233.245/32; +deny 178.248.233.26/32; +deny 178.248.233.32/32; +deny 178.248.233.60/32; +deny 178.248.234.136/32; +deny 178.248.234.204/32; +deny 178.248.234.228/32; +deny 178.248.234.238/32; +deny 178.248.234.30/32; +deny 178.248.234.33/32; +deny 178.248.234.60/32; +deny 178.248.234.79/32; +deny 178.248.234.83/32; +deny 178.248.235.244/32; +deny 178.248.235.60/32; +deny 178.248.235.75/32; +deny 178.248.236.20/32; +deny 178.248.236.244/32; +deny 178.248.236.83/32; +deny 178.248.237.136/32; +deny 178.248.237.18/32; +deny 178.248.237.242/32; +deny 178.248.237.98/32; +deny 178.248.238.102/32; +deny 178.248.238.128/32; +deny 178.248.238.129/32; +deny 178.248.238.136/32; +deny 178.248.238.155/32; +deny 178.248.238.172/32; +deny 178.248.238.205/32; +deny 178.248.238.255/32; +deny 178.248.238.55/32; +deny 178.248.239.215/32; +deny 178.49.148.176/29; +deny 185.149.160.0/24; +deny 185.149.161.0/24; +deny 185.149.162.0/24; +deny 185.149.163.0/24; +deny 185.168.60.0/24; +deny 185.168.61.0/24; +deny 185.168.62.0/24; +deny 185.168.63.0/24; +deny 185.179.224.0/24; +deny 185.179.225.0/24; +deny 185.179.226.0/24; +deny 185.179.227.0/24; +deny 185.183.172.0/23; +deny 185.183.174.0/23; +deny 185.224.228.0/24; +deny 185.224.229.0/24; +deny 185.224.230.0/24; +deny 185.224.231.0/24; +deny 185.65.149.170/32; +deny 185.7.234.188/30; +deny 188.128.101.108/30; +deny 188.128.11.196/30; +deny 188.128.112.216/29; +deny 188.128.112.240/29; +deny 188.128.113.0/28; +deny 188.128.114.128/28; +deny 188.128.115.232/29; +deny 188.128.118.224/27; +deny 188.128.119.104/30; +deny 188.128.8.240/30; +deny 188.128.89.0/30; +deny 188.128.92.104/30; +deny 188.128.94.204/30; +deny 188.128.98.204/30; +deny 188.247.36.124/30; +deny 188.247.36.128/30; +deny 188.247.36.132/30; +deny 188.247.36.136/30; +deny 188.247.36.140/30; +deny 188.247.36.204/30; +deny 193.232.70.0/24; +deny 193.47.146.0/24; +deny 194.140.247.0/25; +deny 194.140.247.128/25; +deny 194.150.202.0/23; +deny 194.165.22.0/23; +deny 194.186.112.80/28; +deny 194.190.9.0/24; +deny 194.215.248.0/24; +deny 194.226.116.0/22; +deny 194.226.127.0/24; +deny 194.226.80.0/21; +deny 194.226.88.0/21; +deny 194.67.63.200/30; +deny 194.8.246.0/23; +deny 194.8.70.0/23; +deny 195.128.157.0/24; +deny 195.131.53.248/29; +deny 195.131.61.80/29; +deny 195.131.63.24/29; +deny 195.131.7.8/29; +deny 195.144.232.144/30; +deny 195.144.240.128/28; +deny 195.149.110.0/24; +deny 195.151.25.48/29; +deny 195.16.55.224/27; +deny 195.162.36.64/28; +deny 195.170.218.24/29; +deny 195.170.218.88/29; +deny 195.182.142.128/26; +deny 195.182.145.64/28; +deny 195.182.151.212/30; +deny 195.182.151.216/30; +deny 195.182.155.164/30; +deny 195.182.156.96/30; +deny 195.209.120.0/22; +deny 195.209.122.0/24; +deny 195.209.123.0/24; +deny 195.218.175.40/29; +deny 195.239.113.0/24; +deny 195.3.240.0/22; +deny 195.42.75.8/29; +deny 195.54.20.168/29; +deny 195.54.221.0/24; +deny 195.54.28.72/30; +deny 195.58.13.120/30; +deny 195.58.21.196/30; +deny 195.58.29.57/32; +deny 195.58.30.164/30; +deny 195.58.30.200/29; +deny 195.58.5.16/30; +deny 195.58.5.20/30; +deny 195.80.224.0/24; +deny 195.98.38.16/28; +deny 195.98.43.104/29; +deny 195.98.73.56/29; +deny 195.98.77.100/30; +deny 212.119.174.0/24; +deny 212.119.175.0/24; +deny 212.120.169.48/29; +deny 212.120.174.88/29; +deny 212.120.184.48/29; +deny 212.120.184.56/29; +deny 212.120.184.64/29; +deny 212.120.189.208/29; +deny 212.120.189.224/29; +deny 212.120.190.112/29; +deny 212.120.190.240/29; +deny 212.120.191.120/29; +deny 212.120.191.248/29; +deny 212.13.104.116/30; +deny 212.13.113.100/30; +deny 212.15.105.64/28; +deny 212.15.114.156/30; +deny 212.15.115.80/28; +deny 212.17.16.192/27; +deny 212.17.17.176/28; +deny 212.17.8.176/29; +deny 212.17.9.144/28; +deny 212.192.156.0/22; +deny 212.192.156.0/24; +deny 212.192.157.0/24; +deny 212.192.158.0/24; +deny 212.23.85.48/30; +deny 212.23.85.56/29; +deny 212.32.198.64/29; +deny 212.48.134.192/26; +deny 212.48.138.240/28; +deny 212.48.141.160/27; +deny 212.48.34.176/29; +deny 212.48.34.184/29; +deny 212.48.53.100/30; +deny 212.48.53.144/30; +deny 212.48.53.152/30; +deny 212.48.53.156/30; +deny 212.48.53.160/30; +deny 212.48.53.164/30; +deny 212.48.53.184/30; +deny 212.48.53.188/30; +deny 212.48.53.192/30; +deny 212.48.53.196/30; +deny 212.48.53.200/30; +deny 212.48.53.216/30; +deny 212.48.53.236/30; +deny 212.48.53.240/30; +deny 212.48.53.244/30; +deny 212.48.53.248/30; +deny 212.48.53.252/30; +deny 212.48.53.76/30; +deny 212.48.53.84/30; +deny 212.48.53.88/30; +deny 212.48.53.92/30; +deny 212.48.54.0/30; +deny 212.48.54.100/30; +deny 212.48.54.104/30; +deny 212.48.54.108/30; +deny 212.48.54.112/30; +deny 212.48.54.116/30; +deny 212.48.54.12/30; +deny 212.48.54.120/30; +deny 212.48.54.124/30; +deny 212.48.54.128/30; +deny 212.48.54.132/30; +deny 212.48.54.136/30; +deny 212.48.54.140/30; +deny 212.48.54.144/30; +deny 212.48.54.148/30; +deny 212.48.54.152/30; +deny 212.48.54.156/30; +deny 212.48.54.16/30; +deny 212.48.54.164/30; +deny 212.48.54.168/30; +deny 212.48.54.172/30; +deny 212.48.54.176/30; +deny 212.48.54.180/30; +deny 212.48.54.184/30; +deny 212.48.54.188/30; +deny 212.48.54.196/30; +deny 212.48.54.20/30; +deny 212.48.54.200/30; +deny 212.48.54.208/30; +deny 212.48.54.212/30; +deny 212.48.54.216/30; +deny 212.48.54.220/30; +deny 212.48.54.24/30; +deny 212.48.54.240/30; +deny 212.48.54.244/30; +deny 212.48.54.248/30; +deny 212.48.54.252/30; +deny 212.48.54.28/30; +deny 212.48.54.32/30; +deny 212.48.54.36/30; +deny 212.48.54.44/30; +deny 212.48.54.48/30; +deny 212.48.54.52/30; +deny 212.48.54.56/30; +deny 212.48.54.60/30; +deny 212.48.54.64/30; +deny 212.48.54.68/30; +deny 212.48.54.72/30; +deny 212.48.54.76/30; +deny 212.48.54.8/30; +deny 212.48.54.80/30; +deny 212.48.54.84/30; +deny 212.48.54.92/30; +deny 212.48.54.96/30; +deny 212.49.107.224/27; +deny 212.49.124.0/26; +deny 212.57.133.0/24; +deny 212.57.159.0/24; +deny 212.59.98.48/29; +deny 212.59.99.96/27; +deny 213.172.17.252/30; +deny 213.172.18.124/30; +deny 213.172.18.148/30; +deny 213.172.18.160/30; +deny 213.172.18.164/30; +deny 213.172.18.252/30; +deny 213.172.18.60/30; +deny 213.172.27.0/30; +deny 213.172.27.116/30; +deny 213.172.27.160/30; +deny 213.172.27.204/30; +deny 213.172.27.212/30; +deny 213.172.27.224/30; +deny 213.172.27.252/30; +deny 213.172.30.136/30; +deny 213.177.111.0/24; +deny 213.183.253.56/29; +deny 213.219.237.68/30; +deny 213.234.13.60/30; +deny 213.234.15.228/30; +deny 213.234.15.248/30; +deny 213.234.18.52/30; +deny 213.234.8.8/30; +deny 213.24.128.0/22; +deny 213.24.143.0/24; +deny 213.24.152.0/22; +deny 213.24.160.0/28; +deny 213.24.34.0/24; +deny 213.24.75.0/24; +deny 213.24.76.0/23; +deny 213.242.204.236/30; +deny 213.242.204.76/30; +deny 213.242.205.88/30; +deny 213.242.215.192/29; +deny 213.242.215.68/30; +deny 213.243.106.48/28; +deny 213.243.116.0/24; +deny 213.243.84.80/28; +deny 213.33.171.240/29; +deny 213.59.59.120/29; +deny 213.59.59.128/29; +deny 213.59.59.144/29; +deny 213.59.59.16/29; +deny 213.59.59.168/29; +deny 213.59.59.64/29; +deny 213.59.91.128/27; +deny 213.59.91.176/28; +deny 213.59.91.48/29; +deny 213.85.142.176/28; +deny 213.85.2.64/28; +deny 213.85.2.80/29; +deny 213.85.20.32/30; +deny 213.85.20.8/30; +deny 213.85.20.84/30; +deny 213.85.77.64/27; +deny 217.106.0.0/16; +deny 217.106.115.168/29; +deny 217.106.147.0/29; +deny 217.106.147.8/29; +deny 217.106.150.224/29; +deny 217.106.150.72/29; +deny 217.106.150.80/29; +deny 217.106.150.88/29; +deny 217.106.203.240/29; +deny 217.106.203.88/29; +deny 217.106.93.192/26; +deny 217.106.95.112/28; +deny 217.107.200.0/21; +deny 217.107.5.112/29; +deny 217.107.5.16/29; +deny 217.107.5.24/29; +deny 217.107.5.40/29; +deny 217.107.5.8/29; +deny 217.107.5.80/29; +deny 217.107.5.88/29; +deny 217.107.5.96/29; +deny 217.147.23.112/28; +deny 217.148.216.156/30; +deny 217.148.220.160/29; +deny 217.172.18.0/23; +deny 217.195.92.16/28; +deny 217.195.93.144/29; +deny 217.195.94.200/29; +deny 217.20.86.128/26; +deny 217.20.86.232/29; +deny 217.23.88.168/29; +deny 217.23.88.248/29; +deny 217.27.142.176/30; +deny 217.65.214.24/29; +deny 217.65.219.160/29; +deny 217.67.177.208/29; +deny 2a0c:a9c7:156::/48; +deny 2a0c:a9c7:157::/48; +deny 2a0c:a9c7:158::/48; +deny 31.177.95.0/24; +deny 31.44.63.64/29; +deny 37.28.161.48/30; +deny 37.29.53.16/30; +deny 37.29.57.52/30; +deny 37.29.57.64/30; +deny 37.29.59.56/30; +deny 46.20.70.160/28; +deny 46.228.0.232/29; +deny 46.29.152.0/22; +deny 46.46.142.160/28; +deny 46.46.148.40/29; +deny 46.47.197.128/30; +deny 46.47.199.76/30; +deny 46.47.203.52/30; +deny 46.47.207.96/30; +deny 46.47.208.84/30; +deny 46.47.210.76/30; +deny 46.47.211.0/24; +deny 46.47.212.204/30; +deny 46.47.213.0/24; +deny 46.47.214.200/30; +deny 46.47.219.200/30; +deny 46.47.223.196/30; +deny 46.47.229.0/28; +deny 46.47.238.144/30; +deny 46.47.249.176/29; +deny 46.61.208.0/24; +deny 62.112.110.64/28; +deny 62.118.0.208/28; +deny 62.118.101.184/29; +deny 62.118.113.232/29; +deny 62.118.125.188/30; +deny 62.118.127.240/28; +deny 62.118.15.16/28; +deny 62.118.17.152/29; +deny 62.118.19.112/30; +deny 62.118.19.40/30; +deny 62.118.193.8/29; +deny 62.118.205.68/30; +deny 62.118.208.100/30; +deny 62.118.209.192/30; +deny 62.118.21.160/29; +deny 62.118.216.60/30; +deny 62.118.219.184/30; +deny 62.118.230.4/30; +deny 62.118.233.224/29; +deny 62.118.234.64/29; +deny 62.118.239.128/29; +deny 62.118.25.112/28; +deny 62.118.37.168/30; +deny 62.118.37.180/30; +deny 62.118.37.4/30; +deny 62.118.38.212/30; +deny 62.141.125.0/25; +deny 62.181.52.56/29; +deny 62.28.169.168/30; +deny 62.33.199.80/29; +deny 62.33.34.16/28; +deny 62.33.87.128/28; +deny 62.33.87.152/29; +deny 62.5.130.104/29; +deny 62.5.132.224/29; +deny 62.5.189.80/29; +deny 62.5.202.60/30; +deny 62.5.218.204/30; +deny 62.5.224.188/30; +deny 62.5.242.80/28; +deny 62.63.100.160/30; +deny 62.63.101.80/29; +deny 62.63.96.32/28; +deny 62.63.98.24/29; +deny 62.76.98.0/24; +deny 77.243.9.80/28; +deny 77.34.209.160/28; +deny 77.35.76.80/28; +deny 77.35.98.240/28; +deny 77.37.128.0/17; +deny 77.72.139.0/28; +deny 77.82.124.112/29; +deny 78.107.13.208/28; +deny 78.107.16.96/28; +deny 78.107.18.112/28; +deny 78.107.3.208/28; +deny 78.107.40.160/28; +deny 78.107.42.144/28; +deny 78.107.51.16/28; +deny 78.107.61.96/28; +deny 78.107.86.32/28; +deny 78.108.192.0/21; +deny 78.108.200.0/24; +deny 78.109.140.112/29; +deny 78.24.159.48/29; +deny 78.37.104.0/29; +deny 78.37.67.24/29; +deny 78.37.69.160/27; +deny 78.37.84.120/29; +deny 78.37.97.88/29; +deny 79.133.74.160/30; +deny 79.133.74.168/30; +deny 79.133.75.176/30; +deny 79.133.75.44/30; +deny 79.142.88.0/28; +deny 80.237.11.88/29; +deny 80.237.39.112/29; +deny 80.237.98.80/28; +deny 80.247.32.0/20; +deny 80.247.32.0/24; +deny 80.247.46.0/24; +deny 80.254.100.40/29; +deny 80.254.119.168/29; +deny 80.73.16.0/20; +deny 80.73.16.0/21; +deny 80.73.16.0/24; +deny 80.73.168.80/28; +deny 80.73.169.244/30; +deny 80.82.43.24/29; +deny 80.89.152.220/30; +deny 81.1.195.0/28; +deny 81.1.205.96/27; +deny 81.17.2.192/28; +deny 81.17.3.16/29; +deny 81.176.235.0/27; +deny 81.176.70.0/26; +deny 81.177.156.0/24; +deny 81.195.105.160/28; +deny 81.195.108.164/30; +deny 81.195.112.36/30; +deny 81.195.118.128/30; +deny 81.195.118.48/30; +deny 81.195.120.16/29; +deny 81.195.124.52/30; +deny 81.195.125.96/30; +deny 81.195.148.140/30; +deny 81.195.150.248/30; +deny 81.195.151.172/30; +deny 81.195.155.0/30; +deny 81.195.161.12/30; +deny 81.195.165.64/28; +deny 81.195.168.24/30; +deny 81.195.177.160/30; +deny 81.195.178.224/27; +deny 81.195.182.64/28; +deny 81.195.192.96/30; +deny 81.195.231.128/26; +deny 81.195.244.32/29; +deny 81.195.245.0/28; +deny 81.195.247.128/28; +deny 81.195.250.16/29; +deny 81.195.36.48/28; +deny 81.195.44.248/30; +deny 81.195.45.64/30; +deny 81.195.50.72/29; +deny 81.195.90.44/30; +deny 81.195.92.48/30; +deny 81.195.93.192/27; +deny 81.195.94.72/29; +deny 81.2.1.0/28; +deny 81.2.10.192/27; +deny 81.211.32.16/28; +deny 81.222.194.200/29; +deny 81.222.209.136/29; +deny 81.222.210.24/29; +deny 81.3.168.148/30; +deny 82.110.69.200/29; +deny 82.140.65.240/29; +deny 82.151.107.136/29; +deny 82.162.103.144/28; +deny 82.162.126.96/28; +deny 82.162.149.160/28; +deny 82.162.157.64/28; +deny 82.162.158.176/28; +deny 82.162.172.112/28; +deny 82.162.72.208/28; +deny 82.162.76.176/28; +deny 82.162.80.192/28; +deny 82.162.87.192/28; +deny 82.162.90.0/28; +deny 82.179.86.32/27; +deny 82.196.130.0/27; +deny 82.196.69.152/30; +deny 82.198.176.144/29; +deny 82.198.176.16/29; +deny 82.198.176.208/29; +deny 82.198.189.128/26; +deny 82.198.190.64/26; +deny 82.198.191.248/29; +deny 82.198.191.96/27; +deny 82.200.13.0/27; +deny 82.200.22.136/29; +deny 82.200.22.144/28; +deny 82.200.64.0/24; +deny 82.208.68.240/28; +deny 82.208.77.104/29; +deny 82.208.81.0/24; +deny 82.208.93.160/27; +deny 83.149.42.64/29; +deny 83.172.36.224/29; +deny 83.219.13.128/29; +deny 83.219.13.184/29; +deny 83.219.138.16/28; +deny 83.219.23.48/29; +deny 83.219.23.8/29; +deny 83.219.25.0/29; +deny 83.219.25.112/29; +deny 83.219.5.248/29; +deny 83.219.6.72/29; +deny 83.220.53.16/28; +deny 83.229.181.192/26; +deny 83.229.232.16/29; +deny 83.69.207.248/29; +deny 84.204.143.44/30; +deny 84.204.154.16/30; +deny 84.204.170.220/30; +deny 84.204.217.164/30; +deny 84.204.245.208/29; +deny 84.204.7.144/29; +deny 84.53.210.144/28; +deny 85.114.30.192/30; +deny 85.114.30.204/30; +deny 85.114.93.88/29; +deny 85.141.17.112/30; +deny 85.141.17.24/30; +deny 85.141.18.80/30; +deny 85.141.19.56/30; +deny 85.141.21.236/30; +deny 85.141.28.0/30; +deny 85.141.31.68/30; +deny 85.141.32.96/28; +deny 85.141.33.0/28; +deny 85.141.33.64/28; +deny 85.141.60.96/28; +deny 85.141.61.160/28; +deny 85.143.125.0/24; +deny 85.21.102.224/28; +deny 85.21.103.64/28; +deny 85.21.104.192/27; +deny 85.21.148.0/26; +deny 85.21.149.48/28; +deny 85.21.155.208/28; +deny 85.21.157.48/28; +deny 85.21.204.208/28; +deny 85.21.99.48/28; +deny 85.21.99.64/28; +deny 85.236.29.160/27; +deny 85.90.100.72/29; +deny 85.90.101.112/28; +deny 85.90.101.192/29; +deny 85.90.102.168/29; +deny 85.90.120.72/29; +deny 85.90.121.72/29; +deny 85.90.125.96/29; +deny 85.90.127.16/29; +deny 85.90.98.144/30; +deny 85.90.99.168/29; +deny 86.102.100.48/28; +deny 86.102.108.32/28; +deny 86.102.109.32/28; +deny 86.102.109.48/28; +deny 86.102.115.80/28; +deny 86.102.126.160/28; +deny 86.102.126.80/28; +deny 86.102.72.240/28; +deny 86.102.74.64/28; +deny 87.117.18.144/29; +deny 87.117.20.128/28; +deny 87.117.20.64/27; +deny 87.117.20.96/27; +deny 87.117.21.0/29; +deny 87.117.21.16/29; +deny 87.117.21.24/29; +deny 87.117.21.32/29; +deny 87.117.21.40/29; +deny 87.117.21.48/29; +deny 87.117.21.56/29; +deny 87.117.21.64/29; +deny 87.117.21.72/29; +deny 87.117.21.8/29; +deny 87.117.21.80/29; +deny 87.117.23.128/28; +deny 87.117.31.56/29; +deny 87.225.56.224/28; +deny 87.226.156.64/26; +deny 87.226.191.0/24; +deny 87.226.213.0/24; +deny 87.226.239.180/30; +deny 87.237.47.204/30; +deny 87.245.133.0/24; +deny 87.249.16.32/28; +deny 87.249.18.60/30; +deny 87.249.22.72/29; +deny 87.249.28.232/29; +deny 87.249.3.64/28; +deny 87.249.30.176/30; +deny 87.249.5.48/30; +deny 87.249.7.120/29; +deny 88.151.200.0/24; +deny 88.200.208.112/29; +deny 88.83.195.248/30; +deny 89.106.172.160/29; +deny 89.107.123.120/29; +deny 89.107.123.136/29; +deny 89.107.127.136/29; +deny 89.109.250.88/29; +deny 89.109.7.176/29; +deny 89.111.176.0/22; +deny 89.175.10.160/30; +deny 89.175.165.208/28; +deny 89.175.170.144/28; +deny 89.175.174.136/29; +deny 89.175.176.140/30; +deny 89.175.176.176/30; +deny 89.175.176.88/30; +deny 89.175.188.184/29; +deny 89.175.6.64/27; +deny 89.175.8.104/30; +deny 89.175.8.140/30; +deny 89.175.8.192/30; +deny 89.175.8.36/30; +deny 89.175.8.40/30; +deny 89.175.8.44/30; +deny 89.175.8.52/30; +deny 89.175.8.68/30; +deny 89.175.9.4/30; +deny 89.179.155.192/28; +deny 89.179.179.16/28; +deny 89.179.181.0/24; +deny 89.21.129.16/28; +deny 89.21.140.104/29; +deny 89.21.152.104/29; +deny 89.28.253.168/29; +deny 89.28.255.56/29; +deny 90.150.176.52/30; +deny 90.150.189.128/29; +deny 90.150.189.136/29; +deny 90.150.189.144/29; +deny 90.150.189.152/29; +deny 90.150.189.160/29; +deny 90.150.189.168/29; +deny 90.150.189.176/29; +deny 90.150.189.184/29; +deny 90.150.189.192/29; +deny 90.150.189.200/29; +deny 90.150.189.208/29; +deny 90.150.189.216/29; +deny 90.150.189.224/29; +deny 90.150.189.232/29; +deny 90.150.189.248/29; +deny 90.150.189.32/29; +deny 91.103.194.184/29; +deny 91.215.168.0/22; +deny 91.217.34.0/23; +deny 91.219.192.0/22; +deny 91.221.140.0/23; +deny 91.221.140.0/24; +deny 91.221.141.0/24; +deny 91.226.250.0/24; +deny 91.227.32.0/24; +deny 92.101.253.152/29; +deny 92.39.106.168/30; +deny 92.39.106.20/30; +deny 92.39.111.84/30; +deny 92.39.128.0/21; +deny 92.50.198.124/30; +deny 92.50.198.72/30; +deny 92.50.219.136/29; +deny 92.50.238.224/29; +deny 92.60.186.0/28; +deny 93.153.135.88/30; +deny 93.153.136.132/30; +deny 93.153.144.60/30; +deny 93.153.171.204/30; +deny 93.153.172.100/30; +deny 93.153.175.44/30; +deny 93.153.183.104/30; +deny 93.153.194.160/29; +deny 93.153.220.192/29; +deny 93.153.223.8/29; +deny 93.153.229.232/29; +deny 93.153.244.188/30; +deny 93.153.244.248/29; +deny 93.153.251.0/24; +deny 93.178.104.32/30; +deny 93.178.104.36/30; +deny 93.178.104.64/30; +deny 93.178.104.68/30; +deny 93.178.106.0/26; +deny 93.182.23.48/29; +deny 93.188.20.72/29; +deny 93.190.110.0/24; +deny 94.124.192.192/29; +deny 94.199.64.0/21; +deny 94.25.119.228/30; +deny 94.25.53.56/29; +deny 94.25.57.176/29; +deny 94.25.57.224/28; +deny 94.25.65.16/29; +deny 94.25.70.64/30; +deny 94.25.90.240/29; +deny 94.25.95.136/30; +deny 95.167.113.48/30; +deny 95.167.114.48/30; +deny 95.167.121.68/30; +deny 95.167.122.128/28; +deny 95.167.142.32/30; +deny 95.167.157.156/30; +deny 95.167.162.236/30; +deny 95.167.162.76/30; +deny 95.167.176.0/23; +deny 95.167.2.4/30; +deny 95.167.21.104/29; +deny 95.167.213.0/24; +deny 95.167.29.104/29; +deny 95.167.4.168/29; +deny 95.167.5.64/28; +deny 95.167.5.80/28; +deny 95.167.54.76/30; +deny 95.167.59.244/30; +deny 95.167.64.20/30; +deny 95.167.68.216/29; +deny 95.167.69.116/30; +deny 95.167.70.136/29; +deny 95.167.70.176/28; +deny 95.167.70.32/28; +deny 95.167.72.140/30; +deny 95.167.72.204/30; +deny 95.167.72.48/30; +deny 95.167.74.136/29; +deny 95.167.74.180/30; +deny 95.167.76.160/27; +deny 95.167.99.48/28; +deny 95.173.128.0/19; +deny 95.173.128.0/20; +deny 95.173.144.0/20; +deny 95.53.248.0/29; +deny 95.54.193.80/28; + diff --git a/blacklists_updater_iptables.sh b/blacklists_updater_iptables.sh new file mode 100755 index 0000000..37d7268 --- /dev/null +++ b/blacklists_updater_iptables.sh @@ -0,0 +1,96 @@ +#!/bin/sh + +# Input files (generated by blacklists_updater_txt.sh) +blacklist_file="blacklists/blacklist.txt" +blacklist_v4_file="blacklists/blacklist-v4.txt" +blacklist_v6_file="blacklists/blacklist-v6.txt" + +# Output directory and files +iptables_output_dir="blacklists_iptables" +iptables_output_file="${iptables_output_dir}/blacklist.ipset" +iptables_v4_output_file="${iptables_output_dir}/blacklist-v4.ipset" +iptables_v6_output_file="${iptables_output_dir}/blacklist-v6.ipset" + +# Create iptables directory if it doesn't exist +mkdir -p "${iptables_output_dir}" + +# Function to generate ipset config from input file +generate_ipset_config() { + local input_file="$1" + local output_file="$2" + local ip_version="$3" + local set_name="$4" + local family="$5" + + # Count entries for hash size calculation + local count=$(wc -l < "${input_file}" | tr -d ' ') + local hashsize=$((count > 1024 ? count : 1024)) + local maxelem=$((count * 2)) + + # Generate ipset configuration with header + cat > "${output_file}" << EOF +# IPSet blacklist configuration ${ip_version} +# Auto-generated from $(basename ${input_file}) +# Last updated: $(date -u +"%Y-%m-%d %H:%M:%S UTC") +# +# Usage: +# 1. Load the ipset: +# ipset restore < $(basename ${output_file}) +# +# 2. Use with iptables/ip6tables: +# iptables -I INPUT -m set --match-set ${set_name} src -j DROP +# iptables -I FORWARD -m set --match-set ${set_name} src -j DROP +# +# 3. To flush/delete the set: +# ipset flush ${set_name} +# ipset destroy ${set_name} +# + +create ${set_name} hash:net family ${family} hashsize ${hashsize} maxelem ${maxelem} +EOF + + # Add entries for each network/IP + while IFS= read -r network; do + # Skip empty lines + [ -z "${network}" ] && continue + echo "add ${set_name} ${network}" >> "${output_file}" + done < "${input_file}" + + echo "✓ Generated ${ip_version}: ${output_file}" + echo " Total entries: ${count}" +} + +# Generate ipset configurations from blacklist files +generate_ipset_config "${blacklist_v4_file}" "${iptables_v4_output_file}" "(IPv4 only)" "blacklist-v4" "inet" +generate_ipset_config "${blacklist_v6_file}" "${iptables_v6_output_file}" "(IPv6 only)" "blacklist-v6" "inet6" + +# For mixed file, we need to create two sets (IPv4 and IPv6) as ipset doesn't support mixed families +cat > "${iptables_output_file}" << EOF +# IPSet blacklist configuration (mixed IPv4/IPv6) +# Auto-generated from $(basename ${blacklist_file}) +# Last updated: $(date -u +"%Y-%m-%d %H:%M:%S UTC") +# +# Usage: +# 1. Load the ipset: +# ipset restore < $(basename ${iptables_output_file}) +# +# 2. Use with iptables/ip6tables: +# iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP +# iptables -I FORWARD -m set --match-set blacklist-v4 src -j DROP +# ip6tables -I INPUT -m set --match-set blacklist-v6 src -j DROP +# ip6tables -I FORWARD -m set --match-set blacklist-v6 src -j DROP +# +# 3. To flush/delete the sets: +# ipset flush blacklist-v4 && ipset destroy blacklist-v4 +# ipset flush blacklist-v6 && ipset destroy blacklist-v6 +# + +EOF + +# Append both IPv4 and IPv6 sets to the mixed file +tail -n +2 "${iptables_v4_output_file}" | grep -E "^(create|add)" >> "${iptables_output_file}" +echo "" >> "${iptables_output_file}" +tail -n +2 "${iptables_v6_output_file}" | grep -E "^(create|add)" >> "${iptables_output_file}" + +echo "✓ Generated (mixed IPv4/IPv6): ${iptables_output_file}" +echo " Total entries: $(wc -l < "${blacklist_file}" | tr -d ' ')" diff --git a/blacklists_updater_nginx.sh b/blacklists_updater_nginx.sh new file mode 100755 index 0000000..3cab619 --- /dev/null +++ b/blacklists_updater_nginx.sh @@ -0,0 +1,52 @@ +#!/bin/sh + +# Input files (generated by blacklists_updater_txt.sh) +blacklist_file="blacklists/blacklist.txt" +blacklist_v4_file="blacklists/blacklist-v4.txt" +blacklist_v6_file="blacklists/blacklist-v6.txt" + +# Output directory and files +nginx_output_dir="blacklists_nginx" +nginx_output_file="${nginx_output_dir}/blacklist.conf" +nginx_v4_output_file="${nginx_output_dir}/blacklist-v4.conf" +nginx_v6_output_file="${nginx_output_dir}/blacklist-v6.conf" + +# Create nginx directory if it doesn't exist +mkdir -p "${nginx_output_dir}" + +# Function to generate nginx config from input file +generate_nginx_config() { + local input_file="$1" + local output_file="$2" + local ip_version="$3" + + # Generate nginx configuration with header + cat > "${output_file}" << EOF +# Nginx blacklist configuration ${ip_version} +# Auto-generated from $(basename ${input_file}) +# Last updated: $(date -u +"%Y-%m-%d %H:%M:%S UTC") +# +# Usage: Include this file in your nginx server or location block: +# include /path/to/$(basename ${output_file}); +# + +EOF + + # Add deny directives for each network/IP + while IFS= read -r network; do + # Skip empty lines + [ -z "${network}" ] && continue + echo "deny ${network};" >> "${output_file}" + done < "${input_file}" + + # Add final newline + echo "" >> "${output_file}" + + echo "✓ Generated ${ip_version}: ${output_file}" + echo " Total entries: $(grep -c "deny" "${output_file}")" +} + +# Generate nginx configurations from blacklist files +generate_nginx_config "${blacklist_file}" "${nginx_output_file}" "(mixed IPv4/IPv6)" +generate_nginx_config "${blacklist_v4_file}" "${nginx_v4_output_file}" "(IPv4 only)" +generate_nginx_config "${blacklist_v6_file}" "${nginx_v6_output_file}" "(IPv6 only)" diff --git a/blacklists_updater_txt.sh b/blacklists_updater_txt.sh new file mode 100755 index 0000000..7ff0577 --- /dev/null +++ b/blacklists_updater_txt.sh @@ -0,0 +1,29 @@ +#!/bin/sh + +outfile_wo_comments="blacklists/blacklist.txt" +outfile_w_comments="blacklists/blacklist_with_comments.txt" +blacklist_v4_file="blacklists/blacklist-v4.txt" +blacklist_v6_file="blacklists/blacklist-v6.txt" + +auto_black_ass="auto/black_ass.txt" + +black_names="uvd|umvd|fgup|grchc|roskomnad|federalnaya sluzhba|ufsb|zonatelecom|llc vk|vkontakte|ODNOKLASSNIKI|VKCOMPANY|mail.ru|mail-ru" +white_names="ruvds" + +grep -iE "${black_names}" auto/all-ru-asn.txt | grep -viE "${white_names}" | awk '{ print "# AS-Name: " $0 "\n" $1}' > ${auto_black_ass} +./network_list_from_as.py ${auto_black_ass} > ${outfile_w_comments} +./network_list_from_netname.py lists/ru-gov-netnames.txt >> ${outfile_w_comments} +grep -iE "${black_names}" auto/all-ru-ipv4.txt | grep -viE "${white_names}" | awk '{ print "# NET-Name: " $0 "\n" $1}' >> ${outfile_w_comments} +grep -iE "${black_names}" auto/ripe-ru-ipv4.txt | grep -viE "${white_names}" | awk '{ print "# NET-Name: " $0 "\n" $1}' >> ${outfile_w_comments} + +# Remove comments by sed to avoid flooding WHOIS servers +grep -v "#" ${outfile_w_comments} | sort | uniq > ${outfile_wo_comments} + +# Split blacklist into IPv4 and IPv6 +grep ':' "${outfile_wo_comments}" | sort | uniq > "${blacklist_v6_file}" +grep -v ':' "${outfile_wo_comments}" | sort | uniq > "${blacklist_v4_file}" + +echo "✓ Generated blacklist files" +echo " Mixed (IPv4/IPv6): ${outfile_wo_comments} ($(wc -l < "${outfile_wo_comments}" | tr -d ' ') entries)" +echo " IPv4 only: ${blacklist_v4_file} ($(wc -l < "${blacklist_v4_file}" | tr -d ' ') entries)" +echo " IPv6 only: ${blacklist_v6_file} ($(wc -l < "${blacklist_v6_file}" | tr -d ' ') entries)" diff --git a/requirements.sh b/requirements.sh index 564617a..ca2acf9 100755 --- a/requirements.sh +++ b/requirements.sh @@ -1,3 +1,3 @@ #!/bin/sh -pip install -r requirements.txt +pip3 install -r requirements.txt --break-system-packages