Update 2026.03.29 13:11:56

* Update 2026.03.01 01:07:56

* Update 2026.03.01 04:25:44

* Update 2026.03.01 06:01:46

* Update 2026.03.01 06:15:37

* Update 2026.03.01 06:23:34

* Update 2026.03.01 07:44:01

* Update 2026.03.01 08:02:08

* Update 2026.03.01 08:06:50

---------

Co-authored-by: C24Be <C24Be@github.com>

.github/actions/gitPush/action.yaml

@@ -10,7 +10,7 @@ runs:
           git config --global user.email "${{ env.REPO_OWNER }}@github.com"
           if [ -n "${{ env.CUSTOM_BRANCH }}" ]; then
               git checkout "${daily_branch}" 2>/dev/null || git checkout -b "${daily_branch}"
-              git push --set origin "${daily_branch}"
+              git push --set-upstream origin "${daily_branch}"
           fi
           git add ${{ env.PUSH_FILES }}
           git diff --staged --quiet || CHANGED=true

.github/actions/gitReset/action.yaml

@@ -8,9 +8,9 @@ runs:
           if [ -n "${{ env.CUSTOM_BRANCH }}" ]; then
               git reset --hard
               git clean -fdx
-              git checkout "${daily_branch}"
-              git pull origin "${daily_branch}"
-              git push --set origin "${daily_branch}"
+              git checkout "${daily_branch}" 2>/dev/null || git checkout -b "${daily_branch}"
+              git pull origin "${daily_branch}" || true
+              git push --set-upstream origin "${daily_branch}"
           fi
           git reset --hard
           git clean -fdx

.github/workflows/resolve_networks.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           fetch-depth: 0                         # this is required to fetch all history for all branches and tags
           token: ${{ env.GH_PAT }}
-          ref: ${{ github.branch }}
+          ref: ${{ github.ref_name }}
       - uses: ./.github/actions/gitReset
         env:
           CUSTOM_BRANCH: true
@@ -53,7 +53,7 @@ jobs:
         with:
           fetch-depth: 0                         # this is required to fetch all history for all branches and tags
           token: ${{ env.GH_PAT }}
-          ref: ${{ github.branch }}
+          ref: ${{ github.ref_name }}
       - uses: ./.github/actions/gitReset
         env:
           CUSTOM_BRANCH: true
@@ -80,7 +80,7 @@ jobs:
         with:
           fetch-depth: 0                         # this is required to fetch all history for all branches and tags
           token: ${{ env.GH_PAT }}
-          ref: ${{ github.branch }}
+          ref: ${{ github.ref_name }}
       - uses: ./.github/actions/gitReset
         env:
           CUSTOM_BRANCH: true

.github/workflows/update_blacklists.yml

@@ -32,6 +32,8 @@ jobs:
       - run: ./blacklists_updater_txt.sh
       - run: ./blacklists_updater_nginx.sh
       - run: ./blacklists_updater_iptables.sh
+      - run: ./blacklists_updater_nftables.sh
+      - run: ./blacklists_updater_routes.sh
       - uses: ./.github/actions/gitPush
         env:
-          PUSH_FILES: blacklists/ blacklists_nginx/ blacklists_iptables/
+          PUSH_FILES: blacklists/ blacklists_nginx/ blacklists_iptables/ blacklists_nftables/ blacklists_route/

.github/workflows/update_nftables.yml

@@ -0,0 +1,33 @@
+name: Update nftables Blacklists
+
+on:
+  schedule:
+    - cron: '30 2 * * *'  # Daily at 02:30 UTC
+  workflow_dispatch:
+
+jobs:
+  update-nftables:
+    runs-on: ubuntu-latest
+    
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v4
+      
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: '3.x'
+        
+    - name: Generate nftables blacklists
+      run: |
+        chmod +x blacklists_updater_nftables.sh
+        ./blacklists_updater_nftables.sh
+        
+    - name: Commit and push if changed
+      run: |
+        git config --local user.email "github-actions[bot]@users.noreply.github.com"
+        git config --local user.name "github-actions[bot]"
+        git add blacklists_nftables/
+        git diff --quiet && git diff --staged --quiet || \
+          (git commit -m "Auto-update nftables blacklists [skip ci]" && git push)
+

README.md

@@ -2,14 +2,22 @@
 
 ### Blacklists are updated daily!
 
+> [!IMPORTANT]
+> A very important feature has been added: dedicated lists of VK Cloud / VK networks that can be used to block **OUTGOING** traffic from your server (iptables/ipset and nftables formats are available).
+> This can help reduce the risk of Messenger MAX being used to compromise your VPN server.
+> The best security option is to avoid installing Messenger MAX at all on a phone where VPN access is configured.
+
 This repository contains Python scripts that allow you to retrieve network lists based on either an Autonomous System (AS) name or a Network name. Also you can download and parse the whole RIPE database to get information about Networks for the further analysis.
 
+## Important Links
+
 **Ready-to-use blacklists in multiple formats:**
 
 - [Text blacklists in `blacklists/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists) - Plain text format with IPv4/IPv6 separation
 - [Nginx configurations in `blacklists_nginx/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists_nginx) - Ready to include in your nginx config
 - [IPTables/IPSet files in `blacklists_iptables/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists_iptables) - Optimized for iptables with ipset
-- [Other network and ASN lists in `auto/`](https://github.com/C24Be/AS_Network_List/tree/main/auto) - Comprehensive Russian network data
+- [nftables files in `blacklists_nftables/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists_nftables) - Ready-to-load sets and rules for nftables
+- [Linux route files in `blacklists_route/`](https://github.com/C24Be/AS_Network_List/tree/main/blacklists_route) - VK route blackholes to loopback (IPv4/IPv6)
 
 ## Files and features
 
@@ -20,12 +28,16 @@ This repository contains Python scripts that allow you to retrieve network lists
 - `get_info_from_ripe.py`: Retrieves information about Russian AS numbers and Networks from RIPE database for the further analysis.
 - `get_description.py`: Retrieves network names, AS names and organisation names from RIPE. Updates the lists in the folder `auto/`.
 - `parse_ripe_db.py`: Parses the whole RIPE database to get information about Networks for the further analysis.
+- `generate_nft_blacklist.py`: Takes text blacklist on the input and generates nftables config with sets.
+- `check_nft_blacklist.py`: Checks IPv4/IPv6 address against generated nftables config.
 
 ### Blacklist Generators
 
 - `blacklists_updater_txt.sh`: Generates text-based blacklists with IPv4/IPv6 separation
 - `blacklists_updater_nginx.sh`: Generates nginx configuration files with deny directives
 - `blacklists_updater_iptables.sh`: Generates ipset configuration files for iptables/ip6tables
+- `blacklists_updater_nftables.sh`: Generates nftables blacklist files (mixed/v4/v6 and VK-specific)
+- `blacklists_updater_routes.sh`: Generates Linux route files to send VK networks to loopback (`127.0.0.1` / `::1`)
 
 ### Generated Blacklists
 
@@ -45,17 +57,34 @@ This repository contains Python scripts that allow you to retrieve network lists
 
 **IPTables/IPSet Format** (`blacklists_iptables/` folder):
 
-- `blacklist.ipset`: IPSet configuration for mixed IPv4/IPv6 (**daily generated**)
 - `blacklist-v4.ipset`: IPSet configuration for IPv4 only (**daily generated**)
 - `blacklist-v6.ipset`: IPSet configuration for IPv6 only (**daily generated**)
+- `blacklist-vk-v4.ipset`: IPSet configuration for VK-only IPv4 networks (**daily generated**)
+- `blacklist-vk-v6.ipset`: IPSet configuration for VK-only IPv6 networks (**daily generated**)
 - `README.md`: Complete usage documentation for iptables integration
 
+**nftables Format** (`blacklists_nftables/` folder):
+
+* `blacklist.nft`: nftables set definitions for mixed IPv4/IPv6 (**daily generated**)
+* `blacklist-v4.nft`: nftables configuration for IPv4 only (**daily generated**)
+* `blacklist-v6.nft`: nftables configuration for IPv6 only (**daily generated**)
+* `blacklist-vk.nft`: nftables set definitions for VK-only mixed IPv4/IPv6 (**daily generated**)
+* `blacklist-vk-v4.nft`: nftables configuration for VK-only IPv4 networks (**daily generated**)
+* `blacklist-vk-v6.nft`: nftables configuration for VK-only IPv6 networks (**daily generated**)
+* `README.md`: Complete usage documentation for nftables integration
+
+**Linux Routes Format** (`blacklists_route/` folder):
+
+* `blacklist-vk-v4.routes`: IPv4 routes for VK-only networks to `127.0.0.1` via `lo` (**daily generated**)
+* `blacklist-vk-v6.routes`: IPv6 routes for VK-only networks to `::1` via `lo` (**daily generated**)
+
+
 ### Reference Lists
 
 **Contributors are welcome!**
 
 - `lists/ru-gov-netnames.txt`: A list of network names associated with the Russian government.
-- `lists/ru-gov-asns.txt`: A list of AS numbers associated with the Russian government.
+- ASN candidates used for blacklists are derived automatically from `auto/all-ru-asn.txt`.
 
 ### Auto-Generated Data
 
@@ -83,11 +112,53 @@ wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_ngi
 **For IPTables/IPSet:**
 
 ```bash
-# Download and load into ipset
-wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_iptables/blacklist.ipset
-ipset restore < blacklist.ipset
-iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP
-ip6tables -I INPUT -m set --match-set blacklist-v6 src -j DROP
+# Download and load IPv4/IPv6 sets into ipset
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_iptables/blacklist-v4.ipset
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_iptables/blacklist-v6.ipset
+ipset restore < blacklist-v4.ipset
+ipset restore < blacklist-v6.ipset
+iptables -I INPUT -m set --match-set blacklist-v4 src -m conntrack --ctstate NEW -j DROP
+ip6tables -I INPUT -m set --match-set blacklist-v6 src -m conntrack --ctstate NEW -j DROP
+```
+
+**For nftables:**
+````bash
+# Download and load nftables sets
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nftables/blacklist.nft
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nftables/blacklist-v4.nft
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nftables/blacklist-v6.nft
+sudo nft -f blacklist.nft
+sudo nft -f blacklist-v4.nft
+sudo nft -f blacklist-v6.nft
+
+# Protect VM from incoming blacklist sources
+sudo nft add chain inet filter input '{ type filter hook input priority 0; policy accept; }'
+sudo nft add rule inet filter input ip saddr @blacklist_v4 counter reject
+sudo nft add rule inet filter input ip6 saddr @blacklist_v6 counter reject
+
+# VK-only outbound blocking for VPN clients via NAT/FORWARD
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nftables/blacklist-vk.nft
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nftables/blacklist-vk-v4.nft
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nftables/blacklist-vk-v6.nft
+sudo nft -f blacklist-vk.nft
+sudo nft -f blacklist-vk-v4.nft
+sudo nft -f blacklist-vk-v6.nft
+sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'
+sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip daddr @blacklist_vk_v4 counter reject
+sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip6 daddr @blacklist_vk_v6 counter reject
+
+# View the loaded rules
+sudo nft list ruleset
+````
+
+**For Linux Routes (VK loopback blackhole):**
+
+```bash
+# Download and apply VK route files
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_route/blacklist-vk-v4.routes
+wget https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_route/blacklist-vk-v6.routes
+sudo sh blacklist-vk-v4.routes
+sudo sh blacklist-vk-v6.routes
 ```
 
 **For Custom Applications:**
@@ -139,16 +210,16 @@ See the README files in each folder for detailed usage instructions.
     ./network_list_from_as.py AS61280
     ```
 
-2. Run the script with a URL to a file in a GitHub repository as an argument:
+2. Run the script with a URL to a file with one ASN per line:
 
     ```bash
-    ./network_list_from_as.py https://github.com/C24Be/AS_Network_List/blob/main/lists/ru-gov-asns.txt
+    ./network_list_from_as.py https://example.com/asns.txt
     ```
 
     Or better use the raw file link:
 
     ```bash
-    ./network_list_from_as.py https://raw.githubusercontent.com/C24Be/AS_Network_List/main/lists/ru-gov-asns.txt
+    ./network_list_from_as.py https://example.com/asns-raw.txt
     ```
 
 3. To display a help message, use the `-h` or `--help` switch:
@@ -183,6 +254,20 @@ See the README files in each folder for detailed usage instructions.
     ./network_list_from_netname.py --help
     ```
 
+### `generate_nft_blacklist.py`
+1. Generate nftables config from blacklist:
+
+    ```bash
+    ./generate_nft_blacklist.py blacklists/blacklist.txt blacklist.nft
+    ```
+
+### `check_nft_blacklist.py`
+1. Check IP address against generated config:
+
+    ```bash
+    ./check_nft_blacklist.py blacklist.nft 77.37.166.239
+    ```
+
 ## Screenshots
 
 <img width="320" alt="image" src="https://github.com/C24Be/AS_Network_List/assets/153936414/71bd0ed4-0e9b-42f0-8e91-01964ea9b8e1">
@@ -199,16 +284,6 @@ This repository uses GitHub Actions to automatically update blacklists:
 
 All blacklists are automatically regenerated and committed to ensure you always have the latest data.
 
-## Blacklist Format Comparison
-
-| Format | Best For | Performance | Ease of Use | File Size |
-|--------|----------|-------------|-------------|-----------|
-| **Text** | Custom scripts, analysis | N/A | ⭐⭐⭐⭐⭐ | Small |
-| **Nginx** | Web servers, reverse proxies | Good | ⭐⭐⭐⭐ | Medium |
-| **IPSet** | Firewalls, large-scale blocking | Excellent | ⭐⭐⭐ | Medium |
-
-**Recommendation**: Use IPSet for firewall-level blocking (best performance), Nginx for web application layer, and text format for custom integrations.
-
 ## Additional information
 
 - [RIPE DB Inetnum](https://ftp.ripe.net/ripe/dbase/split/ripe.db.inetnum.gz)

auto/all-ru-ipv6.txt

@@ -53,6 +53,7 @@
 2001:678:85c::/48 GIVC (Main Center of Information and Computing Ministry of culture of Russian Federation)
 2001:678:8f0::/48 RU-PDV (Podolskii Dmitrii Vladimirovich)
 2001:678:8fc::/48 RU-ROSNIIROS-20190111 (JSC Goznak)
+2001:678:978::/48 PrivateNet (Yanislav Basiuk)
 2001:678:99c::/48 CZ-VISSADO-20190515 (Mediasvyaz Ltd.)
 2001:678:9c4::/48 BCC (JSC Business-center Capital)
 2001:678:9d0::/48 RU-RETNNET-20190621 (LLC Zenit-Arena)
@@ -61,6 +62,7 @@
 2001:678:a60::/48 RU-ONGNETPLUS-20190411 (OngNet Plus LLC)
 2001:678:a70::/48 CZ-VISSADO-20190425 (VostokMediaSvyaz Ltd.)
 2001:678:ab0::/48 PlanetaTelekom (Kurochkin Evgeniy Anatolievich)
+2001:678:ac0::/48 CH-SECUREBIT-20260106 (Artur Zagidullin)
 2001:678:b3c::/48 RU-DSP-20191017 (INVITRO-Information technology LLC)
 2001:678:b40::/48 ORG-ITOA1-RIPE (Tsyapa Oleg Anatolyevich)
 2001:678:b48::/48 LEMANAPRO-NET (Le Monlid LLC)
@@ -84,7 +86,6 @@
 2001:678:e2c::/48 DWDM-RU-V6-NET (DWDM.RU llc)
 2001:678:e30::/48 virtaldc-ipv6-backbone (Dmitrii Vladimirovich Malkov)
 2001:678:e84::/48 RU-MSP2018-20201023 (VIP-TELECOM LLC)
-2001:678:ee4::/48 IP-Petrosyan-Maksim-Markslenovicht (IP Petrosyan Maksim Markslenovich)
 2001:678:ee8::/48 TRC-BRT-IPV6 (Teleradiocompany Bytradiotehnika Ltd.)
 2001:678:eec::/48 NPI-TU (Federal State Budgetary Educational Institution of Higher Education "M.I.Platov South-Russian State Polytechnic University (NPI)")
 2001:678:f38::/48 RU-RETNNET-20210504 (Traffic Ltd)
@@ -93,8 +94,7 @@
 2001:678:1024::/48 SIRENATRAVEL-NETv6 (Sirena Travel AO)
 2001:678:1034::/48 RU-ELKOMA (Elkoma LLC)
 2001:678:1058::/48 CZ-VISSADO-20250305 (GP Internet Ltd.)
-2001:678:107c::/48 RU-LLCBROADCASTING (LLC TRC "KTV Plus")
-2001:67c:20::/48 ABSOLYT-NET (Limited liability company Absolyt)
+2001:67c:20::/48 ABSOLYT-NET (Limited liability company Absolut)
 2001:67c:84::/48 MANNET-6NET (MAN net Ltd.)
 2001:67c:e8::/48 RU-NEMEROV (Nemerov Evgeniy Vladimirovish PE)
 2001:67c:100::/48 RU-DINET-20210819 (Limited Liability Company "R-Business Svyaz")
@@ -116,6 +116,7 @@
 2001:67c:5c4::/48 MBITCITY-NET (Mbit City Ltd.)
 2001:67c:614::/48 RU-INDATA-20160728 (FOUNDATION FOR DEVELOPMENT OF NETWORKING TECHNOLOGIES "INDATA")
 2001:67c:62c::/48 PRK-V6NET (JSC Trading house Perekriostok)
+2001:67c:650::/48 RU-HYPERNET-20260210 (JSC ALIAS)
 2001:67c:664::/48 BALTSOYA-AS (CJSC Sodruzhestvo Soya)
 2001:67c:698::/48 AIRKHV (JSC "Khabarovsky airport")
 2001:67c:6a0::/48 RSCC (Federal State Unitary Enterprise "Russian Satellite Communication Company")
@@ -130,13 +131,13 @@
 2001:67c:79c::/48 AVANTEL (JSC Avantel)
 2001:67c:7b4::/48 ORG-IT77-RIPE (INTERNET TECHNOLOGIES LLC)
 2001:67c:86c::/48 RU-TUI-20210915 (TT-Travel LLC)
-2001:67c:878::/48 CZ-NETART-20240808 (OOO MMTR Technologii)
 2001:67c:8d8::/48 CZ-VISSADO-20211206 (STM Ltd.)
 2001:67c:900::/48 RU-MTU-20220121 (REGIONAL STATE STATE INSTITUTION "CORPORATION FOR DEVELOPMENT OF INTERNET TECHNOLOGIES - MULTIFUNCTIONAL CENTRE FOR PROVIDING STATE AND MUNICIPAL SERVICES IN THE ULYANOVSK REGION")
 2001:67c:944::/48 AtoS-IT-Solutions-and-Services-LLC (AtoS IT Solutions and Services LLC)
 2001:67c:948::/48 RU-OPTIBIT-20220218 (Mobilon Telecommunications LLC)
 2001:67c:95c::/48 RU-RTK-20220223 (JSC COMMERCIAL BANK "KHLYNOV")
 2001:67c:a5c::/48 RU-GSYSTEM-20220810 (LLC OZON BANK)
+2001:67c:a80::/48 Foton-net (Foton Company Ltd)
 2001:67c:ac4::/48 RU-SITENET-20220928 (Ministry of Finance of the Sakhalin region)
 2001:67c:b00::/48 VMI-NET6 (OOO NPO VMI)
 2001:67c:b18::/48 LITE-HOST (Rusachenko Evgenii Sergeevich)
@@ -159,7 +160,7 @@
 2001:67c:f64::/48 AB-GAGRATEL (Gagra Telecom LLC)
 2001:67c:f88::/48 RU-SIGNALTELECOM (Signal-Telecom LLC)
 2001:67c:f98::/48 CZ-VISSADO-20241119 (Tecom Ltd.)
-2001:67c:fa0::/48 CZ-NETART-20241122 (Svyaz JSC)
+2001:67c:fa0::/48 SVYAZ6-NET (Svyaz Ltd)
 2001:67c:fb0::/48 FAITID-NETWORK (Foundation for Assistance for Internet Technologies and Infrastructure Development)
 2001:67c:fb4::/48 RU-KIPREY (Kiprey JSC)
 2001:67c:fcc::/48 RU-SERGIENKO-20241220 (KAMETA LLC)
@@ -188,7 +189,6 @@
 2001:67c:1484::/48 RU-DOMISHKO (Inweb Ltd.)
 2001:67c:1494::/48 ORG-TCKL3-RIPE (TELECOMMUNICATION COMPANY KAMA - LINK LLC.)
 2001:67c:14ac::/48 RU-RELCOMGROUP-20210331 (Odintsovskaya teploset, JSC)
-2001:67c:14b4::/48 BITRACE-NET (Bitrace OOO)
 2001:67c:1574::/48 BELRTS-IP-V6 (Regional TeleSystem Ltd)
 2001:67c:1584::/48 RU-ERTH-CLOUD-20230403 (JSC "ER-Telecom Holding")
 2001:67c:15d0::/48 RU-SUNTEL (OOO Suntel)
@@ -285,12 +285,13 @@
 2001:67c:2e98::/48 RU-RTK-20151005 (FGBOU VO Saratov State Medical University named after V.I.Razumovsky)
 2001:67c:2e9c::/48 SANTEKHKOMPLEKT (LTD Santekhkomplekt)
 2001:67c:2ec8::/48 RU-RTK-20151021 (RusAccreditation. Federal Service for accreditation)
-2001:67c:2ee0::/48 VIKSCOM-IPV6-NET (Vikscom Ltd.)
+2001:67c:2ee0::/48 VIKS-NET (Vikscom Ltd.)
 2001:67c:2f90::/48 SOFTBUILD (SOFTBUILD LLC)
 2001:67c:2fd4::/48 ORG-IO52-RIPE (IPSvyaz OOO)
 2001:6d0::/32 RU-MSK-IX-20010219 (Join-stock company "Internet Exchange"MSK-IX")
 2001:7f8:5::/48 RU-KTVB-NETWORK-20160125 (Truenetwork LLC)
 2001:7f8:20::/48 RU-MSK-IX (Join-stock company "Internet Exchange"MSK-IX")
+2001:7f8:55::/48 UA-PROMTELECOM (JSC Promtelecom)
 2001:7f8:5c::/48 RU-IXCELLERATE-20160224 (IXcellerate LLC)
 2001:7f8:6f::/48 KRD-IX-NET (IpNetcom LLC)
 2001:7f8:70::/48 RBIXP (JSC "Ufanet")
@@ -304,15 +305,15 @@
 2001:7f8:a7::/48 BAIKAL-IX-NET-v6 (LLC Zero Kilometer)
 2001:7f8:ac::/48 RU-OPTIBIT-20160922 (Optibit LLC)
 2001:7f8:c8::/48 RU-DREAMNET-20180514 (Weacom Ltd)
-2001:7f8:c9::/48 RU-CHTE-20180525 (Chitatehenergy JSC)
+2001:7f8:c9::/48 RU-CHTE-20180525 (JOINT-STOCK COMPANY "MOSCOW ENERGY COMMUNICATION NODE")
 2001:7f8:e6::/48 RU-PITER-IX-SPB (Piter-IX Co. Ltd.)
 2001:7f8:eb::/48 RU-PITER-IX-MSK (Piter-IX Co. Ltd.)
 2001:7f8:ee::/48 RU-LINXDATACENTER-20200218 (Svyaz VSD LLC)
 2001:7f8:f1::/48 RU-RCN-20200415 (RECONN LLC)
+2001:7f8:100::/48 RU-KTVB-NETWORK-20251217 (Lightcom LLC)
 2001:7f8:13d::/48 RU-MEGAFON-20221111 (PJSC MegaFon)
 2001:a58::/32 RU-ICT-20090408 (Information and Communication Technologies LLC)
 2001:b08::/32 RU-NIKS-20030214 (SCIENTIFIC RESEARCH INSTITUTE FOR SYSTEM ANALYSIS OF THE NATIONAL RESEARCH CENTRE "KURCHATOV INSTITUTE")
-2001:1428::/32 RU-DOMTEHNIKI-NET-20100427 (Dom Tehniki Ltd)
 2001:1b00::/32 RU-SOVINTEL-20040413 (PJSC "Vimpelcom")
 2001:1bb0::/32 RU-RTCOMM-20101118 (JSC RTComm.RU)
 2001:3b40::/29 RU-HTEL-20240919 (Vadim Druzev)
@@ -328,7 +329,7 @@
 2a00:eba::/31 RU-STACK-20100219 (StackNet Service, LLC)
 2a00:ebc::/30 RU-STACK-20100219 (StackNet Service, LLC)
 2a00:f00::/29 RU-MTU-20081124 (MTS PJSC)
-2a00:f08::/32 RU-WILAND-20081124 (Wiland Ltd)
+2a00:f08::/32 RU-TRUNKMOBILE-20081124 (TrunkMobile JSC)
 2a00:f30::/32 RU-QUANTUM-20081127 (Quantum CJSC)
 2a00:1020::/32 RU-SEVEREN-20090619 (JSC "Severen-Telecom")
 2a00:1078::/32 RU-STROYTECHSERVICE-20090630 (Stroytechservice LLC)
@@ -344,7 +345,7 @@
 2a00:13f8::/29 RU-MTU-20090922 (MTS PJSC)
 2a00:1410::/32 RU-RSK-20090924 ("Region Svyaz Konsalt" LLC)
 2a00:1440::/32 RU-KVANT-TELECOM-20091005 (JSC KVANT-TELEKOM)
-2a00:1468::/32 RU-BIGTELECOM-20091007 (BIG TELECOM JSC)
+2a00:1468::/32 RU-BIGTELECOM-20091007 (Big Telecom JSC)
 2a00:14d0::/29 RU-RAID-20091014 (JSC "ER-Telecom Holding")
 2a00:15f8::/32 RU-MASTERHOST-20091105 (LLC "MASTERHOST")
 2a00:1640::/32 RU-RTK-20091111 (PJSC Rostelecom)
@@ -374,7 +375,6 @@
 2a00:1dc8::/32 RU-MCNTELECOM-20100322 (MSN Telecom LLC)
 2a00:1e10::/29 RU-POSTLTD-20100326 (OOO "Post ltd")
 2a00:1e48::/32 RU-TRANSTELECOM-20100401 (Joint Stock Company TransTeleCom)
-2a00:1e68::/30 RU-FOTONTELECOM-20100407 (Foton Telecom CJSC)
 2a00:1e88::/32 RU-RTK-20100408 (PJSC Rostelecom)
 2a00:1ec8::/29 RU-ROSPRINT-20100412 (LLC Orange Business Services)
 2a00:1f70::/32 RU-RCN-20100420 (RECONN LLC)
@@ -478,7 +478,7 @@
 2a00:b940::/32 RU-IGRA-SERVICE-20150520 (Igra-Service LLC)
 2a00:bcc0::/32 RU-ELIT-TV-20160601 (Viter Evgeniy Vasilevich)
 2a00:bd40::/32 RU-INEWS-20120314 (INEWS LLC)
-2a00:bdc0::/29 RU-VKONTAKTE-20120314 (VKontakte Ltd)
+2a00:bdc0::/29 RU-VKONTAKTE-20120314 (LLC VK)
 2a00:be00::/29 RU-MASTERTEL-20110125 (JSC Mastertel)
 2a00:be20::/32 RU-VERMONT-IT-20130725 (Vermont-IT Limited Liability Company)
 2a00:bf00::/32 RU-CT-C-20110217 ("Computational technologies - consulting" LLC)
@@ -688,7 +688,6 @@
 2a02:2548::/32 RU-UNIVERSUMBIT-20101005 (Universum bit Ltd.)
 2a02:2560::/32 RU-TRANSTELECOM-20101005 (Joint Stock Company TransTeleCom)
 2a02:2568::/32 RU-RIALCOM-20101006 (Rial Com JSC)
-2a02:25a0::/32 RU-YAMALTELECOM-20101008 (JSC"Yamaltelekom")
 2a02:25e0::/32 RU-RTK-20101012 (PJSC Rostelecom)
 2a02:2620::/32 RU-ISKRATELECOM-20101013 (Iskratelecom JSC)
 2a02:2648::/29 RU-SIGNAL-20101014 (Signal Service LLC)
@@ -771,6 +770,7 @@
 2a02:de80::/29 RU-WEST-CALL-20121108 (OOO WestCall Ltd.)
 2a02:e5c0::/29 RU-K2INTEGRATION-20121121 (K2 Integration JSC)
 2a02:e620::/30 RU-INTERNET-HOSTING-20121129 (Internet-Hosting Ltd)
+2a02:e700::/32 RU-SHANTORA-20251222 (Alexey Andreevich Shantora)
 2a02:e840::/29 RU-TRANSTELECOM-20121123 (Joint Stock Company TransTeleCom)
 2a02:e880::/29 RU-MATRIXTELECOM-20121123 (JSC Avantel)
 2a02:eb00::/29 RU-QWARTA-20121129 (QWARTA LLC)
@@ -832,7 +832,6 @@
 2a03:4700::/32 RU-KMW-20110401 (Stavtelecom LLC)
 2a03:4900::/32 RU-REGRU-20110401 ("Domain names registrar REG.RU", Ltd)
 2a03:4d00::/32 RU-NEMEROV-20110404 (Nemerov Evgeniy Vladimirovish PE)
-2a03:4da0::/32 RU-NPFROI-20141103 (LLC "Nauchno proizvodstvennaya Firma "Raspredelennaya Obrabotka Informacii")
 2a03:4ec0::/32 RU-AMOBILE-20121108 (JV A-Mobile Ltd.)
 2a03:4fc0::/32 RU-MODUS333-20150513 (MODUS LLC)
 2a03:5040::/29 RU-RAID-20121109 (JSC "ER-Telecom Holding")
@@ -849,7 +848,7 @@
 2a03:58c0::/32 RU-KAMENSKTEL-20121113 (Closed Joint Stock Company Radiotelephone)
 2a03:5a00::/29 RU-LEADERTELECOM-20110204 (LeaderTelecom Ltd.)
 2a03:5a60::/32 RU-LINENEW-20141125 (Limited liability company "New Line")
-2a03:5a80::/32 RU-WILAND-20110915 (Wiland Ltd)
+2a03:5a80::/32 RU-TRUNKMOBILE-20110915 (TrunkMobile JSC)
 2a03:5b80::/32 RU-TRANSTELECOM-20140616 (Joint Stock Company TransTeleCom)
 2a03:5c80::/32 RU-TELEMAKS-20110915 (TeleMaks Ltd)
 2a03:5ca0::/32 RU-GTSS-20141128 (GeoTelecommunications LLC)
@@ -874,7 +873,7 @@
 2a03:7ca0::/29 RU-MAINACC-20150213 (Ivan Bulavkin)
 2a03:7d80::/32 RU-GKUMO-20151012 (GKU MO "MOC IKT")
 2a03:7da0::/29 RU-MAINACC-20150216 (Ivan Bulavkin)
-2a03:7dc0::/32 RU-FANNET-20121130 (FANNET TELECOM LLC)
+2a03:7dc0::/32 RU-FANNET-20121130 (Dom-TV LLC)
 2a03:7f00::/32 RU-M9COM-20110407 (M9 COM LTD)
 2a03:7f60::/29 RU-MAINACC-20150217 (Ivan Bulavkin)
 2a03:8060::/32 RU-ABS-20150217 (Active business systems Ltd.)
@@ -905,7 +904,7 @@
 2a03:a7c0::/32 RU-SINTLTD-20121220 (Limited Company "SiNT")
 2a03:a840::/32 RU-MSNET-20121221 (Multiservice Networks Ltd.)
 2a03:a9c0::/29 RU-DOVECOM-20121221 (Dovecom LLC)
-2a03:aa00::/32 RU-ZELENAYA-20110207 (OOO SET)
+2a03:aa00::/32 RU-MTU-20110207 (MTS PJSC)
 2a03:aa80::/32 RU-KUBTEL-20111020 (KUBAN-TELECOM Ltd.)
 2a03:af60::/32 RU-MGTS-20160620 (PJSC Moscow city telephone network)
 2a03:b0e0::/32 RU-ZAODS-20160804 (JSC "Ufanet")
@@ -1023,14 +1022,14 @@
 2a04:ef00::/29 RU-SPRINT-20150402 (Sprint Ltd)
 2a04:f240::/29 RU-RUSPHONE-20140702 (LLC "ER-Telecom Moscow")
 2a04:f800::/29 RU-MIRANDA-MEDIA-20140716 (Miranda-Media Ltd)
-2a04:fa00::/29 RU-RT27-20210908 (Rustel LLC)
-2a05:440::/29 RU-SIUNOC-20210908 (Sysoeva Irina Yurevna)
+2a04:fa00::/29 RU-AU-20210908 (Auction LLC)
 2a05:540::/29 RU-NOCRU-20140804 (LLC "Internet Tehnologii")
-2a05:b80::/29 RU-SERVER-V-ARENDY-20140812 (LLC "Server v arendy")
+2a05:b80::/29 RU-IT-BASIS-20140812 (LLC IT BASIS)
 2a05:1100::/29 RU-V-TELL-GT-20140819 (Global Telecom LLC)
 2a05:1700::/29 RU-RELINK-20140826 (Relink LTD)
 2a05:1880::/29 RU-EFKO-20210908 (Management Company EFKO JSC)
 2a05:1e40::/29 RU-AU-20181002 (Auction LLC)
+2a05:25c0::/29 RU-INATEL-KRASNOPEREKOPSK-20251218 (INATEL-KRASNOPEREKOPSK Ltd.)
 2a05:2940::/29 RU-ZTK-20160426 (Secure Telecommunication LLC)
 2a05:29c0::/29 RU-KOMPEATELECOM-20140917 (Kompeatelecom Ltd.)
 2a05:2b80::/29 RU-DT-NET-20180614 (Dubrovka Telecom LLC)
@@ -1073,7 +1072,6 @@
 2a05:9c00::/29 RU-TIMER-20180618 (Timer, LLC)
 2a05:a000::/29 RU-RCNTEC-20150113 (RCNTEC LLC)
 2a05:a080::/29 RU-BWTELE-20150113 (OOO Mango Telecom)
-2a05:a200::/29 RU-FARTEL-20150114 (Fartel Ltd)
 2a05:a400::/29 RU-OBIT-20150527 ("OBIT" Ltd.)
 2a05:a680::/29 RU-OPTILINK-20150119 (Optilink Ltd)
 2a05:a700::/29 RU-OTC-20150119 (JSC OTC)
@@ -1119,7 +1117,6 @@
 2a06:43c0::/29 RU-A-N-T-20150703 (Alpha Net Telecom Ltd)
 2a06:4480::/29 RU-WEBOGROUP-20150706 (WEBO LLC)
 2a06:4680::/29 RU-COMFORT-20150707 (Comfort XXI Century Ltd.)
-2a06:47c0::/29 RU-UNIVER-20150707 (University Telecommunications Ltd.)
 2a06:49c0::/29 RU-IMPERATOR-20160418 (Imperator LLC)
 2a06:4c40::/29 RU-EUTELSAT-20150710 (Eutelsat Networks LLC)
 2a06:50c0::/32 RU-TIS-DIALOG-20200108 (TIS Dialog LLC)
@@ -1210,7 +1207,6 @@
 2a07:da80::/29 RU-IPDOLIN-20180528 (Yury Dolin)
 2a07:dc40::/32 RU-ORN-20180703 ("Resurs-Svyaz" Ltd)
 2a07:dc80::/29 RU-IPDOLIN-20180528 (Yury Dolin)
-2a07:dcc0::/29 RU-SISTEMY-SVYAZI-20180703 (Sistemy Svyazi Llc)
 2a07:e2c0::/29 RU-PKPFERRIT-20180704 (PKP Ferrit LLC)
 2a07:e380::/29 RU-VOLNA-20180529 (KTK TELECOM LLC)
 2a07:e5c0::/29 RU-MAINACC-20180704 (Ivan Bulavkin)
@@ -1229,6 +1225,7 @@
 2a09:680::/29 RU-IMASTER-20181127 (Gorodskaya elektronnaya svyaz Ltd)
 2a09:c80::/29 RU-OPTIMASET-20181127 (OOO Optimaset)
 2a09:d80::/29 RU-VPSVILLE1-20181127 (LLC Vpsville)
+2a09:1180::/29 RU-IPADDRESS-20251204 (i7 LLC)
 2a09:1280::/29 RU-KMISAEV-20181128 (Isaev Kamil Magomedovich)
 2a09:1940::/29 RU-RCK-20190116 (Torgovyi dom Mashinostroitelnye zavody LLC)
 2a09:1a40::/29 RU-TVINNET-20190116 (OOO TeleMontag)
@@ -1287,7 +1284,7 @@
 2a09:b3c0::/29 RU-TELEMIR-20190308 (LLC Telemir)
 2a09:b680::/29 RU-VPSVILLE1-20181218 (LLC Vpsville)
 2a09:ba40::/29 RU-TELECOM-20190312 (Telenet LLC)
-2a09:bb00::/29 RU-XL-20181122 (X LLC)
+2a09:bb00::/29 RU-LOCAL-20181122 (LIR LLC)
 2a09:bc00::/29 RU-AU-20181106 (Auction LLC)
 2a09:bd00::/32 RU-MSK-IX-20181122 (Join-stock company "Internet Exchange"MSK-IX")
 2a09:bd80::/29 RU-VPSVILLE1-20181219 (LLC Vpsville)
@@ -1311,7 +1308,6 @@
 2a09:da40::/29 RU-TELECOM-20190319 (Telenet LLC)
 2a09:dd00::/29 RU-AU-20181123 (Auction LLC)
 2a09:de00::/29 RU-SBCLOUD-20181112 (SBCLOUD LLC)
-2a09:df40::/29 RU-SIUNOC-20210920 (Sysoeva Irina Yurevna)
 2a09:e2c0::/29 RU-IPMAGNAT-20190321 (Mikhail Tonkonog)
 2a09:e300::/29 RU-AU-20181123 (Auction LLC)
 2a09:e5c0::/29 RU-IPMAGNAT-20190321 (Mikhail Tonkonog)
@@ -1367,7 +1363,7 @@
 2a0a:8580::/29 RU-IPSMAIN-20190702 (Sysoev Aleksey Anatolevich)
 2a0a:8a80::/29 RU-YARNET-KALUGA-20161129 (YARNET LLC)
 2a0a:8d80::/29 RU-WEBHOST1COM-20161129 (Webhost LLC)
-2a0a:8f80::/29 RU-IP-20161129 (i7 LLC)
+2a0a:8f80::/29 RU-IPADDRESS-20161129 (i7 LLC)
 2a0a:9740::/31 RU-FREEDOM-20170413 (Freedom LLC)
 2a0a:9980::/29 RU-DATAFORCE-20161201 (CJSC "DataForce IP")
 2a0a:9cc0::/29 RU-LOGOS-K-20170418 (LOGOS-K LLC)
@@ -1384,7 +1380,7 @@
 2a0a:b8c0::/32 RU-BURGERKING-20170425 (BURGER RUS LLC)
 2a0a:bbc0::/29 RU-TELECOM-20220105 (Telenet LLC)
 2a0a:c0c0::/29 RU-AU-20170501 (Auction LLC)
-2a0a:c380::/29 RU-XL-20190704 (X LLC)
+2a0a:c380::/29 RU-LOCAL-20190704 (LIR LLC)
 2a0a:c3c0::/29 RU-VPSVILLE1-20210518 (LLC Vpsville)
 2a0a:cd00::/32 RU-RTCLOUD-20161005 (RTCloud, LLC)
 2a0a:d0c0::/32 RU-NOMOS-RESERVE-20200608 (JSC "BM-Bank")
@@ -1399,13 +1395,12 @@
 2a0a:eec0::/32 RU-PDKLLC-20170517 (PDK LLC)
 2a0a:f140::/32 RU-EDIWEB-20170517 (Ediweb LLC)
 2a0a:f200::/29 RU-VPSVILLE1-20160906 (LLC Vpsville)
-2a0a:f580::/29 RU-XL-20191022 (X LLC)
+2a0a:f580::/29 RU-LOCAL-20191022 (LIR LLC)
 2a0a:f6c0::/29 RU-RAID-20170519 (JSC "ER-Telecom Holding")
 2a0a:f940::/32 RU-FOR-20170522 (Joint stock company "For")
 2a0b:340::/29 RU-UTELLTD-20170524 (UTEL Ltd)
 2a0b:3c0::/29 RU-RTSISPRUS-20200115 (RTS LLC)
 2a0b:580::/32 RU-UNICO-20161220 (JSC RDE "Unico")
-2a0b:780::/29 RU-INATEL-20161221 (INATEL Ltd.)
 2a0b:840::/29 RU-DEVINOTELECOM-20170529 (Limited Liability Company "DEVINO TELECOM")
 2a0b:980::/32 RU-TVSI-20161222 (Joint Stock Company Tyvasviazinform)
 2a0b:1380::/29 RU-OTK-20161228 (OTK LLC)
@@ -1442,7 +1437,6 @@
 2a0b:7a80::/29 RU-TELECOM-20190826 (Telenet LLC)
 2a0b:7ec0::/29 RU-MEDIA-LAND-20200610 (Media Land LLC)
 2a0b:8380::/29 RU-PROFIRU-20170120 ("PROFI.RU" LLC)
-2a0b:8480::/29 RU-NPFROI-20170120 (LLC "Nauchno proizvodstvennaya Firma "Raspredelennaya Obrabotka Informacii")
 2a0b:88c0::/29 RU-MEDIA-LAND-20200610 (Media Land LLC)
 2a0b:8d40::/29 RU-CWN-20211228 ("Pronet" LLC)
 2a0b:8ec0::/29 RU-CIT23-20170720 (LLC "Information Technology Center")
@@ -1450,7 +1444,7 @@
 2a0b:9000::/29 RU-AU-20190621 (Auction LLC)
 2a0b:9080::/29 RU-MGNHOST-NET-20220128 (Tyurin Viktor Mihaylovich)
 2a0b:9480::/29 RU-TELECOM-20181002 (Telenet LLC)
-2a0b:97c0::/29 RU-CHTE-20170725 (Chitatehenergy JSC)
+2a0b:97c0::/29 RU-EESNET-20170725 (JOINT-STOCK COMPANY "MOSCOW ENERGY COMMUNICATION NODE")
 2a0b:9a00::/29 RU-FIRSTDC-20200428 (Perviy TSOD LLC)
 2a0b:9c40::/29 RU-FILI-TELECOM-20170725 (FILI-Telecom LLC)
 2a0b:9fc0::/29 RU-RAID-20170726 (JSC "ER-Telecom Holding")
@@ -1496,7 +1490,6 @@
 2a0c:3140::/29 RU-DOCKER-20180329 (Docker LTD)
 2a0c:3d80::/29 RU-TELECOM-SERVICE-20171229 (Telecom Service LLC)
 2a0c:3f40::/32 RU-EI-20180405 (CJSC EN Telecom)
-2a0c:4280::/29 RU-INTELECOM-20180102 (LLC Promsvyaz-Invest)
 2a0c:4480::/29 RU-QUANTIL-20191022 (GLOBAL CLOUD NETWORK LLC)
 2a0c:5240::/29 RU-VPSVILLE1-20180411 (LLC Vpsville)
 2a0c:5300::/29 RU-ATSTEL-20171110 (ATC Telecom LTD.)
@@ -1504,6 +1497,7 @@
 2a0c:5640::/29 RU-INTELLIN-20180412 (JSC Intellin)
 2a0c:5ec0::/29 RU-SERVICE-IT-20180416 (LLC IT-service)
 2a0c:6680::/29 RU-KLEYNKOM4-20180105 (Kleynkom LLC)
+2a0c:68c0::/29 RU-WS1-20260130 ("Wireless systems" LLC)
 2a0c:6900::/29 RU-LEK-20171113 (Alliance LLC)
 2a0c:6c00::/29 RU-VDS-TELECOM-20230504 (VDS-TELECOM LLC)
 2a0c:6d00::/32 RU-SPACE-20171113 (Federal State Budgetary Institution of Science "Space Research Institute of the Russian Academy of Sciences".)
@@ -1580,6 +1574,7 @@
 2a0d:6d40::/29 RU-REGLAND-20240220 (Regland ltd)
 2a0d:70c0::/29 RU-AT-20180914 (Apple Technologies LLC)
 2a0d:7480::/29 RU-SETII-20180214 (Nets and Services JCS)
+2a0d:7680::/32 RU-IAKHONTOV-20260203 (Iaroslav Iakhontov)
 2a0d:7740::/29 RU-VPSVILLE1-20180917 (LLC Vpsville)
 2a0d:7840::/29 RU-MAINACC-20180918 (Ivan Bulavkin)
 2a0d:80c0::/29 RU-RSVOSPB-20180919 (JSC Russian Broadcasting and Notification Networks)
@@ -1660,7 +1655,7 @@
 2a0e:4a80::/29 RU-IPSMAIN-20190516 (Sysoev Aleksey Anatolevich)
 2a0e:4bc0::/29 RU-LOCAL-20190716 (LIR LLC)
 2a0e:4f40::/29 RU-MAINACC-20190716 (Ivan Bulavkin)
-2a0e:4fc0::/29 RU-XL-20190716 (X LLC)
+2a0e:4fc0::/29 RU-LOCAL-20190716 (LIR LLC)
 2a0e:50c0::/29 RU-TELESYSTEMS-20220927 (Telecommunication Systems LLC)
 2a0e:5380::/29 RU-LOCAL-20190517 (LIR LLC)
 2a0e:5640::/29 RU-LOCAL-20190718 (LIR LLC)
@@ -1675,7 +1670,6 @@
 2a0e:6140::/29 RU-MAINACC-20190722 (Ivan Bulavkin)
 2a0e:6740::/29 RU-TELECOM-20190722 (Telenet LLC)
 2a0e:67c0::/29 RU-TELECOM-20190722 (Telenet LLC)
-2a0e:6980::/29 RU-VIRTUALDC7-20220308 (Dmitrii Vladimirovich Malkov)
 2a0e:7000::/29 RU-RSINET-20190403 (RamSvyazInvest LLC)
 2a0e:7040::/29 RU-TELECOM-20190724 (Telenet LLC)
 2a0e:7200::/29 RU-GBNHOST-20190415 (LLC DZHIBIEN HOST)
@@ -1687,7 +1681,7 @@
 2a0e:7e40::/29 RU-O2CLOUD-20190726 (O2 Cloud LLC)
 2a0e:7e80::/29 RU-DOMSET-20190527 (DomSet OOO)
 2a0e:7f00::/29 RU-AU-20190429 (Auction LLC)
-2a0e:7f40::/29 RU-XL-20190726 (X LLC)
+2a0e:7f40::/29 RU-LOCAL-20190726 (LIR LLC)
 2a0e:8080::/29 RU-LOCAL-20190527 (LIR LLC)
 2a0e:8140::/29 RU-BITERIKA-20190729 (Biterika Group LLC)
 2a0e:8540::/29 RU-TELECOM-20190729 (Telenet LLC)
@@ -1736,7 +1730,7 @@
 2a0e:f400::/29 RU-TELNET-20190410 (Telnet LLC)
 2a0e:f5c0::/29 RU-BB-20251021 (Fedor Berg)
 2a0e:fa80::/29 RU-INTERNETHOSTING-20190614 (Internet Hosting LLC)
-2a0e:fb40::/29 RU-XL-20190827 (X LLC)
+2a0e:fb40::/29 RU-LOCAL-20190827 (LIR LLC)
 2a0e:ff80::/29 RU-TERALINETELECOM-20190614 (Teraline Telecom Ltd)
 2a0e:ffc0::/29 RU-LOCAL-20190827 (LIR LLC)
 2a0f::/29 RU-UMNYESETI-20190827 (Grand Ltd)
@@ -1772,7 +1766,7 @@
 2a0f:8580::/29 RU-PIN-20191002 (Petersburg Internet Network ltd.)
 2a0f:8b00::/29 RU-ORIONBR-20190913 (Orion telecom ltd)
 2a0f:9880::/29 RU-VPSVILLE1-20191004 (LLC Vpsville)
-2a0f:9c00::/29 RU-RT27-20190903 (Rustel LLC)
+2a0f:9c00::/29 RU-AU-20190903 (Auction LLC)
 2a0f:9d00::/29 RU-AU-20190916 (Auction LLC)
 2a0f:9f40::/29 RU-SRR-20191119 (SvyazResurs-Region LLC)
 2a0f:a180::/29 RU-SKYTELECOM-20191007 (TSK LLC)
@@ -1806,7 +1800,7 @@
 2a10:1b40::/29 RU-VOSHOD-20200327 (Federal State Institution Research and Development Institute "Voskhod", FGAU)
 2a10:2040::/29 RU-SERVERMALL-20200401 (Servermall LLC)
 2a10:2840::/29 RU-PANDORATRADE-20200409 (Pandora Trade LLC)
-2a10:3100::/29 RU-INETCOM-20200211 (Inetcom LLC)
+2a10:3100::/29 RU-INETCOM-CARRIER-20200211 (INETCOM CARRIER LLC)
 2a10:3380::/29 RU-LLCINTERCON-20200227 (LLC Intercon)
 2a10:4100::/29 RU-IPMAGNAT-20200415 (Mikhail Tonkonog)
 2a10:4280::/29 RU-FIRSTDC-20200417 (Perviy TSOD LLC)
@@ -1820,7 +1814,7 @@
 2a10:4f80::/29 RU-FIRSTDC-20200421 (Perviy TSOD LLC)
 2a10:5080::/29 RU-FIRSTDC-20200421 (Perviy TSOD LLC)
 2a10:5180::/29 RU-FIRSTDC-20200421 (Perviy TSOD LLC)
-2a10:5cc0::/29 RU-MAI-20200904 (Federal State Budgetary Educational Institution of Higher Education Moscow Aviation Institute (National Research University))
+2a10:5cc0::/29 RU-MAI-20200904 (Federal State Autonomous Educational Institution of Higher Education "Moscow Aviation Institute (National Research University)")
 2a10:61c0::/29 RU-DATAFORT-20200909 (DataFort LLC)
 2a10:62c0::/29 RU-OKKO-20200911 (OKKO LLC)
 2a10:6a40::/29 RU-IITRUST-20200918 (InfoTeCS Internet Trust JSC)
@@ -1846,7 +1840,9 @@
 2a10:9bc0::/29 RU-FIRSTDC-20210225 (Perviy TSOD LLC)
 2a10:9c40::/29 RU-FIRSTDC-20210225 (Perviy TSOD LLC)
 2a10:9cc0::/29 RU-FIRSTDC-20210225 (Perviy TSOD LLC)
+2a10:a680::/29 RU-INTECH-20260213 (INTEX ltd.)
 2a10:aa80::/29 RU-NUBES-20201217 (NUBES llc)
+2a10:ab80::/29 RU-PREFIXLABS-20260216 (Denis Aleksandrovich Iakovlev)
 2a10:ad00::/29 RU-FIRSTDC-20201117 (Perviy TSOD LLC)
 2a10:ad80::/29 RU-IVC-20201218 (Information & Computing Center, Ltd.)
 2a10:af00::/29 RU-FIRSTDC-20201117 (Perviy TSOD LLC)
@@ -1863,6 +1859,7 @@
 2a10:cfc0::/29 RU-TALENTSUCCESS-20210408 (Educational Fund "Talent and success")
 2a10:d240::/29 RU-MAINACC-20210412 (Ivan Bulavkin)
 2a10:d5c0::/29 RU-MAINACC-20210414 (Ivan Bulavkin)
+2a10:d740::/29 RU-KVANTA-20260216 (KVANTA LLC)
 2a10:d8c0::/29 RU-VPSVILLE1-20210416 (LLC Vpsville)
 2a10:df00::/29 RU-RVISION-20201124 (RVISION Ltd.)
 2a10:e040::/29 RU-MAINACC-20210421 (Ivan Bulavkin)
@@ -1872,6 +1869,7 @@
 2a10:f640::/29 RU-ACTIVEBC-20210506 (ActiveBusinessConsult LLC)
 2a10:fa00::/29 RU-EVROKONTAKTVN-20201109 (EUROCONTACT VELIKY NOVGOROD LLC)
 2a11:200::/29 RU-VPSVILLE1-20210511 (LLC Vpsville)
+2a11:300::/29 RU-TUNDRA-TC-20260216 (LLC "TUNDRA TELECOM")
 2a11:640::/29 RU-TELECOM-20210701 (Telenet LLC)
 2a11:680::/29 RU-VPSVILLE1-20210514 (LLC Vpsville)
 2a11:700::/29 RU-CTEL-20210512 (LLC Tatarstan-On-Line)
@@ -1883,24 +1881,24 @@
 2a11:c80::/29 RU-VPSVILLE1-20210514 (LLC Vpsville)
 2a11:d80::/29 RU-VPSVILLE1-20210514 (LLC Vpsville)
 2a11:e80::/29 RU-VPSVILLE1-20210514 (LLC Vpsville)
-2a11:f40::/29 RU-RT27-20210910 (Rustel LLC)
+2a11:f40::/29 RU-AU-20210910 (Auction LLC)
 2a11:1040::/29 RU-MONUMENT-A-20210910 (Monument-A LLC)
 2a11:1340::/29 RU-TELECOM-20210914 (Telenet LLC)
 2a11:1380::/29 RU-TELECOM-20210811 (Telenet LLC)
-2a11:1480::/29 RU-RT27-20210812 (Rustel LLC)
-2a11:1540::/29 RU-RT27-20210914 (Rustel LLC)
+2a11:1480::/29 RU-AU-20210812 (Auction LLC)
+2a11:1540::/29 RU-AU-20210914 (Auction LLC)
 2a11:15c0::/29 RU-TELECOM-20210914 (Telenet LLC)
-2a11:1640::/29 RU-XL-20210914 (X LLC)
+2a11:1640::/29 RU-LOCAL-20210914 (LIR LLC)
 2a11:1680::/29 RU-P24-SERVICE-20251105 (LLC "P24-SERVICE")
 2a11:1840::/29 RU-TELECOM-20210914 (Telenet LLC)
 2a11:1940::/29 RU-ZTV2-20210914 (ZTV CORP LLC)
 2a11:1a00::/29 RU-ALROSA-20210715 (PJSC ALROSA)
 2a11:1a40::/29 RU-FIRSTDC-20210914 (Perviy TSOD LLC)
-2a11:1a80::/29 RU-RT27-20210812 (Rustel LLC)
+2a11:1a80::/29 RU-AU-20210812 (Auction LLC)
 2a11:1c00::/29 RU-FIRSTDC-20210708 (Perviy TSOD LLC)
-2a11:1f00::/29 RU-RT27-20210727 (Rustel LLC)
-2a11:2080::/29 RU-XL-20210813 (X LLC)
-2a11:2140::/29 RU-RT27-20210916 (Rustel LLC)
+2a11:1f00::/29 RU-AU-20210727 (Auction LLC)
+2a11:2080::/29 RU-LOCAL-20210813 (LIR LLC)
+2a11:2140::/29 RU-AU-20210916 (Auction LLC)
 2a11:21c0::/29 RU-TELECOM-20210916 (Telenet LLC)
 2a11:2400::/29 RU-FIRSTDC-20210708 (Perviy TSOD LLC)
 2a11:2700::/29 RU-FIRSTDC-20210728 (Perviy TSOD LLC)
@@ -1911,87 +1909,81 @@
 2a11:3080::/29 RU-TELECOM-20210817 (Telenet LLC)
 2a11:3180::/29 RU-TELECOM-20210817 (Telenet LLC)
 2a11:31c0::/29 RU-TELECOM-20210921 (Telenet LLC)
-2a11:3340::/29 RU-XL-20210921 (X LLC)
-2a11:3440::/29 RU-RT27-20210921 (Rustel LLC)
+2a11:3340::/29 RU-LOCAL-20210921 (LIR LLC)
+2a11:3440::/29 RU-AU-20210921 (Auction LLC)
 2a11:34c0::/29 RU-TELECOM-20210921 (Telenet LLC)
 2a11:35c0::/29 RU-TELECOM-20210922 (Telenet LLC)
 2a11:3c40::/29 RU-AU-20210923 (Auction LLC)
 2a11:3d00::/29 RU-TELECOM-20210730 (Telenet LLC)
 2a11:3ec0::/29 RU-FIRSTDC-20210923 (Perviy TSOD LLC)
 2a11:3f00::/29 RU-TELECOM-20210730 (Telenet LLC)
-2a11:3fc0::/29 RU-RT27-20210923 (Rustel LLC)
+2a11:3fc0::/29 RU-AU-20210923 (Auction LLC)
 2a11:4040::/29 RU-AU-20210924 (Auction LLC)
 2a11:41c0::/29 RU-TELECOM-20210924 (Telenet LLC)
 2a11:4340::/29 RU-TELECOM-20210924 (Telenet LLC)
-2a11:44c0::/29 RU-SIUNOC-20210924 (Sysoeva Irina Yurevna)
-2a11:45c0::/29 RU-RT27-20210924 (Rustel LLC)
-2a11:4640::/29 RU-XL-20210924 (X LLC)
+2a11:45c0::/29 RU-AU-20210924 (Auction LLC)
+2a11:4640::/29 RU-LOCAL-20210924 (LIR LLC)
 2a11:4a00::/29 RU-TELECOM-20210719 (Telenet LLC)
 2a11:4a40::/29 RU-IPSMAIN-20210927 (Sysoev Aleksey Anatolevich)
-2a11:4a80::/29 RU-RT27-20210819 (Rustel LLC)
+2a11:4a80::/29 RU-AU-20210819 (Auction LLC)
 2a11:4ac0::/29 RU-BITERIKA-20210927 (Biterika Group LLC)
 2a11:4b40::/29 RU-IPMAGNAT-20210927 (Mikhail Tonkonog)
-2a11:5180::/29 RU-RT27-20210819 (Rustel LLC)
+2a11:5180::/29 RU-AU-20210819 (Auction LLC)
 2a11:5780::/29 RU-IPMAGNAT-20210819 (Mikhail Tonkonog)
-2a11:5880::/29 RU-XL-20210819 (X LLC)
+2a11:5880::/29 RU-LOCAL-20210819 (LIR LLC)
 2a11:5a40::/29 RU-TELECOM-20210929 (Telenet LLC)
 2a11:5bc0::/29 RU-QWARTA-20210930 (QWARTA LLC)
-2a11:6300::/29 RU-RT27-20210802 (Rustel LLC)
+2a11:6300::/29 RU-AU-20210802 (Auction LLC)
 2a11:6340::/29 RU-TELECOM-20211001 (Telenet LLC)
 2a11:6380::/29 RU-EKACOD-20210820 (Vichislitelniy Centr Ltd.)
-2a11:6500::/29 RU-XL-20210802 (X LLC)
+2a11:6500::/29 RU-LOCAL-20210802 (LIR LLC)
 2a11:6540::/29 RU-AU-20211001 (Auction LLC)
 2a11:6580::/29 RU-AU-20210820 (Auction LLC)
-2a11:65c0::/29 RU-XL-20211001 (X LLC)
+2a11:65c0::/29 RU-LOCAL-20211001 (LIR LLC)
 2a11:66c0::/29 RU-TELECOM-20211001 (Telenet LLC)
-2a11:68c0::/29 RU-RT27-20211001 (Rustel LLC)
-2a11:6ac0::/29 RU-VKORABLEV-20211004 (Vladimir Korablev)
+2a11:68c0::/29 RU-AU-20211001 (Auction LLC)
 2a11:6bc0::/29 RU-AU-20211004 (Auction LLC)
 2a11:6d00::/29 RU-AU-20210802 (Auction LLC)
 2a11:6e40::/29 RU-IPSMAIN-20211004 (Sysoev Aleksey Anatolevich)
 2a11:7080::/29 RU-TELECOM-20210823 (Telenet LLC)
 2a11:7140::/29 RU-FIRSTDC-20211004 (Perviy TSOD LLC)
-2a11:7180::/29 RU-SIUNOC-20210823 (Sysoeva Irina Yurevna)
-2a11:7680::/29 RU-XL-20210823 (X LLC)
+2a11:7680::/29 RU-LOCAL-20210823 (LIR LLC)
 2a11:7880::/29 RU-TELECOM-20210824 (Telenet LLC)
 2a11:7e40::/29 RU-VIRTUALDC-20211006 (Dmitrii Vladimirovich Malkov)
 2a11:8100::/29 RU-FIRSTDC-20210803 (Perviy TSOD LLC)
-2a11:8300::/29 RU-XL-20210803 (X LLC)
-2a11:83c0::/29 RU-RIPE8-20211007 (Dmitrii Aleksandrovich Miasnikov)
-2a11:8440::/29 RU-XL-20211007 (X LLC)
+2a11:8300::/29 RU-LOCAL-20210803 (LIR LLC)
+2a11:8440::/29 RU-LOCAL-20211007 (LIR LLC)
 2a11:8480::/29 RU-VIRTUALDC-20210824 (Dmitrii Vladimirovich Malkov)
 2a11:84c0::/29 RU-AU-20211007 (Auction LLC)
 2a11:8500::/29 RU-TELECOM-20210803 (Telenet LLC)
-2a11:85c0::/29 RU-XL-20211007 (X LLC)
+2a11:85c0::/29 RU-LOCAL-20211007 (LIR LLC)
 2a11:8600::/29 RU-NICOS-20210720 (LLC Company NICOS)
 2a11:8780::/29 RU-MESHNET-20210824 (Vladimir Dmitriev)
-2a11:87c0::/29 RU-TELEGA-20251124 (JOINT STOCK COMPANY "DAL")
-2a11:8940::/29 RU-RT27-20211007 (Rustel LLC)
-2a11:8f80::/29 RU-XL-20210825 (X LLC)
+2a11:87c0::/29 RU-TELEGA-20251124 (JOINT STOCK COMPANY "TELEGA")
+2a11:8940::/29 RU-AU-20211007 (Auction LLC)
+2a11:8f80::/29 RU-LOCAL-20210825 (LIR LLC)
 2a11:91c0::/29 RU-IPMAGNAT-20211008 (Mikhail Tonkonog)
-2a11:9380::/29 RU-RT27-20210825 (Rustel LLC)
+2a11:9380::/29 RU-AU-20210825 (Auction LLC)
 2a11:9880::/29 RU-TELECOM-20210825 (Telenet LLC)
-2a11:9e40::/29 RU-SIUNOC-20211012 (Sysoeva Irina Yurevna)
 2a11:9f40::/29 RU-AU-20211013 (Auction LLC)
-2a11:9fc0::/29 RU-XL-20211013 (X LLC)
+2a11:9fc0::/29 RU-LOCAL-20211013 (LIR LLC)
 2a11:a180::/29 RU-AU-20210827 (Auction LLC)
 2a11:a940::/29 RU-WEST-CALL-20211014 (OOO WestCall Ltd.)
-2a11:acc0::/29 RU-XL-20211015 (X LLC)
+2a11:acc0::/29 RU-LOCAL-20211015 (LIR LLC)
 2a11:af00::/29 RU-VPSVILLE1-20210806 (LLC Vpsville)
 2a11:b1c0::/29 RU-IPMAGNAT-20211015 (Mikhail Tonkonog)
 2a11:b680::/29 RU-TELECOM-20210831 (Telenet LLC)
-2a11:b780::/29 RU-XL-20210831 (X LLC)
+2a11:b780::/29 RU-LOCAL-20210831 (LIR LLC)
 2a11:bcc0::/29 RU-AM-20211019 (Nadezhda Mamaeva)
-2a11:be80::/29 RU-XL-20210901 (X LLC)
-2a11:c100::/29 RU-XL-20210806 (X LLC)
-2a11:c440::/29 RU-XL-20211019 (X LLC)
-2a11:c540::/29 RU-XL-20211019 (X LLC)
-2a11:c700::/29 RU-XL-20210809 (X LLC)
+2a11:be80::/29 RU-LOCAL-20210901 (LIR LLC)
+2a11:c100::/29 RU-LOCAL-20210806 (LIR LLC)
+2a11:c440::/29 RU-LOCAL-20211019 (LIR LLC)
+2a11:c540::/29 RU-LOCAL-20211019 (LIR LLC)
+2a11:c700::/29 RU-LOCAL-20210809 (LIR LLC)
 2a11:c880::/29 RU-ALEXGROUP-20210901 (Alex Group LLC)
-2a11:ca80::/29 RU-SIUNOC-20210902 (Sysoeva Irina Yurevna)
 2a11:cb80::/29 RU-UMLC-20210902 (Uzhnie Magistraljnie Linii Svyazi LLC)
-2a11:cd00::/29 RU-XL-20210809 (X LLC)
-2a11:d080::/29 RU-XL-20210902 (X LLC)
+2a11:cd00::/29 RU-LOCAL-20210809 (LIR LLC)
+2a11:d080::/29 RU-LOCAL-20210902 (LIR LLC)
 2a11:d280::/29 RU-VSUE-20210902 (Federal State Budgetary Educational Institution of Higher Education "Vladivostok State University")
 2a11:d380::/29 RU-TELECOM-20210903 (Telenet LLC)
 2a11:d700::/29 RU-TELECOM-20210810 (Telenet LLC)
@@ -1999,48 +1991,47 @@
 2a11:df40::/29 RU-VIRTUALDC-20211025 (Dmitrii Vladimirovich Malkov)
 2a11:e140::/29 RU-ALEXGROUP-20211025 (Alex Group LLC)
 2a11:e380::/29 RU-IEGALCHENKO1-20210906 (Galchenko Anna Viktorovna)
-2a11:e540::/29 RU-XL-20211026 (X LLC)
-2a11:e7c0::/29 RU-XL-20211026 (X LLC)
+2a11:e540::/29 RU-LOCAL-20211026 (LIR LLC)
+2a11:e7c0::/29 RU-LOCAL-20211026 (LIR LLC)
 2a11:e840::/30 RU-NDEV-20211026 (Anton Rashitovich Khalikov)
 2a11:f000::/29 RU-IGKH-20210706 (Inna Grigorevna Khoruzhaya)
-2a11:f180::/29 RU-XL-20210907 (X LLC)
+2a11:f180::/29 RU-LOCAL-20210907 (LIR LLC)
 2a11:f680::/29 RU-FIRSTDC-20210907 (Perviy TSOD LLC)
 2a11:f800::/29 RU-FIRSTDC-20210708 (Perviy TSOD LLC)
 2a11:f840::/29 RU-QWARTA-20211028 (QWARTA LLC)
 2a11:f8c0::/29 RU-CONNECTING-20211028 (Connecting LLC)
-2a11:fb40::/29 RU-XL-20211209 (X LLC)
+2a11:fb40::/29 RU-LOCAL-20211209 (LIR LLC)
 2a11:fc80::/29 RU-IPMAGNAT-20230605 (Mikhail Tonkonog)
-2a11:fec0::/29 RU-XL-20211209 (X LLC)
+2a11:fec0::/29 RU-LOCAL-20211209 (LIR LLC)
 2a12:2c0::/29 RU-IPSMAIN-20211210 (Sysoev Aleksey Anatolevich)
 2a12:480::/29 RU-PMC-GRCC-20211118 (FSUE "GlavNIVZ")
 2a12:9c0::/29 RU-QWARTA-20211214 (QWARTA LLC)
-2a12:10c0::/29 RU-XL-20211216 (X LLC)
-2a12:1140::/29 RU-XL-20211216 (X LLC)
+2a12:10c0::/29 RU-LOCAL-20211216 (LIR LLC)
+2a12:1140::/29 RU-LOCAL-20211216 (LIR LLC)
 2a12:1240::/29 RU-TELECOM-20211216 (Telenet LLC)
 2a12:1540::/29 RU-TELECOM-20211217 (Telenet LLC)
-2a12:15c0::/29 RU-XL-20211217 (X LLC)
-2a12:1800::/29 RU-XL-20211029 (X LLC)
-2a12:1880::/29 RU-XL-20211119 (X LLC)
-2a12:1940::/29 RU-XL-20211221 (X LLC)
+2a12:15c0::/29 RU-LOCAL-20211217 (LIR LLC)
+2a12:1800::/29 RU-LOCAL-20211029 (LIR LLC)
+2a12:1880::/29 RU-LOCAL-20211119 (LIR LLC)
+2a12:1940::/29 RU-LOCAL-20211221 (LIR LLC)
 2a12:1a40::/29 RU-TELECOM-20211221 (Telenet LLC)
-2a12:1c40::/29 RU-RT27-20211221 (Rustel LLC)
-2a12:1cc0::/29 RU-XL-20211221 (X LLC)
-2a12:1d80::/29 RU-SIUNOC-20211119 (Sysoeva Irina Yurevna)
+2a12:1c40::/29 RU-AU-20211221 (Auction LLC)
+2a12:1cc0::/29 RU-LOCAL-20211221 (LIR LLC)
 2a12:1e80::/29 RU-IPMAGNAT-20211119 (Mikhail Tonkonog)
 2a12:2040::/29 RU-AU-20211222 (Auction LLC)
 2a12:2200::/29 RU-IPSERVER-20211104 (IP SERVER LLC)
 2a12:24c0::/29 RU-TELECOM-20211223 (Telenet LLC)
-2a12:25c0::/29 RU-XL-20211223 (X LLC)
+2a12:25c0::/29 RU-LOCAL-20211223 (LIR LLC)
 2a12:2740::/29 RU-TELECOM-20211227 (Telenet LLC)
-2a12:2c40::/29 RU-XL-20211228 (X LLC)
+2a12:2c40::/29 RU-LOCAL-20211228 (LIR LLC)
 2a12:2cc0::/29 RU-TELECOM-20211228 (Telenet LLC)
 2a12:2d40::/29 RU-QWARTA-20211228 (QWARTA LLC)
 2a12:2e40::/29 RU-TELECOM-20211228 (Telenet LLC)
-2a12:2ec0::/29 RU-RT27-20211228 (Rustel LLC)
+2a12:2ec0::/29 RU-AU-20211228 (Auction LLC)
 2a12:2fc0::/29 RU-AU-20211228 (Auction LLC)
 2a12:3040::/29 RU-AU-20211228 (Auction LLC)
 2a12:3140::/29 RU-TELECOM-20211228 (Telenet LLC)
-2a12:34c0::/29 RU-XL-20211230 (X LLC)
+2a12:34c0::/29 RU-LOCAL-20211230 (LIR LLC)
 2a12:3580::/29 RU-NEWLINE-20211122 (OOO New Line)
 2a12:35c0::/29 RU-TELECOM-20211230 (Telenet LLC)
 2a12:3740::/29 RU-TELECOM-20220103 (Telenet LLC)
@@ -2048,55 +2039,52 @@
 2a12:3800::/29 RU-INETLLC-20211029 (Internet Technologies LLC)
 2a12:38c0::/29 RU-AU-20220105 (Auction LLC)
 2a12:39c0::/29 RU-AU-20220105 (Auction LLC)
-2a12:3ac0::/29 RU-XL-20220105 (X LLC)
-2a12:3b40::/29 RU-XL-20220105 (X LLC)
+2a12:3ac0::/29 RU-LOCAL-20220105 (LIR LLC)
+2a12:3b40::/29 RU-LOCAL-20220105 (LIR LLC)
 2a12:3bc0::/29 RU-TELECOM-20220105 (Telenet LLC)
 2a12:3cc0::/29 RU-TELECOM-20220105 (Telenet LLC)
-2a12:3d40::/29 RU-RT27-20220105 (Rustel LLC)
-2a12:3dc0::/29 RU-RT27-20220105 (Rustel LLC)
+2a12:3d40::/29 RU-AU-20220105 (Auction LLC)
+2a12:3dc0::/29 RU-AU-20220105 (Auction LLC)
 2a12:4140::/29 RU-TELECOM-20220106 (Telenet LLC)
 2a12:41c0::/29 RU-TELECOM-20220106 (Telenet LLC)
-2a12:4240::/29 RU-XL-20220106 (X LLC)
+2a12:4240::/29 RU-LOCAL-20220106 (LIR LLC)
 2a12:4300::/29 RU-IPMAGNAT-20211111 (Mikhail Tonkonog)
-2a12:4500::/29 RU-XL-20211111 (X LLC)
+2a12:4500::/29 RU-LOCAL-20211111 (LIR LLC)
 2a12:46c0::/29 RU-TELECOM-20220107 (Telenet LLC)
 2a12:4800::/29 RU-FIRSTDC-20211029 (Perviy TSOD LLC)
-2a12:4c00::/29 RU-XL-20211102 (X LLC)
-2a12:5580::/29 RU-XL-20211123 (X LLC)
+2a12:4c00::/29 RU-LOCAL-20211102 (LIR LLC)
+2a12:5580::/29 RU-LOCAL-20211123 (LIR LLC)
 2a12:5a00::/29 RU-IPMAGNAT-20211105 (Mikhail Tonkonog)
-2a12:6300::/29 RU-SIUNOC-20211112 (Sysoeva Irina Yurevna)
 2a12:6440::/32 RU-OPTIKLINE-20220124 (Optik Line LLC)
-2a12:6500::/29 RU-ZION5-20211112 (Yury Vladimirovich Nekulitsy)
-2a12:6600::/29 RU-XL-20211105 (X LLC)
+2a12:6600::/29 RU-LOCAL-20211105 (LIR LLC)
 2a12:6700::/29 RU-VIRTUALDC-20211112 (Dmitrii Vladimirovich Malkov)
 2a12:6780::/29 RU-INETLLC-20211124 (Internet Technologies LLC)
-2a12:6940::/29 RU-VIRTUALDC6-20220204 (Dmitrii Vladimirovich Malkov)
 2a12:6c40::/29 RU-ALEXGROUP-20220207 (Alex Group LLC)
 2a12:70c0::/29 RU-IEGALCHENKO1-20220210 (Galchenko Anna Viktorovna)
 2a12:7300::/29 RU-TELECOM-20211112 (Telenet LLC)
 2a12:7380::/32 RU-TKH-INVEST-20211125 (TKH-Invest Ltd.)
-2a12:7980::/29 RU-XL-20211125 (X LLC)
+2a12:7980::/29 RU-LOCAL-20211125 (LIR LLC)
 2a12:7c00::/29 RU-VPSVILLE1-20211102 (LLC Vpsville)
 2a12:7f40::/29 RU-ALEXGROUP-20220217 (Alex Group LLC)
 2a12:80c0::/29 RU-REDBYTES-20220217 (Red Byte LLC)
 2a12:8100::/29 RU-IPMAGNAT-20211112 (Mikhail Tonkonog)
-2a12:8800::/29 RU-XL-20211029 (X LLC)
+2a12:8800::/29 RU-LOCAL-20211029 (LIR LLC)
 2a12:8c40::/29 RU-VIAIP-RU-20220224 (ViaIP LLC)
 2a12:8cc0::/29 RU-LLCRUSSIAN-20220224 (LLC Russian clouds)
 2a12:92c0::/29 RU-ALEXGROUP-20220301 (Alex Group LLC)
 2a12:9400::/29 RU-PLATFORMA-20211102 (Big Data Platform LLC)
 2a12:9500::/29 RU-TELECOM-20211115 (Telenet LLC)
-2a12:9700::/29 RU-XL-20211115 (X LLC)
-2a12:9e00::/29 RU-XL-20211108 (X LLC)
+2a12:9700::/29 RU-LOCAL-20211115 (LIR LLC)
+2a12:9e00::/29 RU-LOCAL-20211108 (LIR LLC)
 2a12:a340::/29 RU-IPMAGNAT-20220314 (Mikhail Tonkonog)
 2a12:afc0::/29 RU-LETIT-20220318 (Letit LLC)
 2a12:b2c0::/29 RU-AHOST-20220321 (Ahost LLC)
 2a12:b3c0::/29 RU-ALEXGROUP-20220322 (Alex Group LLC)
-2a12:b4c0::/29 RU-MWS-20220323 (JOINT STOCK COMPANY "MTS WEB SERVICES")
+2a12:b4c0::/29 RU-MTU-20220323 (MTS PJSC)
 2a12:ba40::/29 RU-SENTASERV-20220330 (Senta Service LLC)
 2a12:bbc0::/29 RU-STANMIX1-20220331 (AREAL. REGIONAL CENTER LIMITED LIABILITY COMPANY)
 2a12:bdc0::/29 RU-DEDIC164-20220401 (LLC "SMART CENTER")
-2a12:c180::/29 RU-XL-20211201 (X LLC)
+2a12:c180::/29 RU-LOCAL-20211201 (LIR LLC)
 2a12:c2c0::/29 RU-DORA-20220406 (Dora LLC)
 2a12:c300::/29 RU-IPMAGNAT-20211116 (Mikhail Tonkonog)
 2a12:c5c0::/29 RU-IEZHUCHKOV-20220407 (Zhuchkov Mikhail)
@@ -2136,7 +2124,6 @@
 2a13:7340::/32 RU-AOAGENCY-20221227 (AO PACTOUR Agency)
 2a13:73c0::/29 RU-TAHION-20221228 (LLC SIP "NIS")
 2a13:7e00::/29 RU-IEGALCHENKO1-20220627 (Galchenko Anna Viktorovna)
-2a13:8480::/29 RU-SIUNOC-20230222 (Sysoeva Irina Yurevna)
 2a13:8580::/29 RU-IPMAGNAT-20230222 (Mikhail Tonkonog)
 2a13:8c40::/29 RU-IPMAGNAT-20230707 (Mikhail Tonkonog)
 2a13:8e40::/29 RU-OFORO-20230712 (Bykov Roman Andreevich)
@@ -2167,9 +2154,6 @@
 2a14:380::/29 RU-TERMINAL-20231127 (JSC SHEREMETYEVO INTERNATIONAL AIRPORT)
 2a14:9c0::/29 RU-DOMOLAN-20240220 (DomoLAN Ltd.)
 2a14:1280::/29 RU-FIRSTDC-20231204 (Perviy TSOD LLC)
-2a14:1580::/29 RU-RIPE8-20231205 (Dmitrii Aleksandrovich Miasnikov)
-2a14:1680::/29 RU-RIPE8-20231205 (Dmitrii Aleksandrovich Miasnikov)
-2a14:1780::/29 RU-RIPE8-20231205 (Dmitrii Aleksandrovich Miasnikov)
 2a14:1f40::/32 RU-MOVETEL-20240314 (Movetel LTD)
 2a14:1fc0::/32 RU-NVTELECOM-20240315 (NV Telecom LLC)
 2a14:25c0::/29 RU-DTP-20240320 (Digital Transformation Plus LLC)

blacklists/blacklist-v4.txt

@@ -30,7 +30,6 @@
 128.140.170.0/24
 128.140.171.0/24
 128.140.172.0/22
-128.140.173.0/24
 130.49.224.0/19
 145.255.238.240/28
 146.185.208.0/22
@@ -42,21 +41,10 @@
 149.62.55.240/30
 155.212.192.0/20
 176.109.0.0/21
-176.109.0.0/24
-176.109.1.0/24
-176.109.2.0/24
-176.109.3.0/24
-176.109.5.0/24
-176.109.6.0/24
 176.112.168.0/21
+176.116.112.0/22
 176.116.96.0/20
 178.16.156.148/30
-178.17.176.0/23
-178.17.178.0/23
-178.17.180.0/23
-178.17.182.0/23
-178.17.184.0/22
-178.17.188.0/22
 178.20.234.224/29
 178.22.88.0/21
 178.22.89.64/26
@@ -71,7 +59,6 @@
 178.237.240.0/20
 178.237.248.0/21
 178.237.28.0/24
-178.237.29.0/24
 178.237.30.0/23
 178.248.232.137/32
 178.248.232.60/32
@@ -118,21 +105,16 @@
 185.130.112.0/23
 185.130.114.0/23
 185.131.68.0/22
-185.131.68.0/23
 185.149.160.0/24
 185.149.161.0/24
 185.149.162.0/24
 185.149.163.0/24
-185.16.10.0/23
 185.16.148.0/22
 185.16.148.0/23
 185.16.150.0/23
 185.16.244.0/22
 185.16.244.0/23
 185.16.246.0/23
-185.16.246.0/24
-185.16.247.0/24
-185.16.8.0/23
 185.168.60.0/24
 185.168.61.0/24
 185.168.62.0/24
@@ -205,14 +187,12 @@
 188.93.62.0/24
 193.203.40.0/22
 193.232.70.0/24
-193.33.230.0/23
 193.47.146.0/24
 194.140.247.0/25
 194.140.247.128/25
 194.150.202.0/23
 194.165.22.0/23
 194.186.112.80/28
-194.186.63.0/24
 194.190.9.0/24
 194.215.248.0/24
 194.226.116.0/22
@@ -244,14 +224,11 @@
 195.182.155.164/30
 195.182.156.96/30
 195.209.120.0/22
-195.209.122.0/24
-195.209.123.0/24
 195.211.20.0/22
 195.211.22.0/24
 195.211.23.0/24
 195.218.175.40/29
 195.218.190.0/23
-195.226.203.0/24
 195.239.113.0/24
 195.239.247.0/24
 195.239.80.32/29
@@ -272,7 +249,6 @@
 195.98.43.104/29
 195.98.73.56/29
 195.98.77.100/30
-212.111.84.0/22
 212.119.174.0/24
 212.119.175.0/24
 212.120.169.48/29
@@ -296,15 +272,8 @@
 212.17.8.176/29
 212.17.9.144/28
 212.192.156.0/22
-212.192.156.0/24
-212.192.157.0/24
-212.192.158.0/24
 212.23.85.48/30
 212.23.85.56/29
-212.233.120.0/22
-212.233.72.0/21
-212.233.88.0/21
-212.233.96.0/22
 212.32.198.64/29
 212.48.134.192/26
 212.48.138.240/28
@@ -409,8 +378,6 @@
 213.172.27.252/30
 213.172.30.136/30
 213.172.4.192/26
-213.176.232.0/23
-213.176.234.0/23
 213.177.111.0/24
 213.183.253.56/29
 213.219.212.0/22
@@ -466,7 +433,9 @@
 217.106.203.88/29
 217.106.93.192/26
 217.106.95.112/28
+217.107.0.0/18
 217.107.200.0/21
+217.107.208.0/20
 217.107.5.112/29
 217.107.5.16/29
 217.107.5.24/29
@@ -482,7 +451,7 @@
 217.16.16.0/21
 217.16.24.0/21
 217.172.18.0/23
-217.174.188.0/22
+217.172.20.0/22
 217.174.188.0/23
 217.195.92.16/28
 217.195.93.144/29
@@ -497,7 +466,10 @@
 217.20.158.0/24
 217.20.159.0/24
 217.20.86.128/26
+217.20.86.192/27
+217.20.86.224/29
 217.20.86.232/29
+217.20.86.240/28
 217.23.88.168/29
 217.23.88.248/29
 217.27.142.176/30
@@ -506,10 +478,7 @@
 217.67.177.208/29
 217.69.128.0/20
 217.69.128.0/21
-217.69.132.0/24
 217.69.136.0/21
-31.148.205.0/24
-31.177.104.0/22
 31.177.95.0/24
 31.44.63.64/29
 37.139.32.0/22
@@ -531,8 +500,8 @@
 45.84.130.0/23
 46.20.70.160/28
 46.228.0.232/29
-46.245.234.0/24
 46.29.152.0/22
+46.29.156.0/23
 46.46.142.160/28
 46.46.148.40/29
 46.47.197.128/30
@@ -575,31 +544,20 @@
 5.61.239.64/26
 62.105.158.200/29
 62.112.110.64/28
-62.118.0.208/28
 62.118.101.184/29
 62.118.113.232/29
 62.118.125.188/30
 62.118.127.240/28
-62.118.15.16/28
-62.118.17.152/29
-62.118.19.112/30
-62.118.19.40/30
 62.118.193.8/29
 62.118.205.68/30
 62.118.208.100/30
 62.118.209.192/30
-62.118.21.160/29
 62.118.216.60/30
 62.118.219.184/30
 62.118.230.4/30
 62.118.233.224/29
 62.118.234.64/29
 62.118.239.128/29
-62.118.25.112/28
-62.118.37.168/30
-62.118.37.180/30
-62.118.37.4/30
-62.118.38.212/30
 62.141.125.0/25
 62.217.160.0/20
 62.217.160.0/21
@@ -608,7 +566,6 @@
 62.33.199.80/29
 62.33.34.16/28
 62.33.87.128/28
-62.33.87.152/29
 62.5.130.104/29
 62.5.132.224/29
 62.5.189.80/29
@@ -656,9 +613,6 @@
 79.137.139.0/24
 79.137.139.0/25
 79.137.139.128/25
-79.137.140.0/24
-79.137.142.0/24
-79.137.157.0/24
 79.137.157.0/25
 79.137.157.128/25
 79.137.164.0/24
@@ -678,9 +632,6 @@
 79.137.240.0/22
 79.137.244.0/22
 79.142.88.0/28
-79.143.229.0/24
-79.143.230.0/24
-79.143.232.0/24
 80.237.11.88/29
 80.237.39.112/29
 80.237.98.80/28
@@ -690,8 +641,6 @@
 80.254.100.40/29
 80.254.119.168/29
 80.73.16.0/20
-80.73.16.0/21
-80.73.16.0/24
 80.73.168.80/28
 80.73.169.244/30
 80.82.43.24/29
@@ -744,7 +693,6 @@
 81.222.209.136/29
 81.222.210.24/29
 81.3.168.148/30
-82.110.69.200/29
 82.140.65.240/29
 82.142.162.104/29
 82.151.107.136/29
@@ -830,6 +778,7 @@
 85.141.60.96/28
 85.141.61.160/28
 85.143.125.0/24
+85.146.204.44/30
 85.192.32.0/22
 85.192.32.0/23
 85.192.34.0/23
@@ -896,8 +845,6 @@
 87.240.128.0/18
 87.240.128.0/19
 87.240.160.0/19
-87.240.166.0/24
-87.240.167.0/24
 87.242.112.0/22
 87.245.133.0/24
 87.249.16.32/28
@@ -965,11 +912,6 @@
 89.21.152.104/29
 89.221.228.0/22
 89.221.232.0/21
-89.221.232.0/22
-89.221.233.0/24
-89.221.234.0/24
-89.221.235.0/24
-89.221.236.0/22
 89.28.253.168/29
 89.28.255.56/29
 90.150.176.52/30
@@ -992,7 +934,6 @@
 90.156.148.0/22
 90.156.148.0/23
 90.156.150.0/23
-90.156.151.0/24
 90.156.212.0/22
 90.156.212.0/23
 90.156.214.0/23
@@ -1000,27 +941,13 @@
 90.156.216.0/23
 90.156.218.0/23
 90.156.232.0/21
-90.156.248.0/22
 91.103.194.184/29
-91.135.212.0/22
-91.135.216.0/21
-91.135.220.0/24
-91.135.221.0/24
-91.195.136.0/23
-91.208.20.0/24
 91.215.168.0/22
 91.217.34.0/23
 91.219.192.0/22
-91.219.224.0/22
-91.221.140.0/23
-91.221.140.0/24
-91.221.141.0/24
 91.226.250.0/24
 91.227.32.0/24
 91.231.132.0/22
-91.231.132.0/24
-91.231.133.0/24
-91.231.134.0/24
 91.237.76.0/24
 92.101.253.152/29
 92.101.253.96/29
@@ -1065,7 +992,6 @@
 94.124.192.192/29
 94.139.244.0/22
 94.139.244.0/23
-94.139.244.0/24
 94.139.246.0/23
 94.199.64.0/21
 94.25.119.228/30
@@ -1082,9 +1008,6 @@
 95.142.201.0/24
 95.142.202.0/24
 95.142.203.0/24
-95.142.204.0/23
-95.142.207.0/24
-95.163.133.0/24
 95.163.180.0/22
 95.163.180.0/23
 95.163.182.0/23
@@ -1122,6 +1045,7 @@
 95.167.5.80/28
 95.167.54.76/30
 95.167.59.244/30
+95.167.59.248/30
 95.167.64.20/30
 95.167.68.216/29
 95.167.69.116/30
@@ -1139,7 +1063,6 @@
 95.173.128.0/20
 95.173.144.0/20
 95.213.0.0/17
-95.213.0.0/18
 95.213.0.0/20
 95.213.16.0/21
 95.213.24.0/23
@@ -1154,12 +1077,7 @@
 95.213.34.0/23
 95.213.36.0/22
 95.213.40.0/21
-95.213.44.0/24
-95.213.45.0/24
 95.213.48.0/20
 95.213.64.0/18
-95.47.189.0/24
-95.47.191.0/24
-95.47.244.0/24
 95.53.248.0/29
 95.54.193.80/28

blacklists/blacklist-v6.txt

@@ -1,23 +1,5 @@
-2a00:1148::/29
-2a00:1148::/32
-2a00:a300::/32
-2a00:b4c0::/32
-2a00:bdc0:8000::/34
-2a00:bdc0::/33
-2a00:bdc0:c000::/35
 2a00:bdc0:e002::/48
 2a00:bdc0:e003::/48
 2a00:bdc0:e004::/48
 2a00:bdc0:e005::/48
 2a00:bdc0:e007::/48
-2a00:bdc0:f000::/36
-2a00:bdc1::/32
-2a00:bdc2::/31
-2a00:bdc4::/30
-2a0c:a9c7:156::/48
-2a0c:a9c7:157::/48
-2a0c:a9c7:158::/48
-2a14:25c0::/32
-2a14:25c5::/32
-2a14:25c6::/32
-2a14:25c7::/32

blacklists/blacklist-vk-v4.txt

@@ -0,0 +1,266 @@
+109.120.180.0/22
+109.120.180.0/23
+109.120.182.0/23
+109.120.188.0/22
+109.120.188.0/23
+109.120.190.0/23
+128.140.168.0/21
+128.140.168.0/23
+128.140.170.0/24
+128.140.171.0/24
+128.140.172.0/22
+130.49.224.0/19
+146.185.208.0/22
+146.185.208.0/23
+146.185.210.0/23
+146.185.240.0/22
+146.185.240.0/23
+146.185.242.0/23
+155.212.192.0/20
+176.112.168.0/21
+178.22.88.0/21
+178.22.89.64/26
+178.22.94.0/23
+178.237.16.0/20
+178.237.16.0/21
+178.237.24.0/22
+178.237.30.0/23
+185.100.104.0/22
+185.100.104.0/23
+185.100.106.0/23
+185.130.112.0/22
+185.130.112.0/23
+185.130.114.0/23
+185.131.68.0/22
+185.16.148.0/22
+185.16.148.0/23
+185.16.150.0/23
+185.16.244.0/22
+185.16.244.0/23
+185.16.246.0/23
+185.180.200.0/22
+185.187.63.0/24
+185.187.63.0/25
+185.187.63.128/25
+185.226.52.0/22
+185.226.52.0/23
+185.226.54.0/23
+185.241.192.0/22
+185.241.192.0/23
+185.241.194.0/23
+185.29.128.0/22
+185.29.130.0/24
+185.32.248.0/22
+185.32.248.0/23
+185.32.250.0/23
+185.5.136.0/22
+185.5.136.0/23
+185.5.138.0/23
+185.6.244.0/22
+185.6.244.0/23
+185.6.246.0/23
+185.86.144.0/22
+185.86.144.0/23
+185.86.146.0/23
+188.93.56.0/21
+188.93.56.0/24
+188.93.57.0/24
+188.93.58.0/24
+188.93.60.0/24
+188.93.61.0/24
+188.93.62.0/24
+193.203.40.0/22
+194.84.16.12/30
+195.211.20.0/22
+195.211.22.0/24
+195.211.23.0/24
+212.111.84.0/22
+212.233.120.0/22
+212.233.72.0/21
+212.233.88.0/21
+212.233.96.0/22
+213.219.212.0/22
+213.219.212.0/23
+213.219.214.0/23
+217.16.16.0/20
+217.16.16.0/21
+217.16.24.0/21
+217.174.188.0/23
+217.20.144.0/20
+217.20.144.0/22
+217.20.148.0/24
+217.20.149.0/24
+217.20.150.0/23
+217.20.152.0/22
+217.20.156.0/23
+217.20.158.0/24
+217.20.159.0/24
+217.69.128.0/20
+217.69.128.0/21
+217.69.136.0/21
+37.139.32.0/22
+37.139.32.0/23
+37.139.34.0/23
+37.139.40.0/22
+37.139.40.0/23
+37.139.42.0/23
+45.136.20.0/22
+45.136.20.0/23
+45.136.22.0/23
+45.84.128.0/22
+45.84.128.0/23
+45.84.130.0/23
+5.101.40.0/22
+5.101.40.0/23
+5.101.42.0/23
+5.181.60.0/22
+5.181.60.0/24
+5.181.61.0/24
+5.181.62.0/23
+5.188.140.0/22
+5.188.140.0/23
+5.188.142.0/23
+5.61.16.0/21
+5.61.16.0/22
+5.61.20.0/22
+5.61.232.0/21
+5.61.232.0/22
+5.61.236.0/23
+5.61.238.0/24
+5.61.239.0/27
+5.61.239.128/25
+5.61.239.40/29
+5.61.239.48/28
+5.61.239.64/26
+62.217.160.0/20
+62.217.160.0/21
+62.217.168.0/21
+79.137.132.0/24
+79.137.132.0/25
+79.137.132.128/25
+79.137.139.0/24
+79.137.139.0/25
+79.137.139.128/25
+79.137.157.0/25
+79.137.157.128/25
+79.137.164.0/24
+79.137.164.0/25
+79.137.164.128/25
+79.137.167.0/24
+79.137.167.0/25
+79.137.167.128/25
+79.137.174.0/23
+79.137.174.0/24
+79.137.175.0/24
+79.137.180.0/24
+79.137.180.0/25
+79.137.180.128/25
+79.137.240.0/21
+79.137.240.0/22
+79.137.244.0/22
+83.166.232.0/21
+83.166.232.0/22
+83.166.236.0/22
+83.166.248.0/21
+83.166.248.0/22
+83.166.252.0/22
+83.217.216.0/22
+83.217.216.0/23
+83.217.218.0/23
+83.222.28.0/22
+84.23.52.0/22
+84.23.52.0/23
+84.23.54.0/23
+85.114.31.108/30
+85.192.32.0/22
+85.192.32.0/23
+85.192.34.0/23
+85.198.106.0/24
+85.198.107.0/24
+87.239.104.0/21
+87.239.104.0/22
+87.239.108.0/22
+87.240.128.0/18
+87.240.128.0/19
+87.240.160.0/19
+87.242.112.0/22
+89.208.196.0/22
+89.208.196.0/23
+89.208.198.0/23
+89.208.208.0/22
+89.208.208.0/23
+89.208.210.0/23
+89.208.216.0/21
+89.208.216.0/23
+89.208.218.0/23
+89.208.220.0/22
+89.208.228.0/22
+89.208.228.0/23
+89.208.230.0/23
+89.208.84.0/22
+89.208.84.0/23
+89.208.86.0/23
+89.221.228.0/22
+89.221.232.0/21
+90.156.148.0/22
+90.156.148.0/23
+90.156.150.0/23
+90.156.212.0/22
+90.156.212.0/23
+90.156.214.0/23
+90.156.216.0/22
+90.156.216.0/23
+90.156.218.0/23
+90.156.232.0/21
+91.219.224.0/22
+91.231.132.0/22
+91.237.76.0/24
+93.153.255.84/30
+93.186.224.0/20
+93.186.224.0/21
+93.186.232.0/21
+94.100.176.0/20
+94.100.176.0/21
+94.100.184.0/21
+94.139.244.0/22
+94.139.244.0/23
+94.139.246.0/23
+95.142.192.0/20
+95.142.192.0/21
+95.142.200.0/21
+95.163.180.0/22
+95.163.180.0/23
+95.163.182.0/23
+95.163.208.0/21
+95.163.208.0/23
+95.163.210.0/23
+95.163.212.0/22
+95.163.216.0/22
+95.163.216.0/23
+95.163.218.0/23
+95.163.248.0/21
+95.163.248.0/22
+95.163.252.0/23
+95.163.254.0/23
+95.163.32.0/19
+95.163.32.0/22
+95.163.36.0/22
+95.163.40.0/21
+95.163.48.0/20
+95.213.0.0/17
+95.213.0.0/20
+95.213.16.0/21
+95.213.24.0/23
+95.213.26.0/24
+95.213.27.0/24
+95.213.28.0/24
+95.213.29.0/24
+95.213.30.0/24
+95.213.31.0/24
+95.213.32.0/24
+95.213.33.0/24
+95.213.34.0/23
+95.213.36.0/22
+95.213.40.0/21
+95.213.48.0/20
+95.213.64.0/18

blacklists/blacklist-vk-v6.txt

@@ -0,0 +1 @@
+2a00:bdc0::/29

blacklists/blacklist-vk.txt

@@ -0,0 +1,267 @@
+109.120.180.0/22
+109.120.180.0/23
+109.120.182.0/23
+109.120.188.0/22
+109.120.188.0/23
+109.120.190.0/23
+128.140.168.0/21
+128.140.168.0/23
+128.140.170.0/24
+128.140.171.0/24
+128.140.172.0/22
+130.49.224.0/19
+146.185.208.0/22
+146.185.208.0/23
+146.185.210.0/23
+146.185.240.0/22
+146.185.240.0/23
+146.185.242.0/23
+155.212.192.0/20
+176.112.168.0/21
+178.22.88.0/21
+178.22.89.64/26
+178.22.94.0/23
+178.237.16.0/20
+178.237.16.0/21
+178.237.24.0/22
+178.237.30.0/23
+185.100.104.0/22
+185.100.104.0/23
+185.100.106.0/23
+185.130.112.0/22
+185.130.112.0/23
+185.130.114.0/23
+185.131.68.0/22
+185.16.148.0/22
+185.16.148.0/23
+185.16.150.0/23
+185.16.244.0/22
+185.16.244.0/23
+185.16.246.0/23
+185.180.200.0/22
+185.187.63.0/24
+185.187.63.0/25
+185.187.63.128/25
+185.226.52.0/22
+185.226.52.0/23
+185.226.54.0/23
+185.241.192.0/22
+185.241.192.0/23
+185.241.194.0/23
+185.29.128.0/22
+185.29.130.0/24
+185.32.248.0/22
+185.32.248.0/23
+185.32.250.0/23
+185.5.136.0/22
+185.5.136.0/23
+185.5.138.0/23
+185.6.244.0/22
+185.6.244.0/23
+185.6.246.0/23
+185.86.144.0/22
+185.86.144.0/23
+185.86.146.0/23
+188.93.56.0/21
+188.93.56.0/24
+188.93.57.0/24
+188.93.58.0/24
+188.93.60.0/24
+188.93.61.0/24
+188.93.62.0/24
+193.203.40.0/22
+194.84.16.12/30
+195.211.20.0/22
+195.211.22.0/24
+195.211.23.0/24
+212.111.84.0/22
+212.233.120.0/22
+212.233.72.0/21
+212.233.88.0/21
+212.233.96.0/22
+213.219.212.0/22
+213.219.212.0/23
+213.219.214.0/23
+217.16.16.0/20
+217.16.16.0/21
+217.16.24.0/21
+217.174.188.0/23
+217.20.144.0/20
+217.20.144.0/22
+217.20.148.0/24
+217.20.149.0/24
+217.20.150.0/23
+217.20.152.0/22
+217.20.156.0/23
+217.20.158.0/24
+217.20.159.0/24
+217.69.128.0/20
+217.69.128.0/21
+217.69.136.0/21
+2a00:bdc0::/29
+37.139.32.0/22
+37.139.32.0/23
+37.139.34.0/23
+37.139.40.0/22
+37.139.40.0/23
+37.139.42.0/23
+45.136.20.0/22
+45.136.20.0/23
+45.136.22.0/23
+45.84.128.0/22
+45.84.128.0/23
+45.84.130.0/23
+5.101.40.0/22
+5.101.40.0/23
+5.101.42.0/23
+5.181.60.0/22
+5.181.60.0/24
+5.181.61.0/24
+5.181.62.0/23
+5.188.140.0/22
+5.188.140.0/23
+5.188.142.0/23
+5.61.16.0/21
+5.61.16.0/22
+5.61.20.0/22
+5.61.232.0/21
+5.61.232.0/22
+5.61.236.0/23
+5.61.238.0/24
+5.61.239.0/27
+5.61.239.128/25
+5.61.239.40/29
+5.61.239.48/28
+5.61.239.64/26
+62.217.160.0/20
+62.217.160.0/21
+62.217.168.0/21
+79.137.132.0/24
+79.137.132.0/25
+79.137.132.128/25
+79.137.139.0/24
+79.137.139.0/25
+79.137.139.128/25
+79.137.157.0/25
+79.137.157.128/25
+79.137.164.0/24
+79.137.164.0/25
+79.137.164.128/25
+79.137.167.0/24
+79.137.167.0/25
+79.137.167.128/25
+79.137.174.0/23
+79.137.174.0/24
+79.137.175.0/24
+79.137.180.0/24
+79.137.180.0/25
+79.137.180.128/25
+79.137.240.0/21
+79.137.240.0/22
+79.137.244.0/22
+83.166.232.0/21
+83.166.232.0/22
+83.166.236.0/22
+83.166.248.0/21
+83.166.248.0/22
+83.166.252.0/22
+83.217.216.0/22
+83.217.216.0/23
+83.217.218.0/23
+83.222.28.0/22
+84.23.52.0/22
+84.23.52.0/23
+84.23.54.0/23
+85.114.31.108/30
+85.192.32.0/22
+85.192.32.0/23
+85.192.34.0/23
+85.198.106.0/24
+85.198.107.0/24
+87.239.104.0/21
+87.239.104.0/22
+87.239.108.0/22
+87.240.128.0/18
+87.240.128.0/19
+87.240.160.0/19
+87.242.112.0/22
+89.208.196.0/22
+89.208.196.0/23
+89.208.198.0/23
+89.208.208.0/22
+89.208.208.0/23
+89.208.210.0/23
+89.208.216.0/21
+89.208.216.0/23
+89.208.218.0/23
+89.208.220.0/22
+89.208.228.0/22
+89.208.228.0/23
+89.208.230.0/23
+89.208.84.0/22
+89.208.84.0/23
+89.208.86.0/23
+89.221.228.0/22
+89.221.232.0/21
+90.156.148.0/22
+90.156.148.0/23
+90.156.150.0/23
+90.156.212.0/22
+90.156.212.0/23
+90.156.214.0/23
+90.156.216.0/22
+90.156.216.0/23
+90.156.218.0/23
+90.156.232.0/21
+91.219.224.0/22
+91.231.132.0/22
+91.237.76.0/24
+93.153.255.84/30
+93.186.224.0/20
+93.186.224.0/21
+93.186.232.0/21
+94.100.176.0/20
+94.100.176.0/21
+94.100.184.0/21
+94.139.244.0/22
+94.139.244.0/23
+94.139.246.0/23
+95.142.192.0/20
+95.142.192.0/21
+95.142.200.0/21
+95.163.180.0/22
+95.163.180.0/23
+95.163.182.0/23
+95.163.208.0/21
+95.163.208.0/23
+95.163.210.0/23
+95.163.212.0/22
+95.163.216.0/22
+95.163.216.0/23
+95.163.218.0/23
+95.163.248.0/21
+95.163.248.0/22
+95.163.252.0/23
+95.163.254.0/23
+95.163.32.0/19
+95.163.32.0/22
+95.163.36.0/22
+95.163.40.0/21
+95.163.48.0/20
+95.213.0.0/17
+95.213.0.0/20
+95.213.16.0/21
+95.213.24.0/23
+95.213.26.0/24
+95.213.27.0/24
+95.213.28.0/24
+95.213.29.0/24
+95.213.30.0/24
+95.213.31.0/24
+95.213.32.0/24
+95.213.33.0/24
+95.213.34.0/23
+95.213.36.0/22
+95.213.40.0/21
+95.213.48.0/20
+95.213.64.0/18

blacklists/blacklist.txt

@@ -30,7 +30,6 @@
 128.140.170.0/24
 128.140.171.0/24
 128.140.172.0/22
-128.140.173.0/24
 130.49.224.0/19
 145.255.238.240/28
 146.185.208.0/22
@@ -42,21 +41,10 @@
 149.62.55.240/30
 155.212.192.0/20
 176.109.0.0/21
-176.109.0.0/24
-176.109.1.0/24
-176.109.2.0/24
-176.109.3.0/24
-176.109.5.0/24
-176.109.6.0/24
 176.112.168.0/21
+176.116.112.0/22
 176.116.96.0/20
 178.16.156.148/30
-178.17.176.0/23
-178.17.178.0/23
-178.17.180.0/23
-178.17.182.0/23
-178.17.184.0/22
-178.17.188.0/22
 178.20.234.224/29
 178.22.88.0/21
 178.22.89.64/26
@@ -71,7 +59,6 @@
 178.237.240.0/20
 178.237.248.0/21
 178.237.28.0/24
-178.237.29.0/24
 178.237.30.0/23
 178.248.232.137/32
 178.248.232.60/32
@@ -118,21 +105,16 @@
 185.130.112.0/23
 185.130.114.0/23
 185.131.68.0/22
-185.131.68.0/23
 185.149.160.0/24
 185.149.161.0/24
 185.149.162.0/24
 185.149.163.0/24
-185.16.10.0/23
 185.16.148.0/22
 185.16.148.0/23
 185.16.150.0/23
 185.16.244.0/22
 185.16.244.0/23
 185.16.246.0/23
-185.16.246.0/24
-185.16.247.0/24
-185.16.8.0/23
 185.168.60.0/24
 185.168.61.0/24
 185.168.62.0/24
@@ -205,14 +187,12 @@
 188.93.62.0/24
 193.203.40.0/22
 193.232.70.0/24
-193.33.230.0/23
 193.47.146.0/24
 194.140.247.0/25
 194.140.247.128/25
 194.150.202.0/23
 194.165.22.0/23
 194.186.112.80/28
-194.186.63.0/24
 194.190.9.0/24
 194.215.248.0/24
 194.226.116.0/22
@@ -244,14 +224,11 @@
 195.182.155.164/30
 195.182.156.96/30
 195.209.120.0/22
-195.209.122.0/24
-195.209.123.0/24
 195.211.20.0/22
 195.211.22.0/24
 195.211.23.0/24
 195.218.175.40/29
 195.218.190.0/23
-195.226.203.0/24
 195.239.113.0/24
 195.239.247.0/24
 195.239.80.32/29
@@ -272,7 +249,6 @@
 195.98.43.104/29
 195.98.73.56/29
 195.98.77.100/30
-212.111.84.0/22
 212.119.174.0/24
 212.119.175.0/24
 212.120.169.48/29
@@ -296,15 +272,8 @@
 212.17.8.176/29
 212.17.9.144/28
 212.192.156.0/22
-212.192.156.0/24
-212.192.157.0/24
-212.192.158.0/24
 212.23.85.48/30
 212.23.85.56/29
-212.233.120.0/22
-212.233.72.0/21
-212.233.88.0/21
-212.233.96.0/22
 212.32.198.64/29
 212.48.134.192/26
 212.48.138.240/28
@@ -409,8 +378,6 @@
 213.172.27.252/30
 213.172.30.136/30
 213.172.4.192/26
-213.176.232.0/23
-213.176.234.0/23
 213.177.111.0/24
 213.183.253.56/29
 213.219.212.0/22
@@ -466,7 +433,9 @@
 217.106.203.88/29
 217.106.93.192/26
 217.106.95.112/28
+217.107.0.0/18
 217.107.200.0/21
+217.107.208.0/20
 217.107.5.112/29
 217.107.5.16/29
 217.107.5.24/29
@@ -482,7 +451,7 @@
 217.16.16.0/21
 217.16.24.0/21
 217.172.18.0/23
-217.174.188.0/22
+217.172.20.0/22
 217.174.188.0/23
 217.195.92.16/28
 217.195.93.144/29
@@ -497,7 +466,10 @@
 217.20.158.0/24
 217.20.159.0/24
 217.20.86.128/26
+217.20.86.192/27
+217.20.86.224/29
 217.20.86.232/29
+217.20.86.240/28
 217.23.88.168/29
 217.23.88.248/29
 217.27.142.176/30
@@ -506,33 +478,12 @@
 217.67.177.208/29
 217.69.128.0/20
 217.69.128.0/21
-217.69.132.0/24
 217.69.136.0/21
-2a00:1148::/29
-2a00:1148::/32
-2a00:a300::/32
-2a00:b4c0::/32
-2a00:bdc0:8000::/34
-2a00:bdc0::/33
-2a00:bdc0:c000::/35
 2a00:bdc0:e002::/48
 2a00:bdc0:e003::/48
 2a00:bdc0:e004::/48
 2a00:bdc0:e005::/48
 2a00:bdc0:e007::/48
-2a00:bdc0:f000::/36
-2a00:bdc1::/32
-2a00:bdc2::/31
-2a00:bdc4::/30
-2a0c:a9c7:156::/48
-2a0c:a9c7:157::/48
-2a0c:a9c7:158::/48
-2a14:25c0::/32
-2a14:25c5::/32
-2a14:25c6::/32
-2a14:25c7::/32
-31.148.205.0/24
-31.177.104.0/22
 31.177.95.0/24
 31.44.63.64/29
 37.139.32.0/22
@@ -554,8 +505,8 @@
 45.84.130.0/23
 46.20.70.160/28
 46.228.0.232/29
-46.245.234.0/24
 46.29.152.0/22
+46.29.156.0/23
 46.46.142.160/28
 46.46.148.40/29
 46.47.197.128/30
@@ -598,31 +549,20 @@
 5.61.239.64/26
 62.105.158.200/29
 62.112.110.64/28
-62.118.0.208/28
 62.118.101.184/29
 62.118.113.232/29
 62.118.125.188/30
 62.118.127.240/28
-62.118.15.16/28
-62.118.17.152/29
-62.118.19.112/30
-62.118.19.40/30
 62.118.193.8/29
 62.118.205.68/30
 62.118.208.100/30
 62.118.209.192/30
-62.118.21.160/29
 62.118.216.60/30
 62.118.219.184/30
 62.118.230.4/30
 62.118.233.224/29
 62.118.234.64/29
 62.118.239.128/29
-62.118.25.112/28
-62.118.37.168/30
-62.118.37.180/30
-62.118.37.4/30
-62.118.38.212/30
 62.141.125.0/25
 62.217.160.0/20
 62.217.160.0/21
@@ -631,7 +571,6 @@
 62.33.199.80/29
 62.33.34.16/28
 62.33.87.128/28
-62.33.87.152/29
 62.5.130.104/29
 62.5.132.224/29
 62.5.189.80/29
@@ -679,9 +618,6 @@
 79.137.139.0/24
 79.137.139.0/25
 79.137.139.128/25
-79.137.140.0/24
-79.137.142.0/24
-79.137.157.0/24
 79.137.157.0/25
 79.137.157.128/25
 79.137.164.0/24
@@ -701,9 +637,6 @@
 79.137.240.0/22
 79.137.244.0/22
 79.142.88.0/28
-79.143.229.0/24
-79.143.230.0/24
-79.143.232.0/24
 80.237.11.88/29
 80.237.39.112/29
 80.237.98.80/28
@@ -713,8 +646,6 @@
 80.254.100.40/29
 80.254.119.168/29
 80.73.16.0/20
-80.73.16.0/21
-80.73.16.0/24
 80.73.168.80/28
 80.73.169.244/30
 80.82.43.24/29
@@ -767,7 +698,6 @@
 81.222.209.136/29
 81.222.210.24/29
 81.3.168.148/30
-82.110.69.200/29
 82.140.65.240/29
 82.142.162.104/29
 82.151.107.136/29
@@ -853,6 +783,7 @@
 85.141.60.96/28
 85.141.61.160/28
 85.143.125.0/24
+85.146.204.44/30
 85.192.32.0/22
 85.192.32.0/23
 85.192.34.0/23
@@ -919,8 +850,6 @@
 87.240.128.0/18
 87.240.128.0/19
 87.240.160.0/19
-87.240.166.0/24
-87.240.167.0/24
 87.242.112.0/22
 87.245.133.0/24
 87.249.16.32/28
@@ -988,11 +917,6 @@
 89.21.152.104/29
 89.221.228.0/22
 89.221.232.0/21
-89.221.232.0/22
-89.221.233.0/24
-89.221.234.0/24
-89.221.235.0/24
-89.221.236.0/22
 89.28.253.168/29
 89.28.255.56/29
 90.150.176.52/30
@@ -1015,7 +939,6 @@
 90.156.148.0/22
 90.156.148.0/23
 90.156.150.0/23
-90.156.151.0/24
 90.156.212.0/22
 90.156.212.0/23
 90.156.214.0/23
@@ -1023,27 +946,13 @@
 90.156.216.0/23
 90.156.218.0/23
 90.156.232.0/21
-90.156.248.0/22
 91.103.194.184/29
-91.135.212.0/22
-91.135.216.0/21
-91.135.220.0/24
-91.135.221.0/24
-91.195.136.0/23
-91.208.20.0/24
 91.215.168.0/22
 91.217.34.0/23
 91.219.192.0/22
-91.219.224.0/22
-91.221.140.0/23
-91.221.140.0/24
-91.221.141.0/24
 91.226.250.0/24
 91.227.32.0/24
 91.231.132.0/22
-91.231.132.0/24
-91.231.133.0/24
-91.231.134.0/24
 91.237.76.0/24
 92.101.253.152/29
 92.101.253.96/29
@@ -1088,7 +997,6 @@
 94.124.192.192/29
 94.139.244.0/22
 94.139.244.0/23
-94.139.244.0/24
 94.139.246.0/23
 94.199.64.0/21
 94.25.119.228/30
@@ -1105,9 +1013,6 @@
 95.142.201.0/24
 95.142.202.0/24
 95.142.203.0/24
-95.142.204.0/23
-95.142.207.0/24
-95.163.133.0/24
 95.163.180.0/22
 95.163.180.0/23
 95.163.182.0/23
@@ -1145,6 +1050,7 @@
 95.167.5.80/28
 95.167.54.76/30
 95.167.59.244/30
+95.167.59.248/30
 95.167.64.20/30
 95.167.68.216/29
 95.167.69.116/30
@@ -1162,7 +1068,6 @@
 95.173.128.0/20
 95.173.144.0/20
 95.213.0.0/17
-95.213.0.0/18
 95.213.0.0/20
 95.213.16.0/21
 95.213.24.0/23
@@ -1177,12 +1082,7 @@
 95.213.34.0/23
 95.213.36.0/22
 95.213.40.0/21
-95.213.44.0/24
-95.213.45.0/24
 95.213.48.0/20
 95.213.64.0/18
-95.47.189.0/24
-95.47.191.0/24
-95.47.244.0/24
 95.53.248.0/29
 95.54.193.80/28

blacklists/blacklist_with_comments.txt

@@ -1,247 +1,39 @@
 # Networks announced by AS28709
-# AS-Name (ORG): VKONTAKTE-REGIONAL-CDN (VKontakte Ltd)
-178.237.28.0/24
-185.32.249.0/24
-95.142.202.0/24
-2a00:bdc0:e003::/48
-95.142.201.0/24
-185.32.251.0/24
-2a00:bdc0:e002::/48
+# AS-Name (ORG): VKONTAKTE-REGIONAL-CDN (LLC VK)
 95.142.203.0/24
+185.32.249.0/24
 2a00:bdc0:e005::/48
-178.237.22.0/24
-2a00:bdc0:e004::/48
 178.237.21.0/24
 128.140.170.0/24
-178.237.24.0/24
 2a00:bdc0:e007::/48
+178.237.22.0/24
+185.32.251.0/24
+95.142.202.0/24
+2a00:bdc0:e004::/48
+2a00:bdc0:e003::/48
+2a00:bdc0:e002::/48
+95.142.201.0/24
+178.237.24.0/24
+178.237.28.0/24
+# Networks announced by AS28709
+# AS-Name (ORG): VKONTAKTE-REGIONAL-CDN (LLC VK)
+95.142.203.0/24
+185.32.249.0/24
+2a00:bdc0:e005::/48
+178.237.21.0/24
+128.140.170.0/24
+2a00:bdc0:e007::/48
+178.237.22.0/24
+185.32.251.0/24
+95.142.202.0/24
+2a00:bdc0:e004::/48
+2a00:bdc0:e003::/48
+2a00:bdc0:e002::/48
+95.142.201.0/24
+178.237.24.0/24
+178.237.28.0/24
 # Networks announced by AS34500
 # AS-Name (ORG): CTSPI (FGUP CTSPI MGA Russia)
-80.73.16.0/21
-80.73.16.0/20
-80.73.16.0/24
-# Networks announced by AS43038
-# AS-Name (ORG): TVK-AS (MTS PJSC)
-213.176.232.0/23
-213.176.234.0/23
-178.17.182.0/23
-178.17.176.0/23
-91.208.20.0/24
-178.17.178.0/23
-79.143.232.0/24
-79.143.230.0/24
-195.226.203.0/24
-79.143.229.0/24
-178.17.180.0/23
-193.33.230.0/23
-178.17.184.0/22
-178.17.188.0/22
-# Networks announced by AS43720
-# AS-Name (ORG): TVK-AS (MTS OJSC)
-91.135.212.0/22
-91.135.220.0/24
-91.135.221.0/24
-91.195.136.0/23
-91.135.216.0/21
-# Networks announced by AS47541
-# AS-Name (ORG): VKONTAKTE-SPB-AS (VKontakte Ltd)
-2a00:bdc0::/33
-2a00:bdc4::/30
-2a14:25c7::/32
-93.186.224.0/21
-79.137.180.0/24
-185.32.248.0/22
-95.213.0.0/17
-217.69.132.0/24
-95.142.192.0/21
-95.213.0.0/18
-87.240.166.0/24
-2a00:bdc0:c000::/35
-93.186.232.0/21
-87.240.167.0/24
-91.231.133.0/24
-95.142.192.0/20
-185.131.68.0/23
-2a00:bdc1::/32
-91.231.134.0/24
-2a00:bdc2::/31
-79.137.139.0/24
-2a14:25c5::/32
-95.213.45.0/24
-2a00:bdc0:8000::/34
-87.240.128.0/18
-91.231.132.0/24
-95.213.44.0/24
-79.137.183.0/24
-79.137.164.0/24
-# Networks announced by AS47542
-# AS-Name (ORG): VKONTAKTE-MSK-CDN-AS (VKontakte Ltd)
-95.213.45.0/24
-2a00:bdc0:f000::/36
-95.142.207.0/24
-87.240.166.0/24
-128.140.173.0/24
-87.240.167.0/24
-95.142.204.0/23
-95.213.44.0/24
-# Networks announced by AS47764
-# AS-Name (ORG): VK-AS (LLC VK)
-212.233.120.0/22
-185.16.244.0/23
-185.187.63.0/24
-212.233.96.0/22
-87.242.112.0/22
-91.231.132.0/22
-95.163.133.0/24
-155.212.192.0/20
-79.137.174.0/23
-2a00:1148::/32
-176.112.168.0/21
-212.111.84.0/22
-185.16.244.0/22
-90.156.212.0/22
-37.139.32.0/22
-109.120.180.0/22
-89.208.218.0/23
-94.139.244.0/24
-178.237.29.0/24
-185.86.144.0/22
-90.156.151.0/24
-128.140.168.0/21
-185.16.247.0/24
-2a00:b4c0::/32
-91.231.134.0/24
-84.23.52.0/22
-90.156.232.0/21
-5.181.61.0/24
-31.177.104.0/22
-217.16.16.0/20
-45.84.128.0/22
-89.208.216.0/23
-45.136.20.0/22
-5.101.40.0/22
-89.208.228.0/22
-5.61.232.0/21
-185.131.68.0/22
-188.93.56.0/21
-89.221.235.0/24
-83.166.232.0/21
-91.231.133.0/24
-2a14:25c0::/32
-79.137.240.0/21
-89.221.228.0/22
-95.163.180.0/22
-185.241.192.0/22
-2a14:25c6::/32
-213.219.212.0/22
-217.174.188.0/22
-83.217.216.0/22
-95.163.208.0/21
-89.221.236.0/22
-2a00:1148::/29
-90.156.148.0/22
-212.233.72.0/21
-146.185.208.0/22
-178.22.88.0/21
-83.222.28.0/22
-94.139.244.0/22
-194.186.63.0/24
-89.208.220.0/22
-91.219.224.0/22
-178.237.16.0/20
-185.226.52.0/22
-217.20.144.0/20
-185.16.246.0/24
-5.181.60.0/22
-5.61.16.0/21
-85.192.32.0/22
-185.180.200.0/22
-83.166.248.0/21
-217.69.128.0/20
-90.156.216.0/22
-95.163.32.0/19
-95.163.216.0/22
-37.139.40.0/22
-87.239.104.0/21
-130.49.224.0/19
-89.208.196.0/22
-89.208.208.0/22
-5.188.140.0/22
-193.203.40.0/22
-195.218.190.0/23
-212.233.88.0/21
-185.16.148.0/22
-79.137.157.0/24
-185.100.104.0/22
-94.100.176.0/20
-185.130.112.0/22
-89.221.232.0/22
-195.211.20.0/22
-95.163.248.0/21
-146.185.240.0/22
-89.208.84.0/22
-109.120.188.0/22
-62.217.160.0/20
-185.5.136.0/22
-# Networks announced by AS49281
-# AS-Name (ORG): M100 (M100 LLC)
-2a00:a300::/32
-85.198.106.0/24
-# Networks announced by AS49797
-# AS-Name (ORG): NESSLY (LLC VK)
-79.137.142.0/24
-# Networks announced by AS49988
-# AS-Name (ORG): odkl-as (LLC VK)
-85.198.107.0/24
-79.137.140.0/24
-# Networks announced by AS51932
-# AS-Name (ORG): ORVD-AS (FGUP Goskorporatsiya po OrVD)
-91.221.140.0/24
-91.221.141.0/24
-91.221.140.0/23
-# Networks announced by AS57835
-# AS-Name (ORG): FGUP-ELEKTROSVYAZ-AS (JSC ELEKTROSVYAZ)
-176.109.1.0/24
-176.109.5.0/24
-176.109.6.0/24
-176.109.3.0/24
-176.109.2.0/24
-176.109.0.0/24
-# Networks announced by AS57973
-# AS-Name (ORG): CLOUDGAMING-REGION-AS (LLC VK)
-89.221.234.0/24
-46.245.234.0/24
-195.211.22.0/24
-89.221.233.0/24
-# Networks announced by AS60863
-# AS-Name (ORG): VK-AS (LLC VK)
-185.6.244.0/22
-# Networks announced by AS61280
-# AS-Name (ORG): CMU_GRCHC (FGUP "GRCHC")
-212.192.156.0/24
-2a0c:a9c7:156::/48
-2a0c:a9c7:157::/48
-185.224.228.0/24
-195.209.123.0/24
-185.224.230.0/24
-185.224.231.0/24
-212.192.158.0/24
-195.209.122.0/24
-212.192.157.0/24
-185.224.229.0/24
-2a0c:a9c7:158::/48
-# Networks announced by AS62243
-# AS-Name (ORG): VKONTAKTE-SPBZN-AS (VKontakte Ltd)
-185.29.130.0/24
-# Networks announced by AS62331
-# AS-Name (ORG): TVK-AS (Media Holding TVK Ltd.)
-95.47.189.0/24
-95.47.191.0/24
-95.47.244.0/24
-31.148.205.0/24
-# Networks announced by AS197153
-# AS-Name (ORG): guvd (Glavnoe Upravlenie Vnutrennih Del po Sverdlovskoi Oblasti)
-91.217.34.0/23
 # Network name: Roskomnadzor-net
 46.228.0.232/29
 87.226.213.0/24
@@ -250,10 +42,11 @@
 78.108.200.0/24
 # Network name: RU-RTCOMM-20001220
 217.106.0.0/16
+217.107.0.0/18
 217.107.200.0/21
+217.107.208.0/20
 # Network name: MMT
 46.61.208.0/24
-82.110.69.200/29
 # Network name: RTCOMM-GNIVC
 81.176.70.0/26
 81.176.235.0/27
@@ -265,6 +58,7 @@
 95.173.128.0/20
 95.173.144.0/20
 176.116.96.0/20
+176.116.112.0/22
 185.183.172.0/23
 185.183.174.0/23
 194.226.80.0/21
@@ -285,6 +79,7 @@
 95.173.128.0/20
 95.173.144.0/20
 176.116.96.0/20
+176.116.112.0/22
 185.183.172.0/23
 185.183.174.0/23
 194.226.80.0/21
@@ -308,6 +103,8 @@
 # Network name: NCPLG-NET
 85.90.98.144/30
 194.150.202.0/23
+# Network name: vei
+85.146.204.44/30
 # Network name: FSKN-Vologda
 95.167.76.160/27
 # Network name: RU-CHUVASHIA-NALOG
@@ -369,6 +166,7 @@
 95.173.128.0/20
 95.173.144.0/20
 176.116.96.0/20
+176.116.112.0/22
 185.183.172.0/23
 185.183.174.0/23
 194.226.80.0/21
@@ -378,6 +176,7 @@
 # Network name: RU_FSKN
 92.50.198.72/30
 95.167.59.244/30
+95.167.59.248/30
 # Network name: UMNS-NOVGOROD
 213.59.91.48/29
 # Network name: FOMS
@@ -399,6 +198,7 @@
 217.106.147.8/29
 # Network name: GLAVNIVZ
 46.29.152.0/22
+46.29.156.0/23
 185.168.60.0/24
 185.168.61.0/24
 185.168.62.0/24
@@ -436,7 +236,10 @@
 94.25.70.64/30
 # Network name: MNSHMAO
 217.20.86.128/26
+217.20.86.192/27
+217.20.86.224/29
 217.20.86.232/29
+217.20.86.240/28
 # Network name: UMNS-TUMEN
 213.59.59.120/29
 213.59.59.144/29
@@ -575,6 +378,7 @@
 77.37.128.0/17
 # Network name: STARNET-VPN
 217.172.18.0/23
+217.172.20.0/22
 # Network name: CCC-HC
 89.111.176.0/22
 # Network name: RU-NIC-HOSTING
@@ -599,70 +403,22 @@
 45.136.20.0/22
 # NET-Name: 62.217.160.0/20 RU-NETBRIDGE-20020410 (LLC VK)
 62.217.160.0/20
-# NET-Name: 79.137.132.0/24 RU-VKONTAKTE-20071018 (VKontakte Ltd)
+# NET-Name: 79.137.132.0/24 RU-VKONTAKTE-20071018 (LLC VK)
 79.137.132.0/24
-# NET-Name: 79.137.139.0/24 RU-VKONTAKTE-20071018 (VKontakte Ltd)
+# NET-Name: 79.137.139.0/24 RU-VKONTAKTE-20071018 (LLC VK)
 79.137.139.0/24
-# NET-Name: 79.137.164.0/24 RU-VKONTAKTE-20071018 (VKontakte Ltd)
+# NET-Name: 79.137.164.0/24 RU-VKONTAKTE-20071018 (LLC VK)
 79.137.164.0/24
-# NET-Name: 79.137.167.0/24 RU-VKONTAKTE-20071018 (VKontakte Ltd)
+# NET-Name: 79.137.167.0/24 RU-VKONTAKTE-20071018 (LLC VK)
 79.137.167.0/24
 # NET-Name: 79.137.174.0/23 RU-NETBRIDGE-20071018 (LLC VK)
 79.137.174.0/23
-# NET-Name: 79.137.180.0/24 RU-VKONTAKTE-20071018 (VKontakte Ltd)
+# NET-Name: 79.137.180.0/24 RU-VKONTAKTE-20071018 (LLC VK)
 79.137.180.0/24
 # NET-Name: 79.137.240.0/21 RU-NETBRIDGE-20071018 (LLC VK)
 79.137.240.0/21
 # NET-Name: 80.73.16.0/20 RU-CTSPI-20050201 (FGUP CTSPI MGA Russia)
 80.73.16.0/20
-# NET-Name: 83.166.232.0/21 RU-NETBRIDGE-20040611 (LLC VK)
-83.166.232.0/21
-# NET-Name: 83.166.248.0/21 RU-NETBRIDGE-20040611 (LLC VK)
-83.166.248.0/21
-# NET-Name: 83.217.216.0/22 RU-NETBRIDGE-20040310 (LLC VK)
-83.217.216.0/22
-# NET-Name: 83.222.28.0/22 RU-ODNOKLASSNIKI-20040421 (LLC VK)
-83.222.28.0/22
-# NET-Name: 84.23.52.0/22 RU-NETBRIDGE-20041012 (LLC VK)
-84.23.52.0/22
-# NET-Name: 85.192.32.0/22 RU-NETBRIDGE-20041206 (LLC VK)
-85.192.32.0/22
-# NET-Name: 87.239.104.0/21 RU-NETBRIDGE-20060104 (LLC VK)
-87.239.104.0/21
-# NET-Name: 87.240.128.0/18 RU-VKONTAKTE-20091223 (VKontakte Ltd)
-87.240.128.0/18
-# NET-Name: 87.242.112.0/22 RU-ODNOKLASSNIKI-20050722 (LLC VK)
-87.242.112.0/22
-# NET-Name: 89.208.84.0/22 RU-NETBRIDGE-20060418 (LLC VK)
-89.208.84.0/22
-# NET-Name: 89.208.196.0/22 RU-NETBRIDGE-20060418 (LLC VK)
-89.208.196.0/22
-# NET-Name: 89.208.208.0/22 RU-NETBRIDGE-20060418 (LLC VK)
-89.208.208.0/22
-# NET-Name: 89.208.216.0/21 RU-NETBRIDGE-20060418 (LLC VK)
-89.208.216.0/21
-# NET-Name: 89.208.228.0/22 RU-NETBRIDGE-20060418 (LLC VK)
-89.208.228.0/22
-# NET-Name: 89.221.228.0/22 RU-NETBRIDGE-20061011 (LLC VK)
-89.221.228.0/22
-# NET-Name: 89.221.232.0/21 RU-NETBRIDGE-20061011 (LLC VK)
-89.221.232.0/21
-# NET-Name: 90.156.148.0/22 RU-NETBRIDGE-20061117 (LLC VK)
-90.156.148.0/22
-# NET-Name: 90.156.212.0/22 RU-NETBRIDGE-20061117 (LLC VK)
-90.156.212.0/22
-# NET-Name: 90.156.216.0/22 RU-NETBRIDGE-20061117 (LLC VK)
-90.156.216.0/22
-# NET-Name: 90.156.232.0/21 RU-NETBRIDGE-20061117 (LLC VK)
-90.156.232.0/21
-# NET-Name: 90.156.248.0/22 RU-NETBRIDGE-20061117 (LLC VK)
-90.156.248.0/22
-# NET-Name: 91.217.34.0/23 GUVD (Glavnoe Upravlenie Vnutrennih Del po Sverdlovskoi Oblasti)
-91.217.34.0/23
-# NET-Name: 91.221.140.0/23 ORVD-NET (FGUP Goskorporatsiya po OrVD)
-91.221.140.0/23
-# NET-Name: 91.231.132.0/22 RU-NETBRIDGE (LLC VK)
-91.231.132.0/22
 # NET-Name: 212.57.133.0/24 CHUVD ROSTELECOM-MNT () [Computing Center of Regional Police Department of Chelyabinsk region]
 212.57.133.0/24
 # NET-Name: 213.147.55.108/30 CONNECTORS MTU-NOC () [Subnetwork for TM10068-RIPE]
@@ -711,21 +467,15 @@
 195.54.20.168/29
 # NET-Name: 195.98.77.100/30 VRNFGUPIPF-NET IC-VORONEZH-MNT () [IPF Voronezh Voronezh]
 195.98.77.100/30
-# NET-Name: 62.118.25.112/28 FGUP-NII-truda-i-social-nogo-strahovaniya MTU-NOC () [FGUP "NII truda i social'nogo strahovaniya" Moscow, Russia]
-62.118.25.112/28
-# NET-Name: 62.118.15.16/28 FGUP-Rosstrojizyskaniya MTU-NOC () [FGUP "Rosstrojizyskaniya" Moscow, Russia]
-62.118.15.16/28
-# NET-Name: 62.118.0.208/28 FGUP-MEZ-MPS-Rossii MTU-NOC () [FGUP MEZ MPS Rossii Moscow, Russia]
-62.118.0.208/28
 # NET-Name: 81.17.2.192/28 NEXCOM-NET TRON-MNT () [Ekaterinburg, Company Tron Clients Ethernet, GUVD]
 81.17.2.192/28
 # NET-Name: 81.17.3.16/29 NEXCOM-GUVD TRON-MNT () [Ekaterinburg, Company Tron Clients Ethernet, GUVD]
 81.17.3.16/29
-# NET-Name: 212.120.184.48/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 38, Sovetskaya str., Chaikovskiy,]
+# NET-Name: 212.120.184.48/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 38, Sovetskaya str., Chaikovskiy,]
 212.120.184.48/29
-# NET-Name: 212.120.184.64/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm, Russia]
+# NET-Name: 212.120.184.64/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm, Russia]
 212.120.184.64/29
-# NET-Name: 212.120.190.112/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 27, Karla Marksa str., Kungur,]
+# NET-Name: 212.120.190.112/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 27, Karla Marksa str., Kungur,]
 212.120.190.112/29
 # NET-Name: 82.200.22.144/28 fgup_omo_network ZSTTK-MNT () [FGUP OMO im.Baranova West Siberia, Russia]
 82.200.22.144/28
@@ -805,7 +555,7 @@
 213.242.215.68/30
 # NET-Name: 85.90.120.72/29 Rostehinventarizaciya-NET MNT-TELECOM-TZ () [FGUP "Rostehinventarizaciya"]
 85.90.120.72/29
-# NET-Name: 212.120.174.88/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 67, Lunacharskogo str., Nytva,]
+# NET-Name: 212.120.174.88/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 67, Lunacharskogo str., Nytva,]
 212.120.174.88/29
 # NET-Name: 85.90.102.168/29 ZARUBEZhUGOL-NET MNT-TELECOM-TZ () [FGUP Vneshneekonomicheskoe Ob'edinenie "ZARUBEZhUGOL'"]
 85.90.102.168/29
@@ -823,7 +573,7 @@
 212.48.138.240/28
 # NET-Name: 62.63.98.24/29 Moselectrotyagstroy-Net ARTX-RIPE-MNT () [SMP 643 Filial FGUP "Trest Moselectrotyagstroy" Moscow]
 62.63.98.24/29
-# NET-Name: 212.120.169.48/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm, Russia 80, Gagarina park., Perm,]
+# NET-Name: 212.120.169.48/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm, Russia 80, Gagarina park., Perm,]
 212.120.169.48/29
 # NET-Name: 85.90.127.16/29 Zarubezhatomenergostroy-NET MNT-TELECOM-TZ () [FGUP "VPO "Zarubezhatomenergostroy"]
 85.90.127.16/29
@@ -833,16 +583,10 @@
 89.109.250.28/30
 # NET-Name: 85.90.125.96/29 NICITEP-NET MNT-TELECOM-TZ () [FGUP NIC ITEP]
 85.90.125.96/29
-# NET-Name: 62.118.37.180/30 FGUP-CNIIGAIK MTU-NOC () [FGUP CNIIGAiK Moscow, Russia]
-62.118.37.180/30
 # NET-Name: 81.195.177.160/30 MTU-CUST-392C6D30 MTU-NOC () [FGUP "Giprozheldorstroj"]
 81.195.177.160/30
-# NET-Name: 62.118.38.212/30 MTU-CUST-1A3A43A6 MTU-NOC () [FGUP "Centr komplektacii uchebnih zavedenij"]
-62.118.38.212/30
 # NET-Name: 62.5.218.204/30 MTU-CUST-ECCC30E8 MTU-NOC () [FGUP "GOSGISCENTR"]
 62.5.218.204/30
-# NET-Name: 62.118.37.168/30 MTU-CUST-ECCC30E8 MTU-NOC () [FGUP "GOSGISCENTR"]
-62.118.37.168/30
 # NET-Name: 62.118.234.64/29 MTU-CUST-22A9114E MTU-NOC () [FGUP Eksperimentalnij optiko-mehanicheskij zavod]
 62.118.234.64/29
 # NET-Name: 62.118.219.184/30 MTU-CUST-111E7A6D MTU-NOC () [FGUP "Mos.zavod po obrabotke spec. splavov"]
@@ -859,8 +603,6 @@
 81.195.45.64/30
 # NET-Name: 62.5.189.80/29 MTU-CUST-896A2DE8 MTU-NOC () [FGUP "Filmofond kinostudii "Sojuzmultfilm"]
 62.5.189.80/29
-# NET-Name: 62.118.19.112/30 MTU-CUST-1A5806FD MTU-NOC () [FGUP "Zdraveksport"]
-62.118.19.112/30
 # NET-Name: 81.195.244.32/29 MTU-CUST-DFD35E9A MTU-NOC () [FGUP "Rusekotrans"]
 81.195.244.32/29
 # NET-Name: 62.118.209.192/30 MTU-CUST-0034780C MTU-NOC () [FGUP "Zavod "TOPAZ"]
@@ -873,16 +615,12 @@
 195.42.75.8/29
 # NET-Name: 81.195.124.52/30 MTU-CUST-F551ECEE MTU-NOC () [SU-334 FGUP "Tresta Moselektrotjagstroj"]
 81.195.124.52/30
-# NET-Name: 62.118.17.152/29 MTU-CUST-1EC64BF9 MTU-NOC () [FGUP GosNII OS]
-62.118.17.152/29
 # NET-Name: 62.118.193.8/29 MTU-CUST-40ACE85E MTU-NOC () [FGUP Izdatelstvo "Izvestija" UD P RF]
 62.118.193.8/29
 # NET-Name: 81.195.36.48/28 MTU-CUST-33EB33B2 MTU-NOC () [FGUP KBTM]
 81.195.36.48/28
 # NET-Name: 81.195.155.0/30 MTU-CUST-3C2C586F MTU-NOC () [FGUP Moskovskoe mashinostroitelnoe proizvodstvennoe predprijatie "Saljut"]
 81.195.155.0/30
-# NET-Name: 62.118.21.160/29 MTU-CUST-F43B8CF7 MTU-NOC () [FGUP "NPP VNIIEM"]
-62.118.21.160/29
 # NET-Name: 62.5.242.80/28 MTU-CUST-5250F868 MTU-NOC () [FGUP CNIIAG]
 62.5.242.80/28
 # NET-Name: 81.195.150.248/30 MTU-CUST-E232EA85 MTU-NOC () [427 UNR - filial FGUP "SU MVO MO RF"]
@@ -901,19 +639,15 @@
 81.195.125.96/30
 # NET-Name: 62.118.230.4/30 MTU-CUST-5F25932F MTU-NOC () [FGUP "NIIIT"]
 62.118.230.4/30
-# NET-Name: 62.118.37.4/30 MTU-CUST-AC3DCE8D MTU-NOC () [FGUP "Centrorgtrudavtotrans"]
-62.118.37.4/30
 # NET-Name: 81.195.182.64/28 MTU-CUST-B40F23BD MTU-NOC () [FGUP NIC ITEP]
 81.195.182.64/28
-# NET-Name: 62.118.19.40/30 MTU-CUST-42DE527C MTU-NOC () [FGUP "GosNII BP"]
-62.118.19.40/30
 # NET-Name: 81.195.50.72/29 MTU-CUST-A89FBE5D MTU-NOC () [FGUP ATEKS]
 81.195.50.72/29
 # NET-Name: 81.195.118.128/30 MTU-CUST-73D8C4FE MTU-NOC () [Stroitelno-montazhnij poezd N 250 filial FGUP "Trest Moselektrotjagstroj"]
 81.195.118.128/30
 # NET-Name: 195.170.218.24/29 INF-CLNT-TITAN INFOTEL-MNT () [CLIENT FGUP SKB Titan]
 195.170.218.24/29
-# NET-Name: 212.120.189.208/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 5, Entuziastov str., Krasnokamsk,]
+# NET-Name: 212.120.189.208/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 5, Entuziastov str., Krasnokamsk,]
 212.120.189.208/29
 # NET-Name: 80.254.119.168/29 GUOVOUVD-SHAKHT-NET ROSTOV-TELEGRAF-MNT () [GU OVO UVD Shakhtu Shaxtu, Pariskoi Kommunu str., 85 Shaxtu, Rostovskaia oblast, 346500]
 80.254.119.168/29
@@ -1033,7 +767,7 @@
 195.54.221.0/24
 # NET-Name: 195.131.7.8/29 UVDT-NET TI-MNT () [IP-Network for office]
 195.131.7.8/29
-# NET-Name: 80.82.43.24/29 FGUP-OHRANA-VO VSI-MNT () [Filial FGUP "Ohrana" MVD Russia from Voronezh region]
+# NET-Name: 80.82.43.24/29 FGUP-OHRANA-VO ROSTELECOM-MNT () [Filial FGUP "Ohrana" MVD Russia from Voronezh region]
 80.82.43.24/29
 # NET-Name: 213.85.2.64/28 UTC-Novogorsk cnt-mnt () [FGUP UTC "Novogorsk"]
 213.85.2.64/28
@@ -1065,13 +799,13 @@
 78.37.69.160/27
 # NET-Name: 93.153.194.160/29 FGUP-GOSZEMKADASTRSEMKA-LAN PSTAR-MNT () [FGUP Goszemkadastrsemka St.Petersburg JSC PeterStar]
 93.153.194.160/29
-# NET-Name: 195.54.28.72/30 OHRANA-MVD MFIST-MNT () [FGUP Ohrana 18, Severokrimskaya str., Chelyabinsk, Russia,]
+# NET-Name: 195.54.28.72/30 OHRANA-MVD ROSTELECOM-MNT () [FGUP Ohrana 18, Severokrimskaya str., Chelyabinsk, Russia,]
 195.54.28.72/30
 # NET-Name: 62.63.100.160/30 ROSOBORONSTANDART-Net ARTX-RIPE-MNT () [FGUP "ROSOBORONSTANDART" Moscow, Russia]
 62.63.100.160/30
 # NET-Name: 92.39.106.20/30 VLG-UVD_Irk20 UNICO-MNT () [Volgograd Police Department]
 92.39.106.20/30
-# NET-Name: 212.57.159.0/24 UFPS MFIST-MNT () [FGUP "Pochta Rossii" Chelyabinsk, Russia]
+# NET-Name: 212.57.159.0/24 UFPS ROSTELECOM-MNT () [FGUP "Pochta Rossii" Chelyabinsk, Russia]
 212.57.159.0/24
 # NET-Name: 94.25.57.224/28 UFSB ROSTELECOM-MNT () [JSC Rostelecom Client (city Rostov-na-Donu)]
 94.25.57.224/28
@@ -1347,13 +1081,13 @@
 93.153.183.104/30
 # NET-Name: 188.128.89.0/30 FGUP_NIIR ROSTELECOM-MNT () [Ticket 09-10814-1]
 188.128.89.0/30
-# NET-Name: 88.83.195.248/30 FGUP-NET VSI-MNT () [FGUP Ohrana Voronezh, Russia]
+# NET-Name: 88.83.195.248/30 FGUP-NET ROSTELECOM-MNT () [FGUP Ohrana Voronezh, Russia]
 88.83.195.248/30
-# NET-Name: 90.150.189.32/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 11, Kommunarov str., Lysva,]
+# NET-Name: 90.150.189.32/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 11, Kommunarov str., Lysva,]
 90.150.189.32/29
-# NET-Name: 83.219.13.128/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 24, Karla Marksa str., Karagay,]
+# NET-Name: 83.219.13.128/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 24, Karla Marksa str., Karagay,]
 83.219.13.128/29
-# NET-Name: 83.219.13.184/29 GIBDD-GUVD-PERM MFIST-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 227, 20 let pobedy str., Solikamsk,]
+# NET-Name: 83.219.13.184/29 GIBDD-GUVD-PERM ROSTELECOM-MNT () [Traffic police regiment of the Municipal Department of Internal Affairs on the Perm edge Perm region, Russia 227, 20 let pobedy str., Solikamsk,]
 83.219.13.184/29
 # NET-Name: 95.167.176.0/23 Pochta-Russia_Volgograd ROSTELECOM-MNT () [UFPS Sviazi Volgogradskoy Oblasti - Filial FGUP Pochta Rossii]
 95.167.176.0/23
@@ -1857,8 +1591,6 @@
 5.61.236.0/23
 # NET-Name: 5.61.238.0/24 VK-FRONT VKCOMPANY-MNT () [VK Services]
 5.61.238.0/24
-# NET-Name: 178.237.29.0/24 VK-FRONT VKCOMPANY-MNT () [VK Services]
-178.237.29.0/24
 # NET-Name: 95.163.32.0/22 VK-FRONT VKCOMPANY-MNT () [VK Services]
 95.163.32.0/22
 # NET-Name: 95.163.36.0/22 VK-FRONT VKCOMPANY-MNT () [VK Services]
@@ -1933,8 +1665,6 @@
 213.219.212.0/23
 # NET-Name: 213.219.214.0/23 VKCS VKCOMPANY-MNT () [VK Cloud Solutions VK Hosting]
 213.219.214.0/23
-# NET-Name: 62.33.87.152/29 STAVROPOL2-NET TRANSTELECOM-MNT () [(RS000504) UFSB, Stavropol, Russia]
-62.33.87.152/29
 # NET-Name: 89.208.196.0/23 VKCS VKCOMPANY-MNT () [VK Cloud Solutions VK Hosting]
 89.208.196.0/23
 # NET-Name: 89.208.198.0/23 VKCS VKCOMPANY-MNT () [VK Cloud Solutions VK Hosting]
@@ -2087,10 +1817,6 @@
 185.100.106.0/23
 # NET-Name: 217.174.188.0/23 ODNOKLASSNIKI-FRONT VKCOMPANY-MNT () [Odnoklassniki Services]
 217.174.188.0/23
-# NET-Name: 185.16.8.0/23 MY-GAMES VKCOMPANY-MNT () [my.games services NIVAL]
-185.16.8.0/23
-# NET-Name: 185.16.10.0/23 MY-GAMES VKCOMPANY-MNT () [my.games services NIVAL]
-185.16.10.0/23
 # NET-Name: 84.23.52.0/23 VKCS VKCOMPANY-MNT () [VK Cloud Solutions VK Hosting]
 84.23.52.0/23
 # NET-Name: 84.23.54.0/23 VKCS VKCOMPANY-MNT () [VK Cloud Solutions VK Hosting]

blacklists_iptables/README.md

@@ -1,109 +0,0 @@
-# IPTables/IPSet Blacklist Configurations
-
-Auto-generated ipset configuration files for blocking networks and IP addresses with iptables/ip6tables.
-
-## Available Files
-
-### IPv4 Only
-
-- **`blacklist-v4.ipset`** - Contains only IPv4 networks (806 entries)
-
-### IPv6 Only
-
-- **`blacklist-v6.ipset`** - Contains only IPv6 networks (3 entries)
-
-### Mixed IPv4/IPv6
-
-- **`blacklist.ipset`** - Contains both IPv4 and IPv6 sets (809 total entries)
-
-## Usage
-
-### 1. Load the IPSet
-
-```bash
-# For IPv4 only
-ipset restore < blacklist-v4.ipset
-
-# For IPv6 only
-ipset restore < blacklist-v6.ipset
-
-# For both IPv4 and IPv6 (loads both sets)
-ipset restore < blacklist.ipset
-```
-
-### 2. Apply IPTables Rules
-
-```bash
-# For IPv4
-iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP
-iptables -I FORWARD -m set --match-set blacklist-v4 src -j DROP
-
-# For IPv6
-ip6tables -I INPUT -m set --match-set blacklist-v6 src -j DROP
-ip6tables -I FORWARD -m set --match-set blacklist-v6 src -j DROP
-```
-
-### 3. Persist Rules (Optional)
-
-To make the rules persistent across reboots:
-
-**On Debian/Ubuntu:**
-
-```bash
-# Save iptables rules
-iptables-save > /etc/iptables/rules.v4
-ip6tables-save > /etc/iptables/rules.v6
-
-# Save ipset
-ipset save > /etc/ipset.conf
-```
-
-**On RHEL/CentOS:**
-
-```bash
-# Save iptables rules
-service iptables save
-service ip6tables save
-
-# Save ipset
-ipset save > /etc/sysconfig/ipset
-```
-
-### 4. Update Existing Sets
-
-To update the blacklist without restarting iptables:
-
-```bash
-# Flush and reload
-ipset flush blacklist-v4
-ipset restore < blacklist-v4.ipset
-```
-
-### 5. Remove Sets
-
-```bash
-# Remove IPv4 set
-ipset flush blacklist-v4
-ipset destroy blacklist-v4
-
-# Remove IPv6 set
-ipset flush blacklist-v6
-ipset destroy blacklist-v6
-```
-
-## Performance Benefits
-
-IPSet uses hash tables for O(1) lookup performance, making it ideal for large blacklists:
-
-- Much faster than individual iptables rules
-- Minimal CPU overhead
-- Supports up to 65536 entries per set (configurable)
-- Kernel-level implementation for maximum efficiency
-
-## Automatic Updates
-
-These files are automatically regenerated when the blacklists are updated via the GitHub Actions workflow.
-
-## Source
-
-Generated from the blacklist files in the `blacklists/` directory.

blacklists_iptables/blacklist-v4.ipset

@@ -1,21 +1,21 @@
 # IPSet blacklist configuration (IPv4 only)
 # Auto-generated from blacklist-v4.txt
-# Last updated: 2025-12-11 06:25:09 UTC
+# Last updated: 2026-03-29 06:56:51 UTC
 #
 # Usage:
 #   1. Load the ipset:
 #      ipset restore < blacklist-v4.ipset
 #
 #   2. Use with iptables/ip6tables:
-#      iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP
-#      iptables -I FORWARD -m set --match-set blacklist-v4 src -j DROP
+#      iptables -I INPUT -m set --match-set blacklist-v4 src -m conntrack --ctstate NEW -j DROP
+#      iptables -I FORWARD -m set --match-set blacklist-v4 src -m conntrack --ctstate NEW -j DROP
 #
 #   3. To flush/delete the set:
 #      ipset flush blacklist-v4
 #      ipset destroy blacklist-v4
 #
 
-create blacklist-v4 hash:net family inet hashsize 1165 maxelem 2330
+create blacklist-v4 hash:net family inet hashsize 1083 maxelem 2166
 add blacklist-v4 109.120.180.0/22
 add blacklist-v4 109.120.180.0/23
 add blacklist-v4 109.120.182.0/23
@@ -48,7 +48,6 @@ add blacklist-v4 128.140.168.0/23
 add blacklist-v4 128.140.170.0/24
 add blacklist-v4 128.140.171.0/24
 add blacklist-v4 128.140.172.0/22
-add blacklist-v4 128.140.173.0/24
 add blacklist-v4 130.49.224.0/19
 add blacklist-v4 145.255.238.240/28
 add blacklist-v4 146.185.208.0/22
@@ -60,21 +59,10 @@ add blacklist-v4 146.185.242.0/23
 add blacklist-v4 149.62.55.240/30
 add blacklist-v4 155.212.192.0/20
 add blacklist-v4 176.109.0.0/21
-add blacklist-v4 176.109.0.0/24
-add blacklist-v4 176.109.1.0/24
-add blacklist-v4 176.109.2.0/24
-add blacklist-v4 176.109.3.0/24
-add blacklist-v4 176.109.5.0/24
-add blacklist-v4 176.109.6.0/24
 add blacklist-v4 176.112.168.0/21
+add blacklist-v4 176.116.112.0/22
 add blacklist-v4 176.116.96.0/20
 add blacklist-v4 178.16.156.148/30
-add blacklist-v4 178.17.176.0/23
-add blacklist-v4 178.17.178.0/23
-add blacklist-v4 178.17.180.0/23
-add blacklist-v4 178.17.182.0/23
-add blacklist-v4 178.17.184.0/22
-add blacklist-v4 178.17.188.0/22
 add blacklist-v4 178.20.234.224/29
 add blacklist-v4 178.22.88.0/21
 add blacklist-v4 178.22.89.64/26
@@ -89,7 +77,6 @@ add blacklist-v4 178.237.24.0/24
 add blacklist-v4 178.237.240.0/20
 add blacklist-v4 178.237.248.0/21
 add blacklist-v4 178.237.28.0/24
-add blacklist-v4 178.237.29.0/24
 add blacklist-v4 178.237.30.0/23
 add blacklist-v4 178.248.232.137/32
 add blacklist-v4 178.248.232.60/32
@@ -136,21 +123,16 @@ add blacklist-v4 185.130.112.0/22
 add blacklist-v4 185.130.112.0/23
 add blacklist-v4 185.130.114.0/23
 add blacklist-v4 185.131.68.0/22
-add blacklist-v4 185.131.68.0/23
 add blacklist-v4 185.149.160.0/24
 add blacklist-v4 185.149.161.0/24
 add blacklist-v4 185.149.162.0/24
 add blacklist-v4 185.149.163.0/24
-add blacklist-v4 185.16.10.0/23
 add blacklist-v4 185.16.148.0/22
 add blacklist-v4 185.16.148.0/23
 add blacklist-v4 185.16.150.0/23
 add blacklist-v4 185.16.244.0/22
 add blacklist-v4 185.16.244.0/23
 add blacklist-v4 185.16.246.0/23
-add blacklist-v4 185.16.246.0/24
-add blacklist-v4 185.16.247.0/24
-add blacklist-v4 185.16.8.0/23
 add blacklist-v4 185.168.60.0/24
 add blacklist-v4 185.168.61.0/24
 add blacklist-v4 185.168.62.0/24
@@ -223,14 +205,12 @@ add blacklist-v4 188.93.61.0/24
 add blacklist-v4 188.93.62.0/24
 add blacklist-v4 193.203.40.0/22
 add blacklist-v4 193.232.70.0/24
-add blacklist-v4 193.33.230.0/23
 add blacklist-v4 193.47.146.0/24
 add blacklist-v4 194.140.247.0/25
 add blacklist-v4 194.140.247.128/25
 add blacklist-v4 194.150.202.0/23
 add blacklist-v4 194.165.22.0/23
 add blacklist-v4 194.186.112.80/28
-add blacklist-v4 194.186.63.0/24
 add blacklist-v4 194.190.9.0/24
 add blacklist-v4 194.215.248.0/24
 add blacklist-v4 194.226.116.0/22
@@ -262,14 +242,11 @@ add blacklist-v4 195.182.151.216/30
 add blacklist-v4 195.182.155.164/30
 add blacklist-v4 195.182.156.96/30
 add blacklist-v4 195.209.120.0/22
-add blacklist-v4 195.209.122.0/24
-add blacklist-v4 195.209.123.0/24
 add blacklist-v4 195.211.20.0/22
 add blacklist-v4 195.211.22.0/24
 add blacklist-v4 195.211.23.0/24
 add blacklist-v4 195.218.175.40/29
 add blacklist-v4 195.218.190.0/23
-add blacklist-v4 195.226.203.0/24
 add blacklist-v4 195.239.113.0/24
 add blacklist-v4 195.239.247.0/24
 add blacklist-v4 195.239.80.32/29
@@ -290,7 +267,6 @@ add blacklist-v4 195.98.38.16/28
 add blacklist-v4 195.98.43.104/29
 add blacklist-v4 195.98.73.56/29
 add blacklist-v4 195.98.77.100/30
-add blacklist-v4 212.111.84.0/22
 add blacklist-v4 212.119.174.0/24
 add blacklist-v4 212.119.175.0/24
 add blacklist-v4 212.120.169.48/29
@@ -314,15 +290,8 @@ add blacklist-v4 212.17.17.176/28
 add blacklist-v4 212.17.8.176/29
 add blacklist-v4 212.17.9.144/28
 add blacklist-v4 212.192.156.0/22
-add blacklist-v4 212.192.156.0/24
-add blacklist-v4 212.192.157.0/24
-add blacklist-v4 212.192.158.0/24
 add blacklist-v4 212.23.85.48/30
 add blacklist-v4 212.23.85.56/29
-add blacklist-v4 212.233.120.0/22
-add blacklist-v4 212.233.72.0/21
-add blacklist-v4 212.233.88.0/21
-add blacklist-v4 212.233.96.0/22
 add blacklist-v4 212.32.198.64/29
 add blacklist-v4 212.48.134.192/26
 add blacklist-v4 212.48.138.240/28
@@ -427,8 +396,6 @@ add blacklist-v4 213.172.27.224/30
 add blacklist-v4 213.172.27.252/30
 add blacklist-v4 213.172.30.136/30
 add blacklist-v4 213.172.4.192/26
-add blacklist-v4 213.176.232.0/23
-add blacklist-v4 213.176.234.0/23
 add blacklist-v4 213.177.111.0/24
 add blacklist-v4 213.183.253.56/29
 add blacklist-v4 213.219.212.0/22
@@ -484,7 +451,9 @@ add blacklist-v4 217.106.203.240/29
 add blacklist-v4 217.106.203.88/29
 add blacklist-v4 217.106.93.192/26
 add blacklist-v4 217.106.95.112/28
+add blacklist-v4 217.107.0.0/18
 add blacklist-v4 217.107.200.0/21
+add blacklist-v4 217.107.208.0/20
 add blacklist-v4 217.107.5.112/29
 add blacklist-v4 217.107.5.16/29
 add blacklist-v4 217.107.5.24/29
@@ -500,7 +469,7 @@ add blacklist-v4 217.16.16.0/20
 add blacklist-v4 217.16.16.0/21
 add blacklist-v4 217.16.24.0/21
 add blacklist-v4 217.172.18.0/23
-add blacklist-v4 217.174.188.0/22
+add blacklist-v4 217.172.20.0/22
 add blacklist-v4 217.174.188.0/23
 add blacklist-v4 217.195.92.16/28
 add blacklist-v4 217.195.93.144/29
@@ -515,7 +484,10 @@ add blacklist-v4 217.20.156.0/23
 add blacklist-v4 217.20.158.0/24
 add blacklist-v4 217.20.159.0/24
 add blacklist-v4 217.20.86.128/26
+add blacklist-v4 217.20.86.192/27
+add blacklist-v4 217.20.86.224/29
 add blacklist-v4 217.20.86.232/29
+add blacklist-v4 217.20.86.240/28
 add blacklist-v4 217.23.88.168/29
 add blacklist-v4 217.23.88.248/29
 add blacklist-v4 217.27.142.176/30
@@ -524,10 +496,7 @@ add blacklist-v4 217.65.219.160/29
 add blacklist-v4 217.67.177.208/29
 add blacklist-v4 217.69.128.0/20
 add blacklist-v4 217.69.128.0/21
-add blacklist-v4 217.69.132.0/24
 add blacklist-v4 217.69.136.0/21
-add blacklist-v4 31.148.205.0/24
-add blacklist-v4 31.177.104.0/22
 add blacklist-v4 31.177.95.0/24
 add blacklist-v4 31.44.63.64/29
 add blacklist-v4 37.139.32.0/22
@@ -549,8 +518,8 @@ add blacklist-v4 45.84.128.0/23
 add blacklist-v4 45.84.130.0/23
 add blacklist-v4 46.20.70.160/28
 add blacklist-v4 46.228.0.232/29
-add blacklist-v4 46.245.234.0/24
 add blacklist-v4 46.29.152.0/22
+add blacklist-v4 46.29.156.0/23
 add blacklist-v4 46.46.142.160/28
 add blacklist-v4 46.46.148.40/29
 add blacklist-v4 46.47.197.128/30
@@ -593,31 +562,20 @@ add blacklist-v4 5.61.239.48/28
 add blacklist-v4 5.61.239.64/26
 add blacklist-v4 62.105.158.200/29
 add blacklist-v4 62.112.110.64/28
-add blacklist-v4 62.118.0.208/28
 add blacklist-v4 62.118.101.184/29
 add blacklist-v4 62.118.113.232/29
 add blacklist-v4 62.118.125.188/30
 add blacklist-v4 62.118.127.240/28
-add blacklist-v4 62.118.15.16/28
-add blacklist-v4 62.118.17.152/29
-add blacklist-v4 62.118.19.112/30
-add blacklist-v4 62.118.19.40/30
 add blacklist-v4 62.118.193.8/29
 add blacklist-v4 62.118.205.68/30
 add blacklist-v4 62.118.208.100/30
 add blacklist-v4 62.118.209.192/30
-add blacklist-v4 62.118.21.160/29
 add blacklist-v4 62.118.216.60/30
 add blacklist-v4 62.118.219.184/30
 add blacklist-v4 62.118.230.4/30
 add blacklist-v4 62.118.233.224/29
 add blacklist-v4 62.118.234.64/29
 add blacklist-v4 62.118.239.128/29
-add blacklist-v4 62.118.25.112/28
-add blacklist-v4 62.118.37.168/30
-add blacklist-v4 62.118.37.180/30
-add blacklist-v4 62.118.37.4/30
-add blacklist-v4 62.118.38.212/30
 add blacklist-v4 62.141.125.0/25
 add blacklist-v4 62.217.160.0/20
 add blacklist-v4 62.217.160.0/21
@@ -626,7 +584,6 @@ add blacklist-v4 62.28.169.168/30
 add blacklist-v4 62.33.199.80/29
 add blacklist-v4 62.33.34.16/28
 add blacklist-v4 62.33.87.128/28
-add blacklist-v4 62.33.87.152/29
 add blacklist-v4 62.5.130.104/29
 add blacklist-v4 62.5.132.224/29
 add blacklist-v4 62.5.189.80/29
@@ -674,9 +631,6 @@ add blacklist-v4 79.137.132.128/25
 add blacklist-v4 79.137.139.0/24
 add blacklist-v4 79.137.139.0/25
 add blacklist-v4 79.137.139.128/25
-add blacklist-v4 79.137.140.0/24
-add blacklist-v4 79.137.142.0/24
-add blacklist-v4 79.137.157.0/24
 add blacklist-v4 79.137.157.0/25
 add blacklist-v4 79.137.157.128/25
 add blacklist-v4 79.137.164.0/24
@@ -696,9 +650,6 @@ add blacklist-v4 79.137.240.0/21
 add blacklist-v4 79.137.240.0/22
 add blacklist-v4 79.137.244.0/22
 add blacklist-v4 79.142.88.0/28
-add blacklist-v4 79.143.229.0/24
-add blacklist-v4 79.143.230.0/24
-add blacklist-v4 79.143.232.0/24
 add blacklist-v4 80.237.11.88/29
 add blacklist-v4 80.237.39.112/29
 add blacklist-v4 80.237.98.80/28
@@ -708,8 +659,6 @@ add blacklist-v4 80.247.46.0/24
 add blacklist-v4 80.254.100.40/29
 add blacklist-v4 80.254.119.168/29
 add blacklist-v4 80.73.16.0/20
-add blacklist-v4 80.73.16.0/21
-add blacklist-v4 80.73.16.0/24
 add blacklist-v4 80.73.168.80/28
 add blacklist-v4 80.73.169.244/30
 add blacklist-v4 80.82.43.24/29
@@ -762,7 +711,6 @@ add blacklist-v4 81.222.194.200/29
 add blacklist-v4 81.222.209.136/29
 add blacklist-v4 81.222.210.24/29
 add blacklist-v4 81.3.168.148/30
-add blacklist-v4 82.110.69.200/29
 add blacklist-v4 82.140.65.240/29
 add blacklist-v4 82.142.162.104/29
 add blacklist-v4 82.151.107.136/29
@@ -848,6 +796,7 @@ add blacklist-v4 85.141.33.64/28
 add blacklist-v4 85.141.60.96/28
 add blacklist-v4 85.141.61.160/28
 add blacklist-v4 85.143.125.0/24
+add blacklist-v4 85.146.204.44/30
 add blacklist-v4 85.192.32.0/22
 add blacklist-v4 85.192.32.0/23
 add blacklist-v4 85.192.34.0/23
@@ -914,8 +863,6 @@ add blacklist-v4 87.239.108.0/22
 add blacklist-v4 87.240.128.0/18
 add blacklist-v4 87.240.128.0/19
 add blacklist-v4 87.240.160.0/19
-add blacklist-v4 87.240.166.0/24
-add blacklist-v4 87.240.167.0/24
 add blacklist-v4 87.242.112.0/22
 add blacklist-v4 87.245.133.0/24
 add blacklist-v4 87.249.16.32/28
@@ -983,11 +930,6 @@ add blacklist-v4 89.21.140.104/29
 add blacklist-v4 89.21.152.104/29
 add blacklist-v4 89.221.228.0/22
 add blacklist-v4 89.221.232.0/21
-add blacklist-v4 89.221.232.0/22
-add blacklist-v4 89.221.233.0/24
-add blacklist-v4 89.221.234.0/24
-add blacklist-v4 89.221.235.0/24
-add blacklist-v4 89.221.236.0/22
 add blacklist-v4 89.28.253.168/29
 add blacklist-v4 89.28.255.56/29
 add blacklist-v4 90.150.176.52/30
@@ -1010,7 +952,6 @@ add blacklist-v4 90.150.189.32/29
 add blacklist-v4 90.156.148.0/22
 add blacklist-v4 90.156.148.0/23
 add blacklist-v4 90.156.150.0/23
-add blacklist-v4 90.156.151.0/24
 add blacklist-v4 90.156.212.0/22
 add blacklist-v4 90.156.212.0/23
 add blacklist-v4 90.156.214.0/23
@@ -1018,27 +959,13 @@ add blacklist-v4 90.156.216.0/22
 add blacklist-v4 90.156.216.0/23
 add blacklist-v4 90.156.218.0/23
 add blacklist-v4 90.156.232.0/21
-add blacklist-v4 90.156.248.0/22
 add blacklist-v4 91.103.194.184/29
-add blacklist-v4 91.135.212.0/22
-add blacklist-v4 91.135.216.0/21
-add blacklist-v4 91.135.220.0/24
-add blacklist-v4 91.135.221.0/24
-add blacklist-v4 91.195.136.0/23
-add blacklist-v4 91.208.20.0/24
 add blacklist-v4 91.215.168.0/22
 add blacklist-v4 91.217.34.0/23
 add blacklist-v4 91.219.192.0/22
-add blacklist-v4 91.219.224.0/22
-add blacklist-v4 91.221.140.0/23
-add blacklist-v4 91.221.140.0/24
-add blacklist-v4 91.221.141.0/24
 add blacklist-v4 91.226.250.0/24
 add blacklist-v4 91.227.32.0/24
 add blacklist-v4 91.231.132.0/22
-add blacklist-v4 91.231.132.0/24
-add blacklist-v4 91.231.133.0/24
-add blacklist-v4 91.231.134.0/24
 add blacklist-v4 91.237.76.0/24
 add blacklist-v4 92.101.253.152/29
 add blacklist-v4 92.101.253.96/29
@@ -1083,7 +1010,6 @@ add blacklist-v4 94.100.184.0/21
 add blacklist-v4 94.124.192.192/29
 add blacklist-v4 94.139.244.0/22
 add blacklist-v4 94.139.244.0/23
-add blacklist-v4 94.139.244.0/24
 add blacklist-v4 94.139.246.0/23
 add blacklist-v4 94.199.64.0/21
 add blacklist-v4 94.25.119.228/30
@@ -1100,9 +1026,6 @@ add blacklist-v4 95.142.200.0/21
 add blacklist-v4 95.142.201.0/24
 add blacklist-v4 95.142.202.0/24
 add blacklist-v4 95.142.203.0/24
-add blacklist-v4 95.142.204.0/23
-add blacklist-v4 95.142.207.0/24
-add blacklist-v4 95.163.133.0/24
 add blacklist-v4 95.163.180.0/22
 add blacklist-v4 95.163.180.0/23
 add blacklist-v4 95.163.182.0/23
@@ -1140,6 +1063,7 @@ add blacklist-v4 95.167.5.64/28
 add blacklist-v4 95.167.5.80/28
 add blacklist-v4 95.167.54.76/30
 add blacklist-v4 95.167.59.244/30
+add blacklist-v4 95.167.59.248/30
 add blacklist-v4 95.167.64.20/30
 add blacklist-v4 95.167.68.216/29
 add blacklist-v4 95.167.69.116/30
@@ -1157,7 +1081,6 @@ add blacklist-v4 95.173.128.0/19
 add blacklist-v4 95.173.128.0/20
 add blacklist-v4 95.173.144.0/20
 add blacklist-v4 95.213.0.0/17
-add blacklist-v4 95.213.0.0/18
 add blacklist-v4 95.213.0.0/20
 add blacklist-v4 95.213.16.0/21
 add blacklist-v4 95.213.24.0/23
@@ -1172,12 +1095,7 @@ add blacklist-v4 95.213.33.0/24
 add blacklist-v4 95.213.34.0/23
 add blacklist-v4 95.213.36.0/22
 add blacklist-v4 95.213.40.0/21
-add blacklist-v4 95.213.44.0/24
-add blacklist-v4 95.213.45.0/24
 add blacklist-v4 95.213.48.0/20
 add blacklist-v4 95.213.64.0/18
-add blacklist-v4 95.47.189.0/24
-add blacklist-v4 95.47.191.0/24
-add blacklist-v4 95.47.244.0/24
 add blacklist-v4 95.53.248.0/29
 add blacklist-v4 95.54.193.80/28

blacklists_iptables/blacklist-v6.ipset

@@ -1,41 +1,23 @@
 # IPSet blacklist configuration (IPv6 only)
 # Auto-generated from blacklist-v6.txt
-# Last updated: 2025-12-11 06:25:09 UTC
+# Last updated: 2026-03-29 06:56:51 UTC
 #
 # Usage:
 #   1. Load the ipset:
 #      ipset restore < blacklist-v6.ipset
 #
 #   2. Use with iptables/ip6tables:
-#      iptables -I INPUT -m set --match-set blacklist-v6 src -j DROP
-#      iptables -I FORWARD -m set --match-set blacklist-v6 src -j DROP
+#      ip6tables -I INPUT -m set --match-set blacklist-v6 src -m conntrack --ctstate NEW -j DROP
+#      ip6tables -I FORWARD -m set --match-set blacklist-v6 src -m conntrack --ctstate NEW -j DROP
 #
 #   3. To flush/delete the set:
 #      ipset flush blacklist-v6
 #      ipset destroy blacklist-v6
 #
 
-create blacklist-v6 hash:net family inet6 hashsize 1024 maxelem 46
-add blacklist-v6 2a00:1148::/29
-add blacklist-v6 2a00:1148::/32
-add blacklist-v6 2a00:a300::/32
-add blacklist-v6 2a00:b4c0::/32
-add blacklist-v6 2a00:bdc0:8000::/34
-add blacklist-v6 2a00:bdc0::/33
-add blacklist-v6 2a00:bdc0:c000::/35
+create blacklist-v6 hash:net family inet6 hashsize 1024 maxelem 10
 add blacklist-v6 2a00:bdc0:e002::/48
 add blacklist-v6 2a00:bdc0:e003::/48
 add blacklist-v6 2a00:bdc0:e004::/48
 add blacklist-v6 2a00:bdc0:e005::/48
 add blacklist-v6 2a00:bdc0:e007::/48
-add blacklist-v6 2a00:bdc0:f000::/36
-add blacklist-v6 2a00:bdc1::/32
-add blacklist-v6 2a00:bdc2::/31
-add blacklist-v6 2a00:bdc4::/30
-add blacklist-v6 2a0c:a9c7:156::/48
-add blacklist-v6 2a0c:a9c7:157::/48
-add blacklist-v6 2a0c:a9c7:158::/48
-add blacklist-v6 2a14:25c0::/32
-add blacklist-v6 2a14:25c5::/32
-add blacklist-v6 2a14:25c6::/32
-add blacklist-v6 2a14:25c7::/32

blacklists_iptables/blacklist-vk-v4.ipset

@@ -0,0 +1,284 @@
+# IPSet blacklist configuration (VK names, IPv4 only)
+# Auto-generated from blacklist-vk-v4.txt
+# Last updated: 2026-03-29 06:56:51 UTC
+#
+# Usage:
+#   1. Load the ipset:
+#      ipset restore < blacklist-vk-v4.ipset
+#
+#   2. Use with iptables/ip6tables:
+#      iptables -I OUTPUT -m set --match-set blacklist-vk-v4 dst -j REJECT
+#      iptables -I FORWARD -m set --match-set blacklist-vk-v4 dst -j REJECT
+#
+#   3. To flush/delete the set:
+#      ipset flush blacklist-vk-v4
+#      ipset destroy blacklist-vk-v4
+#
+
+create blacklist-vk-v4 hash:net family inet hashsize 1024 maxelem 532
+add blacklist-vk-v4 109.120.180.0/22
+add blacklist-vk-v4 109.120.180.0/23
+add blacklist-vk-v4 109.120.182.0/23
+add blacklist-vk-v4 109.120.188.0/22
+add blacklist-vk-v4 109.120.188.0/23
+add blacklist-vk-v4 109.120.190.0/23
+add blacklist-vk-v4 128.140.168.0/21
+add blacklist-vk-v4 128.140.168.0/23
+add blacklist-vk-v4 128.140.170.0/24
+add blacklist-vk-v4 128.140.171.0/24
+add blacklist-vk-v4 128.140.172.0/22
+add blacklist-vk-v4 130.49.224.0/19
+add blacklist-vk-v4 146.185.208.0/22
+add blacklist-vk-v4 146.185.208.0/23
+add blacklist-vk-v4 146.185.210.0/23
+add blacklist-vk-v4 146.185.240.0/22
+add blacklist-vk-v4 146.185.240.0/23
+add blacklist-vk-v4 146.185.242.0/23
+add blacklist-vk-v4 155.212.192.0/20
+add blacklist-vk-v4 176.112.168.0/21
+add blacklist-vk-v4 178.22.88.0/21
+add blacklist-vk-v4 178.22.89.64/26
+add blacklist-vk-v4 178.22.94.0/23
+add blacklist-vk-v4 178.237.16.0/20
+add blacklist-vk-v4 178.237.16.0/21
+add blacklist-vk-v4 178.237.24.0/22
+add blacklist-vk-v4 178.237.30.0/23
+add blacklist-vk-v4 185.100.104.0/22
+add blacklist-vk-v4 185.100.104.0/23
+add blacklist-vk-v4 185.100.106.0/23
+add blacklist-vk-v4 185.130.112.0/22
+add blacklist-vk-v4 185.130.112.0/23
+add blacklist-vk-v4 185.130.114.0/23
+add blacklist-vk-v4 185.131.68.0/22
+add blacklist-vk-v4 185.16.148.0/22
+add blacklist-vk-v4 185.16.148.0/23
+add blacklist-vk-v4 185.16.150.0/23
+add blacklist-vk-v4 185.16.244.0/22
+add blacklist-vk-v4 185.16.244.0/23
+add blacklist-vk-v4 185.16.246.0/23
+add blacklist-vk-v4 185.180.200.0/22
+add blacklist-vk-v4 185.187.63.0/24
+add blacklist-vk-v4 185.187.63.0/25
+add blacklist-vk-v4 185.187.63.128/25
+add blacklist-vk-v4 185.226.52.0/22
+add blacklist-vk-v4 185.226.52.0/23
+add blacklist-vk-v4 185.226.54.0/23
+add blacklist-vk-v4 185.241.192.0/22
+add blacklist-vk-v4 185.241.192.0/23
+add blacklist-vk-v4 185.241.194.0/23
+add blacklist-vk-v4 185.29.128.0/22
+add blacklist-vk-v4 185.29.130.0/24
+add blacklist-vk-v4 185.32.248.0/22
+add blacklist-vk-v4 185.32.248.0/23
+add blacklist-vk-v4 185.32.250.0/23
+add blacklist-vk-v4 185.5.136.0/22
+add blacklist-vk-v4 185.5.136.0/23
+add blacklist-vk-v4 185.5.138.0/23
+add blacklist-vk-v4 185.6.244.0/22
+add blacklist-vk-v4 185.6.244.0/23
+add blacklist-vk-v4 185.6.246.0/23
+add blacklist-vk-v4 185.86.144.0/22
+add blacklist-vk-v4 185.86.144.0/23
+add blacklist-vk-v4 185.86.146.0/23
+add blacklist-vk-v4 188.93.56.0/21
+add blacklist-vk-v4 188.93.56.0/24
+add blacklist-vk-v4 188.93.57.0/24
+add blacklist-vk-v4 188.93.58.0/24
+add blacklist-vk-v4 188.93.60.0/24
+add blacklist-vk-v4 188.93.61.0/24
+add blacklist-vk-v4 188.93.62.0/24
+add blacklist-vk-v4 193.203.40.0/22
+add blacklist-vk-v4 194.84.16.12/30
+add blacklist-vk-v4 195.211.20.0/22
+add blacklist-vk-v4 195.211.22.0/24
+add blacklist-vk-v4 195.211.23.0/24
+add blacklist-vk-v4 212.111.84.0/22
+add blacklist-vk-v4 212.233.120.0/22
+add blacklist-vk-v4 212.233.72.0/21
+add blacklist-vk-v4 212.233.88.0/21
+add blacklist-vk-v4 212.233.96.0/22
+add blacklist-vk-v4 213.219.212.0/22
+add blacklist-vk-v4 213.219.212.0/23
+add blacklist-vk-v4 213.219.214.0/23
+add blacklist-vk-v4 217.16.16.0/20
+add blacklist-vk-v4 217.16.16.0/21
+add blacklist-vk-v4 217.16.24.0/21
+add blacklist-vk-v4 217.174.188.0/23
+add blacklist-vk-v4 217.20.144.0/20
+add blacklist-vk-v4 217.20.144.0/22
+add blacklist-vk-v4 217.20.148.0/24
+add blacklist-vk-v4 217.20.149.0/24
+add blacklist-vk-v4 217.20.150.0/23
+add blacklist-vk-v4 217.20.152.0/22
+add blacklist-vk-v4 217.20.156.0/23
+add blacklist-vk-v4 217.20.158.0/24
+add blacklist-vk-v4 217.20.159.0/24
+add blacklist-vk-v4 217.69.128.0/20
+add blacklist-vk-v4 217.69.128.0/21
+add blacklist-vk-v4 217.69.136.0/21
+add blacklist-vk-v4 37.139.32.0/22
+add blacklist-vk-v4 37.139.32.0/23
+add blacklist-vk-v4 37.139.34.0/23
+add blacklist-vk-v4 37.139.40.0/22
+add blacklist-vk-v4 37.139.40.0/23
+add blacklist-vk-v4 37.139.42.0/23
+add blacklist-vk-v4 45.136.20.0/22
+add blacklist-vk-v4 45.136.20.0/23
+add blacklist-vk-v4 45.136.22.0/23
+add blacklist-vk-v4 45.84.128.0/22
+add blacklist-vk-v4 45.84.128.0/23
+add blacklist-vk-v4 45.84.130.0/23
+add blacklist-vk-v4 5.101.40.0/22
+add blacklist-vk-v4 5.101.40.0/23
+add blacklist-vk-v4 5.101.42.0/23
+add blacklist-vk-v4 5.181.60.0/22
+add blacklist-vk-v4 5.181.60.0/24
+add blacklist-vk-v4 5.181.61.0/24
+add blacklist-vk-v4 5.181.62.0/23
+add blacklist-vk-v4 5.188.140.0/22
+add blacklist-vk-v4 5.188.140.0/23
+add blacklist-vk-v4 5.188.142.0/23
+add blacklist-vk-v4 5.61.16.0/21
+add blacklist-vk-v4 5.61.16.0/22
+add blacklist-vk-v4 5.61.20.0/22
+add blacklist-vk-v4 5.61.232.0/21
+add blacklist-vk-v4 5.61.232.0/22
+add blacklist-vk-v4 5.61.236.0/23
+add blacklist-vk-v4 5.61.238.0/24
+add blacklist-vk-v4 5.61.239.0/27
+add blacklist-vk-v4 5.61.239.128/25
+add blacklist-vk-v4 5.61.239.40/29
+add blacklist-vk-v4 5.61.239.48/28
+add blacklist-vk-v4 5.61.239.64/26
+add blacklist-vk-v4 62.217.160.0/20
+add blacklist-vk-v4 62.217.160.0/21
+add blacklist-vk-v4 62.217.168.0/21
+add blacklist-vk-v4 79.137.132.0/24
+add blacklist-vk-v4 79.137.132.0/25
+add blacklist-vk-v4 79.137.132.128/25
+add blacklist-vk-v4 79.137.139.0/24
+add blacklist-vk-v4 79.137.139.0/25
+add blacklist-vk-v4 79.137.139.128/25
+add blacklist-vk-v4 79.137.157.0/25
+add blacklist-vk-v4 79.137.157.128/25
+add blacklist-vk-v4 79.137.164.0/24
+add blacklist-vk-v4 79.137.164.0/25
+add blacklist-vk-v4 79.137.164.128/25
+add blacklist-vk-v4 79.137.167.0/24
+add blacklist-vk-v4 79.137.167.0/25
+add blacklist-vk-v4 79.137.167.128/25
+add blacklist-vk-v4 79.137.174.0/23
+add blacklist-vk-v4 79.137.174.0/24
+add blacklist-vk-v4 79.137.175.0/24
+add blacklist-vk-v4 79.137.180.0/24
+add blacklist-vk-v4 79.137.180.0/25
+add blacklist-vk-v4 79.137.180.128/25
+add blacklist-vk-v4 79.137.240.0/21
+add blacklist-vk-v4 79.137.240.0/22
+add blacklist-vk-v4 79.137.244.0/22
+add blacklist-vk-v4 83.166.232.0/21
+add blacklist-vk-v4 83.166.232.0/22
+add blacklist-vk-v4 83.166.236.0/22
+add blacklist-vk-v4 83.166.248.0/21
+add blacklist-vk-v4 83.166.248.0/22
+add blacklist-vk-v4 83.166.252.0/22
+add blacklist-vk-v4 83.217.216.0/22
+add blacklist-vk-v4 83.217.216.0/23
+add blacklist-vk-v4 83.217.218.0/23
+add blacklist-vk-v4 83.222.28.0/22
+add blacklist-vk-v4 84.23.52.0/22
+add blacklist-vk-v4 84.23.52.0/23
+add blacklist-vk-v4 84.23.54.0/23
+add blacklist-vk-v4 85.114.31.108/30
+add blacklist-vk-v4 85.192.32.0/22
+add blacklist-vk-v4 85.192.32.0/23
+add blacklist-vk-v4 85.192.34.0/23
+add blacklist-vk-v4 85.198.106.0/24
+add blacklist-vk-v4 85.198.107.0/24
+add blacklist-vk-v4 87.239.104.0/21
+add blacklist-vk-v4 87.239.104.0/22
+add blacklist-vk-v4 87.239.108.0/22
+add blacklist-vk-v4 87.240.128.0/18
+add blacklist-vk-v4 87.240.128.0/19
+add blacklist-vk-v4 87.240.160.0/19
+add blacklist-vk-v4 87.242.112.0/22
+add blacklist-vk-v4 89.208.196.0/22
+add blacklist-vk-v4 89.208.196.0/23
+add blacklist-vk-v4 89.208.198.0/23
+add blacklist-vk-v4 89.208.208.0/22
+add blacklist-vk-v4 89.208.208.0/23
+add blacklist-vk-v4 89.208.210.0/23
+add blacklist-vk-v4 89.208.216.0/21
+add blacklist-vk-v4 89.208.216.0/23
+add blacklist-vk-v4 89.208.218.0/23
+add blacklist-vk-v4 89.208.220.0/22
+add blacklist-vk-v4 89.208.228.0/22
+add blacklist-vk-v4 89.208.228.0/23
+add blacklist-vk-v4 89.208.230.0/23
+add blacklist-vk-v4 89.208.84.0/22
+add blacklist-vk-v4 89.208.84.0/23
+add blacklist-vk-v4 89.208.86.0/23
+add blacklist-vk-v4 89.221.228.0/22
+add blacklist-vk-v4 89.221.232.0/21
+add blacklist-vk-v4 90.156.148.0/22
+add blacklist-vk-v4 90.156.148.0/23
+add blacklist-vk-v4 90.156.150.0/23
+add blacklist-vk-v4 90.156.212.0/22
+add blacklist-vk-v4 90.156.212.0/23
+add blacklist-vk-v4 90.156.214.0/23
+add blacklist-vk-v4 90.156.216.0/22
+add blacklist-vk-v4 90.156.216.0/23
+add blacklist-vk-v4 90.156.218.0/23
+add blacklist-vk-v4 90.156.232.0/21
+add blacklist-vk-v4 91.219.224.0/22
+add blacklist-vk-v4 91.231.132.0/22
+add blacklist-vk-v4 91.237.76.0/24
+add blacklist-vk-v4 93.153.255.84/30
+add blacklist-vk-v4 93.186.224.0/20
+add blacklist-vk-v4 93.186.224.0/21
+add blacklist-vk-v4 93.186.232.0/21
+add blacklist-vk-v4 94.100.176.0/20
+add blacklist-vk-v4 94.100.176.0/21
+add blacklist-vk-v4 94.100.184.0/21
+add blacklist-vk-v4 94.139.244.0/22
+add blacklist-vk-v4 94.139.244.0/23
+add blacklist-vk-v4 94.139.246.0/23
+add blacklist-vk-v4 95.142.192.0/20
+add blacklist-vk-v4 95.142.192.0/21
+add blacklist-vk-v4 95.142.200.0/21
+add blacklist-vk-v4 95.163.180.0/22
+add blacklist-vk-v4 95.163.180.0/23
+add blacklist-vk-v4 95.163.182.0/23
+add blacklist-vk-v4 95.163.208.0/21
+add blacklist-vk-v4 95.163.208.0/23
+add blacklist-vk-v4 95.163.210.0/23
+add blacklist-vk-v4 95.163.212.0/22
+add blacklist-vk-v4 95.163.216.0/22
+add blacklist-vk-v4 95.163.216.0/23
+add blacklist-vk-v4 95.163.218.0/23
+add blacklist-vk-v4 95.163.248.0/21
+add blacklist-vk-v4 95.163.248.0/22
+add blacklist-vk-v4 95.163.252.0/23
+add blacklist-vk-v4 95.163.254.0/23
+add blacklist-vk-v4 95.163.32.0/19
+add blacklist-vk-v4 95.163.32.0/22
+add blacklist-vk-v4 95.163.36.0/22
+add blacklist-vk-v4 95.163.40.0/21
+add blacklist-vk-v4 95.163.48.0/20
+add blacklist-vk-v4 95.213.0.0/17
+add blacklist-vk-v4 95.213.0.0/20
+add blacklist-vk-v4 95.213.16.0/21
+add blacklist-vk-v4 95.213.24.0/23
+add blacklist-vk-v4 95.213.26.0/24
+add blacklist-vk-v4 95.213.27.0/24
+add blacklist-vk-v4 95.213.28.0/24
+add blacklist-vk-v4 95.213.29.0/24
+add blacklist-vk-v4 95.213.30.0/24
+add blacklist-vk-v4 95.213.31.0/24
+add blacklist-vk-v4 95.213.32.0/24
+add blacklist-vk-v4 95.213.33.0/24
+add blacklist-vk-v4 95.213.34.0/23
+add blacklist-vk-v4 95.213.36.0/22
+add blacklist-vk-v4 95.213.40.0/21
+add blacklist-vk-v4 95.213.48.0/20
+add blacklist-vk-v4 95.213.64.0/18

blacklists_iptables/blacklist-vk-v6.ipset

@@ -0,0 +1,19 @@
+# IPSet blacklist configuration (VK names, IPv6 only)
+# Auto-generated from blacklist-vk-v6.txt
+# Last updated: 2026-03-29 06:56:51 UTC
+#
+# Usage:
+#   1. Load the ipset:
+#      ipset restore < blacklist-vk-v6.ipset
+#
+#   2. Use with iptables/ip6tables:
+#      ip6tables -I OUTPUT -m set --match-set blacklist-vk-v6 dst -j REJECT
+#      ip6tables -I FORWARD -m set --match-set blacklist-vk-v6 dst -j REJECT
+#
+#   3. To flush/delete the set:
+#      ipset flush blacklist-vk-v6
+#      ipset destroy blacklist-vk-v6
+#
+
+create blacklist-vk-v6 hash:net family inet6 hashsize 1024 maxelem 2
+add blacklist-vk-v6 2a00:bdc0::/29

blacklists_nftables/README.md

@@ -0,0 +1,52 @@
+# nftables blacklists
+
+Short: ready-to-use nftables set files (general and VK-only, separated by IPv4/IPv6).
+
+## Download links
+
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nftables/blacklist.nft
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nftables/blacklist-v4.nft
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nftables/blacklist-v6.nft
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nftables/blacklist-vk.nft
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nftables/blacklist-vk-v4.nft
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nftables/blacklist-vk-v6.nft
+
+## How to use
+
+### 1) Protect VM from incoming connections (general blacklists)
+
+Load either mixed or split general set files:
+
+```bash
+sudo nft -f blacklist.nft
+# or:
+sudo nft -f blacklist-v4.nft
+sudo nft -f blacklist-v6.nft
+```
+
+Apply rules for inbound traffic to the VM:
+
+```bash
+sudo nft add chain inet filter input '{ type filter hook input priority 0; policy accept; }'
+sudo nft add rule inet filter input ip saddr @blacklist_v4 counter reject
+sudo nft add rule inet filter input ip6 saddr @blacklist_v6 counter reject
+```
+
+### 2) Block VK outbound traffic for VPN clients via NAT/FORWARD
+
+Load either mixed or split VK set files:
+
+```bash
+sudo nft -f blacklist-vk.nft
+# or:
+sudo nft -f blacklist-vk-v4.nft
+sudo nft -f blacklist-vk-v6.nft
+```
+
+Apply rules for forwarded client traffic (replace `<VPN_IFACE>`):
+
+```bash
+sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'
+sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip daddr @blacklist_vk_v4 counter reject
+sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip6 daddr @blacklist_vk_v6 counter reject
+```

blacklists_nftables/blacklist-v4.nft

@@ -0,0 +1,805 @@
+# Autogenerated nftables blacklist
+# Generated: 2026-03-29T06:56:51.790157Z
+# Source: /tmp/blacklist-v4.txt
+# IPv4: 778, IPv6: 0
+#
+# Usage:
+#   sudo nft -f <this-file>
+#   # VM protection from incoming blacklist sources
+#   sudo nft add chain inet filter input '{ type filter hook input priority 0; policy accept; }'
+#   sudo nft add rule inet filter input ip saddr @blacklist_v4 counter reject
+#   sudo nft add rule inet filter input ip6 saddr @blacklist_v6 counter reject
+
+table inet filter {
+
+    set blacklist_v4 {
+        type ipv4_addr
+        flags interval
+        elements = {
+            5.61.16.0/21,
+            5.61.232.0/21,
+            5.101.40.0/22,
+            5.181.60.0/22,
+            5.188.140.0/22,
+            31.44.63.64/29,
+            31.177.95.0/24,
+            37.28.161.48/30,
+            37.29.53.16/30,
+            37.29.57.52/30,
+            37.29.57.64/30,
+            37.29.59.56/30,
+            37.139.32.0/22,
+            37.139.40.0/22,
+            45.84.128.0/22,
+            45.136.20.0/22,
+            46.20.70.160/28,
+            46.29.152.0/22,
+            46.29.156.0/23,
+            46.46.142.160/28,
+            46.46.148.40/29,
+            46.47.197.128/30,
+            46.47.199.76/30,
+            46.47.203.52/30,
+            46.47.207.96/30,
+            46.47.208.84/30,
+            46.47.210.76/30,
+            46.47.211.0/24,
+            46.47.212.204/30,
+            46.47.213.0/24,
+            46.47.214.200/30,
+            46.47.219.200/30,
+            46.47.223.196/30,
+            46.47.229.0/28,
+            46.47.238.144/30,
+            46.47.249.176/29,
+            46.61.208.0/24,
+            46.228.0.232/29,
+            62.5.130.104/29,
+            62.5.132.224/29,
+            62.5.189.80/29,
+            62.5.202.60/30,
+            62.5.218.204/30,
+            62.5.224.188/30,
+            62.5.242.80/28,
+            62.28.169.168/30,
+            62.33.34.16/28,
+            62.33.87.128/28,
+            62.33.199.80/29,
+            62.63.96.32/28,
+            62.63.98.24/29,
+            62.63.100.160/30,
+            62.63.101.80/29,
+            62.76.98.0/24,
+            62.105.158.200/29,
+            62.112.110.64/28,
+            62.118.101.184/29,
+            62.118.113.232/29,
+            62.118.125.188/30,
+            62.118.127.240/28,
+            62.118.193.8/29,
+            62.118.205.68/30,
+            62.118.208.100/30,
+            62.118.209.192/30,
+            62.118.216.60/30,
+            62.118.219.184/30,
+            62.118.230.4/30,
+            62.118.233.224/29,
+            62.118.234.64/29,
+            62.118.239.128/29,
+            62.141.125.0/25,
+            62.217.160.0/20,
+            77.34.209.160/28,
+            77.35.76.80/28,
+            77.35.98.240/28,
+            77.37.128.0/17,
+            77.72.139.0/28,
+            77.82.124.112/29,
+            77.243.9.80/28,
+            78.24.159.48/29,
+            78.37.67.24/29,
+            78.37.69.160/27,
+            78.37.84.120/29,
+            78.37.97.88/29,
+            78.37.104.0/29,
+            78.107.3.208/28,
+            78.107.13.208/28,
+            78.107.16.96/28,
+            78.107.18.112/28,
+            78.107.40.160/28,
+            78.107.42.144/28,
+            78.107.51.16/28,
+            78.107.61.96/28,
+            78.107.86.32/28,
+            78.108.192.0/21,
+            78.108.200.0/24,
+            78.109.140.112/29,
+            79.133.74.160/30,
+            79.133.74.168/30,
+            79.133.75.44/30,
+            79.133.75.176/30,
+            79.137.132.0/24,
+            79.137.139.0/24,
+            79.137.157.0/24,
+            79.137.164.0/24,
+            79.137.167.0/24,
+            79.137.174.0/23,
+            79.137.180.0/24,
+            79.137.183.0/24,
+            79.137.240.0/21,
+            79.142.88.0/28,
+            80.73.16.0/20,
+            80.73.168.80/28,
+            80.73.169.244/30,
+            80.82.43.24/29,
+            80.89.152.220/30,
+            80.237.11.88/29,
+            80.237.39.112/29,
+            80.237.98.80/28,
+            80.247.32.0/20,
+            80.254.100.40/29,
+            80.254.119.168/29,
+            81.1.195.0/28,
+            81.1.205.96/27,
+            81.2.1.0/28,
+            81.2.10.192/27,
+            81.3.168.148/30,
+            81.17.2.192/28,
+            81.17.3.16/29,
+            81.176.70.0/26,
+            81.176.235.0/27,
+            81.177.12.0/24,
+            81.177.31.64/26,
+            81.177.156.0/24,
+            81.195.36.48/28,
+            81.195.44.248/30,
+            81.195.45.64/30,
+            81.195.50.72/29,
+            81.195.90.44/30,
+            81.195.92.48/30,
+            81.195.93.192/27,
+            81.195.94.72/29,
+            81.195.105.160/28,
+            81.195.108.164/30,
+            81.195.112.36/30,
+            81.195.118.48/30,
+            81.195.118.128/30,
+            81.195.120.16/29,
+            81.195.124.52/30,
+            81.195.125.96/30,
+            81.195.148.140/30,
+            81.195.150.248/30,
+            81.195.151.172/30,
+            81.195.155.0/30,
+            81.195.161.12/30,
+            81.195.165.64/28,
+            81.195.168.24/30,
+            81.195.177.160/30,
+            81.195.178.224/27,
+            81.195.182.64/28,
+            81.195.192.96/30,
+            81.195.231.128/26,
+            81.195.244.32/29,
+            81.195.245.0/28,
+            81.195.247.128/28,
+            81.195.250.16/29,
+            81.211.32.16/28,
+            81.222.194.200/29,
+            81.222.209.136/29,
+            81.222.210.24/29,
+            82.140.65.240/29,
+            82.142.162.104/29,
+            82.151.107.136/29,
+            82.162.72.208/28,
+            82.162.76.176/28,
+            82.162.80.192/28,
+            82.162.87.192/28,
+            82.162.90.0/28,
+            82.162.103.144/28,
+            82.162.126.96/28,
+            82.162.149.160/28,
+            82.162.157.64/28,
+            82.162.158.176/28,
+            82.162.172.112/28,
+            82.179.86.32/27,
+            82.196.69.152/30,
+            82.196.130.0/27,
+            82.198.176.16/29,
+            82.198.176.144/29,
+            82.198.176.208/29,
+            82.198.189.128/26,
+            82.198.190.64/26,
+            82.198.191.96/27,
+            82.198.191.248/29,
+            82.200.13.0/27,
+            82.200.22.136/29,
+            82.200.22.144/28,
+            82.200.64.0/24,
+            82.208.68.240/28,
+            82.208.77.104/29,
+            82.208.81.0/24,
+            82.208.93.160/27,
+            83.69.207.248/29,
+            83.149.42.64/29,
+            83.166.232.0/21,
+            83.166.248.0/21,
+            83.172.36.224/29,
+            83.217.216.0/22,
+            83.219.5.248/29,
+            83.219.6.72/29,
+            83.219.13.128/29,
+            83.219.13.184/29,
+            83.219.23.8/29,
+            83.219.23.48/29,
+            83.219.25.0/29,
+            83.219.25.112/29,
+            83.219.138.16/28,
+            83.220.53.16/28,
+            83.222.28.0/22,
+            83.229.181.192/26,
+            83.229.232.16/29,
+            84.23.52.0/22,
+            84.53.210.144/28,
+            84.204.7.144/29,
+            84.204.93.232/30,
+            84.204.143.44/30,
+            84.204.154.16/30,
+            84.204.170.220/30,
+            84.204.217.164/30,
+            84.204.245.208/29,
+            85.21.99.48/28,
+            85.21.99.64/28,
+            85.21.102.224/28,
+            85.21.103.64/28,
+            85.21.104.192/27,
+            85.21.148.0/26,
+            85.21.149.48/28,
+            85.21.155.208/28,
+            85.21.157.48/28,
+            85.21.204.208/28,
+            85.90.98.144/30,
+            85.90.99.168/29,
+            85.90.100.72/29,
+            85.90.101.112/28,
+            85.90.101.192/29,
+            85.90.102.168/29,
+            85.90.120.72/29,
+            85.90.121.72/29,
+            85.90.125.96/29,
+            85.90.127.16/29,
+            85.94.52.160/27,
+            85.94.53.32/28,
+            85.114.30.192/30,
+            85.114.30.204/30,
+            85.114.31.108/30,
+            85.114.93.88/29,
+            85.141.17.24/30,
+            85.141.17.112/30,
+            85.141.18.80/30,
+            85.141.19.56/30,
+            85.141.21.236/30,
+            85.141.28.0/30,
+            85.141.31.68/30,
+            85.141.32.96/28,
+            85.141.33.0/28,
+            85.141.33.64/28,
+            85.141.60.96/28,
+            85.141.61.160/28,
+            85.143.125.0/24,
+            85.146.204.44/30,
+            85.192.32.0/22,
+            85.198.106.0/23,
+            85.236.29.160/27,
+            86.102.72.240/28,
+            86.102.74.64/28,
+            86.102.100.48/28,
+            86.102.108.32/28,
+            86.102.109.32/27,
+            86.102.115.80/28,
+            86.102.126.80/28,
+            86.102.126.160/28,
+            87.117.18.144/29,
+            87.117.20.64/26,
+            87.117.20.128/28,
+            87.117.21.0/26,
+            87.117.21.64/28,
+            87.117.21.80/29,
+            87.117.23.128/28,
+            87.117.31.56/29,
+            87.225.56.224/28,
+            87.226.156.64/26,
+            87.226.191.0/24,
+            87.226.213.0/24,
+            87.226.239.180/30,
+            87.237.47.204/30,
+            87.239.104.0/21,
+            87.240.128.0/18,
+            87.242.112.0/22,
+            87.245.133.0/24,
+            87.249.3.64/28,
+            87.249.5.48/30,
+            87.249.7.120/29,
+            87.249.16.32/28,
+            87.249.18.60/30,
+            87.249.22.72/29,
+            87.249.28.232/29,
+            87.249.30.176/30,
+            88.83.195.248/30,
+            88.151.200.0/24,
+            88.200.208.112/29,
+            89.21.129.16/28,
+            89.21.140.104/29,
+            89.21.152.104/29,
+            89.28.253.168/29,
+            89.28.255.56/29,
+            89.106.172.160/29,
+            89.107.123.120/29,
+            89.107.123.136/29,
+            89.107.127.136/29,
+            89.109.7.176/29,
+            89.109.250.28/30,
+            89.109.250.80/30,
+            89.109.250.88/29,
+            89.109.250.96/30,
+            89.109.250.132/30,
+            89.109.250.140/30,
+            89.111.176.0/22,
+            89.175.6.64/27,
+            89.175.8.36/30,
+            89.175.8.40/29,
+            89.175.8.52/30,
+            89.175.8.68/30,
+            89.175.8.104/30,
+            89.175.8.140/30,
+            89.175.8.192/30,
+            89.175.9.4/30,
+            89.175.10.160/30,
+            89.175.165.208/28,
+            89.175.170.144/28,
+            89.175.174.136/29,
+            89.175.176.88/30,
+            89.175.176.140/30,
+            89.175.176.176/30,
+            89.175.188.184/29,
+            89.179.155.192/28,
+            89.179.179.16/28,
+            89.179.181.0/24,
+            89.208.84.0/22,
+            89.208.196.0/22,
+            89.208.208.0/22,
+            89.208.216.0/21,
+            89.208.228.0/22,
+            89.221.228.0/22,
+            89.221.232.0/21,
+            90.150.176.52/30,
+            90.150.189.32/29,
+            90.150.189.128/26,
+            90.150.189.192/27,
+            90.150.189.224/28,
+            90.150.189.248/29,
+            90.156.148.0/22,
+            90.156.212.0/22,
+            90.156.216.0/22,
+            90.156.232.0/21,
+            91.103.194.184/29,
+            91.215.168.0/22,
+            91.217.34.0/23,
+            91.219.192.0/22,
+            91.226.250.0/24,
+            91.227.32.0/24,
+            91.231.132.0/22,
+            91.237.76.0/24,
+            92.39.106.20/30,
+            92.39.106.168/30,
+            92.39.111.84/30,
+            92.39.128.0/21,
+            92.50.198.72/30,
+            92.50.198.124/30,
+            92.50.219.136/29,
+            92.50.238.224/29,
+            92.101.253.96/29,
+            92.101.253.152/29,
+            93.153.134.112/29,
+            93.153.135.88/30,
+            93.153.136.132/30,
+            93.153.142.4/30,
+            93.153.144.60/30,
+            93.153.171.204/30,
+            93.153.172.100/30,
+            93.153.175.44/30,
+            93.153.183.104/30,
+            93.153.194.160/29,
+            93.153.220.192/29,
+            93.153.223.8/29,
+            93.153.229.232/29,
+            93.153.244.188/30,
+            93.153.244.248/29,
+            93.153.251.0/24,
+            93.153.255.84/30,
+            93.178.104.32/29,
+            93.178.104.64/29,
+            93.178.106.0/26,
+            93.186.224.0/20,
+            93.188.20.72/29,
+            93.190.110.0/24,
+            94.25.53.56/29,
+            94.25.57.176/29,
+            94.25.57.224/28,
+            94.25.65.16/29,
+            94.25.70.64/30,
+            94.25.90.240/29,
+            94.25.95.136/30,
+            94.25.119.228/30,
+            94.100.176.0/20,
+            94.124.192.192/29,
+            94.139.244.0/22,
+            94.199.64.0/21,
+            95.53.248.0/29,
+            95.54.193.80/28,
+            95.142.192.0/20,
+            95.163.32.0/19,
+            95.163.180.0/22,
+            95.163.208.0/21,
+            95.163.216.0/22,
+            95.163.248.0/21,
+            95.167.2.4/30,
+            95.167.4.168/29,
+            95.167.5.64/27,
+            95.167.21.104/29,
+            95.167.29.104/29,
+            95.167.54.76/30,
+            95.167.59.244/30,
+            95.167.59.248/30,
+            95.167.64.20/30,
+            95.167.68.216/29,
+            95.167.69.116/30,
+            95.167.70.32/28,
+            95.167.70.136/29,
+            95.167.70.176/28,
+            95.167.72.48/30,
+            95.167.72.140/30,
+            95.167.72.204/30,
+            95.167.74.136/29,
+            95.167.74.180/30,
+            95.167.76.160/27,
+            95.167.99.48/28,
+            95.167.113.48/30,
+            95.167.114.48/30,
+            95.167.121.68/30,
+            95.167.122.128/28,
+            95.167.142.32/30,
+            95.167.157.156/30,
+            95.167.162.76/30,
+            95.167.162.236/30,
+            95.167.176.0/23,
+            95.167.213.0/24,
+            95.173.128.0/19,
+            95.213.0.0/17,
+            109.73.4.224/27,
+            109.120.180.0/22,
+            109.120.188.0/22,
+            109.124.66.128/30,
+            109.124.66.160/28,
+            109.124.71.64/29,
+            109.124.78.108/30,
+            109.124.80.132/30,
+            109.124.83.20/30,
+            109.124.87.96/29,
+            109.124.89.36/30,
+            109.124.89.140/30,
+            109.124.89.212/30,
+            109.124.90.32/30,
+            109.124.90.128/30,
+            109.124.97.4/30,
+            109.124.99.16/30,
+            109.124.99.160/28,
+            109.124.119.88/29,
+            109.204.204.232/29,
+            109.207.0.0/20,
+            109.232.187.16/29,
+            109.248.197.0/24,
+            128.140.168.0/21,
+            130.49.224.0/19,
+            145.255.238.240/28,
+            146.185.208.0/22,
+            146.185.240.0/22,
+            149.62.55.240/30,
+            155.212.192.0/20,
+            176.109.0.0/21,
+            176.112.168.0/21,
+            176.116.96.0/20,
+            176.116.112.0/22,
+            178.16.156.148/30,
+            178.20.234.224/29,
+            178.22.88.0/21,
+            178.49.148.176/29,
+            178.237.16.0/20,
+            178.237.206.0/24,
+            178.237.240.0/20,
+            178.248.232.60/32,
+            178.248.232.137/32,
+            178.248.233.26/32,
+            178.248.233.32/32,
+            178.248.233.60/32,
+            178.248.233.136/32,
+            178.248.233.244/31,
+            178.248.234.30/32,
+            178.248.234.33/32,
+            178.248.234.60/32,
+            178.248.234.79/32,
+            178.248.234.83/32,
+            178.248.234.136/32,
+            178.248.234.204/32,
+            178.248.234.228/32,
+            178.248.234.238/32,
+            178.248.235.60/32,
+            178.248.235.75/32,
+            178.248.235.244/32,
+            178.248.236.20/32,
+            178.248.236.83/32,
+            178.248.236.244/32,
+            178.248.237.18/32,
+            178.248.237.98/32,
+            178.248.237.136/32,
+            178.248.237.242/32,
+            178.248.238.55/32,
+            178.248.238.102/32,
+            178.248.238.128/31,
+            178.248.238.136/32,
+            178.248.238.155/32,
+            178.248.238.172/32,
+            178.248.238.205/32,
+            178.248.238.255/32,
+            178.248.239.215/32,
+            185.5.136.0/22,
+            185.6.244.0/22,
+            185.7.234.188/30,
+            185.16.148.0/22,
+            185.16.244.0/22,
+            185.29.128.0/22,
+            185.32.248.0/22,
+            185.65.149.170/32,
+            185.86.144.0/22,
+            185.100.104.0/22,
+            185.130.112.0/22,
+            185.131.68.0/22,
+            185.149.160.0/22,
+            185.168.60.0/22,
+            185.179.224.0/22,
+            185.180.200.0/22,
+            185.183.172.0/22,
+            185.187.63.0/24,
+            185.224.228.0/22,
+            185.226.52.0/22,
+            185.241.192.0/22,
+            188.93.56.0/21,
+            188.128.8.240/30,
+            188.128.11.196/30,
+            188.128.89.0/30,
+            188.128.92.104/30,
+            188.128.94.204/30,
+            188.128.98.204/30,
+            188.128.101.108/30,
+            188.128.112.216/29,
+            188.128.112.240/29,
+            188.128.113.0/28,
+            188.128.114.128/28,
+            188.128.115.232/29,
+            188.128.118.224/27,
+            188.128.119.104/30,
+            188.128.122.240/30,
+            188.247.36.124/30,
+            188.247.36.128/28,
+            188.247.36.204/30,
+            193.47.146.0/24,
+            193.203.40.0/22,
+            193.232.70.0/24,
+            194.8.70.0/23,
+            194.8.246.0/23,
+            194.67.63.200/30,
+            194.84.16.12/30,
+            194.140.247.0/24,
+            194.150.202.0/23,
+            194.165.22.0/23,
+            194.186.112.80/28,
+            194.190.9.0/24,
+            194.215.248.0/24,
+            194.226.80.0/20,
+            194.226.116.0/22,
+            194.226.127.0/24,
+            195.3.240.0/22,
+            195.16.55.224/27,
+            195.42.75.8/29,
+            195.54.20.168/29,
+            195.54.28.72/30,
+            195.54.221.0/24,
+            195.58.5.16/29,
+            195.58.13.120/30,
+            195.58.21.196/30,
+            195.58.29.57/32,
+            195.58.30.164/30,
+            195.58.30.200/29,
+            195.80.224.0/24,
+            195.98.38.16/28,
+            195.98.43.104/29,
+            195.98.73.56/29,
+            195.98.77.100/30,
+            195.128.157.0/24,
+            195.131.7.8/29,
+            195.131.53.248/29,
+            195.131.61.80/29,
+            195.131.63.24/29,
+            195.144.226.224/28,
+            195.144.232.144/30,
+            195.144.240.128/28,
+            195.149.110.0/24,
+            195.151.25.48/29,
+            195.162.36.64/28,
+            195.170.218.24/29,
+            195.170.218.88/29,
+            195.182.142.128/26,
+            195.182.145.64/28,
+            195.182.151.212/30,
+            195.182.151.216/30,
+            195.182.155.164/30,
+            195.182.156.96/30,
+            195.209.120.0/22,
+            195.211.20.0/22,
+            195.218.175.40/29,
+            195.218.190.0/23,
+            195.239.80.32/29,
+            195.239.113.0/24,
+            195.239.247.0/24,
+            212.13.104.116/30,
+            212.13.113.100/30,
+            212.15.105.64/28,
+            212.15.114.156/30,
+            212.15.115.80/28,
+            212.17.8.176/29,
+            212.17.9.144/28,
+            212.17.16.192/27,
+            212.17.17.176/28,
+            212.23.85.48/30,
+            212.23.85.56/29,
+            212.32.198.64/29,
+            212.48.34.176/28,
+            212.48.53.76/30,
+            212.48.53.84/30,
+            212.48.53.88/29,
+            212.48.53.100/30,
+            212.48.53.144/30,
+            212.48.53.152/29,
+            212.48.53.160/29,
+            212.48.53.184/29,
+            212.48.53.192/29,
+            212.48.53.200/30,
+            212.48.53.216/30,
+            212.48.53.236/30,
+            212.48.53.240/28,
+            212.48.54.0/30,
+            212.48.54.8/29,
+            212.48.54.16/28,
+            212.48.54.32/29,
+            212.48.54.44/30,
+            212.48.54.48/28,
+            212.48.54.64/28,
+            212.48.54.80/29,
+            212.48.54.92/30,
+            212.48.54.96/27,
+            212.48.54.128/27,
+            212.48.54.164/30,
+            212.48.54.168/29,
+            212.48.54.176/28,
+            212.48.54.196/30,
+            212.48.54.200/30,
+            212.48.54.208/28,
+            212.48.54.240/28,
+            212.48.134.192/26,
+            212.48.138.240/28,
+            212.48.141.160/27,
+            212.49.107.224/27,
+            212.49.124.0/26,
+            212.57.133.0/24,
+            212.57.159.0/24,
+            212.59.98.48/29,
+            212.59.99.96/27,
+            212.119.174.0/23,
+            212.120.169.48/29,
+            212.120.174.88/29,
+            212.120.184.48/28,
+            212.120.184.64/29,
+            212.120.189.208/29,
+            212.120.189.224/29,
+            212.120.190.112/29,
+            212.120.190.240/29,
+            212.120.191.120/29,
+            212.120.191.248/29,
+            212.192.156.0/22,
+            213.24.34.0/24,
+            213.24.75.0/24,
+            213.24.76.0/23,
+            213.24.128.0/22,
+            213.24.143.0/24,
+            213.24.152.0/22,
+            213.24.160.0/28,
+            213.33.171.240/29,
+            213.59.59.16/29,
+            213.59.59.64/29,
+            213.59.59.120/29,
+            213.59.59.128/29,
+            213.59.59.144/29,
+            213.59.59.168/29,
+            213.59.91.48/29,
+            213.59.91.128/27,
+            213.59.91.176/28,
+            213.85.2.64/28,
+            213.85.2.80/29,
+            213.85.20.8/30,
+            213.85.20.32/30,
+            213.85.20.84/30,
+            213.85.77.64/27,
+            213.85.142.176/28,
+            213.147.55.108/30,
+            213.172.4.192/26,
+            213.172.17.252/30,
+            213.172.18.60/30,
+            213.172.18.124/30,
+            213.172.18.148/30,
+            213.172.18.160/29,
+            213.172.18.252/30,
+            213.172.27.0/30,
+            213.172.27.116/30,
+            213.172.27.160/30,
+            213.172.27.204/30,
+            213.172.27.212/30,
+            213.172.27.224/30,
+            213.172.27.252/30,
+            213.172.30.136/30,
+            213.177.111.0/24,
+            213.183.253.56/29,
+            213.219.212.0/22,
+            213.219.237.68/30,
+            213.234.8.8/30,
+            213.234.13.60/30,
+            213.234.15.228/30,
+            213.234.15.248/30,
+            213.234.18.52/30,
+            213.242.204.76/30,
+            213.242.204.236/30,
+            213.242.205.88/30,
+            213.242.215.68/30,
+            213.242.215.192/29,
+            213.243.84.80/28,
+            213.243.106.48/28,
+            213.243.116.0/24,
+            217.16.16.0/20,
+            217.20.86.128/25,
+            217.20.144.0/20,
+            217.23.88.168/29,
+            217.23.88.248/29,
+            217.27.142.176/30,
+            217.65.214.24/29,
+            217.65.219.160/29,
+            217.67.177.208/29,
+            217.69.128.0/20,
+            217.106.0.0/16,
+            217.107.0.0/18,
+            217.107.200.0/21,
+            217.107.208.0/20,
+            217.147.23.112/28,
+            217.148.216.156/30,
+            217.148.220.160/29,
+            217.172.18.0/23,
+            217.172.20.0/22,
+            217.174.188.0/23,
+            217.195.92.16/28,
+            217.195.93.144/29,
+            217.195.94.200/29
+        }
+    }
+
+    set blacklist_v6 {
+        type ipv6_addr
+        flags interval
+    }
+
+}

blacklists_nftables/blacklist-v6.nft

@@ -0,0 +1,30 @@
+# Autogenerated nftables blacklist
+# Generated: 2026-03-29T06:56:51.821007Z
+# Source: /tmp/blacklist-v6.txt
+# IPv4: 0, IPv6: 3
+#
+# Usage:
+#   sudo nft -f <this-file>
+#   # VM protection from incoming blacklist sources
+#   sudo nft add chain inet filter input '{ type filter hook input priority 0; policy accept; }'
+#   sudo nft add rule inet filter input ip saddr @blacklist_v4 counter reject
+#   sudo nft add rule inet filter input ip6 saddr @blacklist_v6 counter reject
+
+table inet filter {
+
+    set blacklist_v4 {
+        type ipv4_addr
+        flags interval
+    }
+
+    set blacklist_v6 {
+        type ipv6_addr
+        flags interval
+        elements = {
+            2a00:bdc0:e002::/47,
+            2a00:bdc0:e004::/47,
+            2a00:bdc0:e007::/48
+        }
+    }
+
+}

blacklists_nftables/blacklist-vk-v4.nft

@@ -0,0 +1,119 @@
+# Autogenerated nftables blacklist
+# Generated: 2026-03-29T06:56:51.880649Z
+# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist-vk-v4.txt
+# IPv4: 92, IPv6: 0
+#
+# Usage:
+#   sudo nft -f <this-file>
+#   # VK egress blocking for VPN clients via NAT/FORWARD
+#   sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip daddr @blacklist_vk_v4 counter reject
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip6 daddr @blacklist_vk_v6 counter reject
+
+table inet filter {
+
+    set blacklist_vk_v4 {
+        type ipv4_addr
+        flags interval
+        elements = {
+            5.61.16.0/21,
+            5.61.232.0/21,
+            5.101.40.0/22,
+            5.181.60.0/22,
+            5.188.140.0/22,
+            37.139.32.0/22,
+            37.139.40.0/22,
+            45.84.128.0/22,
+            45.136.20.0/22,
+            62.217.160.0/20,
+            79.137.132.0/24,
+            79.137.139.0/24,
+            79.137.157.0/24,
+            79.137.164.0/24,
+            79.137.167.0/24,
+            79.137.174.0/23,
+            79.137.180.0/24,
+            79.137.240.0/21,
+            83.166.232.0/21,
+            83.166.248.0/21,
+            83.217.216.0/22,
+            83.222.28.0/22,
+            84.23.52.0/22,
+            85.114.31.108/30,
+            85.192.32.0/22,
+            85.198.106.0/23,
+            87.239.104.0/21,
+            87.240.128.0/18,
+            87.242.112.0/22,
+            89.208.84.0/22,
+            89.208.196.0/22,
+            89.208.208.0/22,
+            89.208.216.0/21,
+            89.208.228.0/22,
+            89.221.228.0/22,
+            89.221.232.0/21,
+            90.156.148.0/22,
+            90.156.212.0/22,
+            90.156.216.0/22,
+            90.156.232.0/21,
+            91.219.224.0/22,
+            91.231.132.0/22,
+            91.237.76.0/24,
+            93.153.255.84/30,
+            93.186.224.0/20,
+            94.100.176.0/20,
+            94.139.244.0/22,
+            95.142.192.0/20,
+            95.163.32.0/19,
+            95.163.180.0/22,
+            95.163.208.0/21,
+            95.163.216.0/22,
+            95.163.248.0/21,
+            95.213.0.0/17,
+            109.120.180.0/22,
+            109.120.188.0/22,
+            128.140.168.0/21,
+            130.49.224.0/19,
+            146.185.208.0/22,
+            146.185.240.0/22,
+            155.212.192.0/20,
+            176.112.168.0/21,
+            178.22.88.0/21,
+            178.237.16.0/20,
+            185.5.136.0/22,
+            185.6.244.0/22,
+            185.16.148.0/22,
+            185.16.244.0/22,
+            185.29.128.0/22,
+            185.32.248.0/22,
+            185.86.144.0/22,
+            185.100.104.0/22,
+            185.130.112.0/22,
+            185.131.68.0/22,
+            185.180.200.0/22,
+            185.187.63.0/24,
+            185.226.52.0/22,
+            185.241.192.0/22,
+            188.93.56.0/21,
+            193.203.40.0/22,
+            194.84.16.12/30,
+            195.211.20.0/22,
+            212.111.84.0/22,
+            212.233.72.0/21,
+            212.233.88.0/21,
+            212.233.96.0/22,
+            212.233.120.0/22,
+            213.219.212.0/22,
+            217.16.16.0/20,
+            217.20.144.0/20,
+            217.69.128.0/20,
+            217.174.188.0/23
+        }
+    }
+
+    set blacklist_vk_v6 {
+        type ipv6_addr
+        flags interval
+    }
+
+}

blacklists_nftables/blacklist-vk-v6.nft

@@ -0,0 +1,28 @@
+# Autogenerated nftables blacklist
+# Generated: 2026-03-29T06:56:51.906867Z
+# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist-vk-v6.txt
+# IPv4: 0, IPv6: 1
+#
+# Usage:
+#   sudo nft -f <this-file>
+#   # VK egress blocking for VPN clients via NAT/FORWARD
+#   sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip daddr @blacklist_vk_v4 counter reject
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip6 daddr @blacklist_vk_v6 counter reject
+
+table inet filter {
+
+    set blacklist_vk_v4 {
+        type ipv4_addr
+        flags interval
+    }
+
+    set blacklist_vk_v6 {
+        type ipv6_addr
+        flags interval
+        elements = {
+            2a00:bdc0::/29
+        }
+    }
+
+}

blacklists_nftables/blacklist-vk.nft

@@ -0,0 +1,122 @@
+# Autogenerated nftables blacklist
+# Generated: 2026-03-29T06:56:51.850694Z
+# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist-vk.txt
+# IPv4: 92, IPv6: 1
+#
+# Usage:
+#   sudo nft -f <this-file>
+#   # VK egress blocking for VPN clients via NAT/FORWARD
+#   sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip daddr @blacklist_vk_v4 counter reject
+#   sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip6 daddr @blacklist_vk_v6 counter reject
+
+table inet filter {
+
+    set blacklist_vk_v4 {
+        type ipv4_addr
+        flags interval
+        elements = {
+            5.61.16.0/21,
+            5.61.232.0/21,
+            5.101.40.0/22,
+            5.181.60.0/22,
+            5.188.140.0/22,
+            37.139.32.0/22,
+            37.139.40.0/22,
+            45.84.128.0/22,
+            45.136.20.0/22,
+            62.217.160.0/20,
+            79.137.132.0/24,
+            79.137.139.0/24,
+            79.137.157.0/24,
+            79.137.164.0/24,
+            79.137.167.0/24,
+            79.137.174.0/23,
+            79.137.180.0/24,
+            79.137.240.0/21,
+            83.166.232.0/21,
+            83.166.248.0/21,
+            83.217.216.0/22,
+            83.222.28.0/22,
+            84.23.52.0/22,
+            85.114.31.108/30,
+            85.192.32.0/22,
+            85.198.106.0/23,
+            87.239.104.0/21,
+            87.240.128.0/18,
+            87.242.112.0/22,
+            89.208.84.0/22,
+            89.208.196.0/22,
+            89.208.208.0/22,
+            89.208.216.0/21,
+            89.208.228.0/22,
+            89.221.228.0/22,
+            89.221.232.0/21,
+            90.156.148.0/22,
+            90.156.212.0/22,
+            90.156.216.0/22,
+            90.156.232.0/21,
+            91.219.224.0/22,
+            91.231.132.0/22,
+            91.237.76.0/24,
+            93.153.255.84/30,
+            93.186.224.0/20,
+            94.100.176.0/20,
+            94.139.244.0/22,
+            95.142.192.0/20,
+            95.163.32.0/19,
+            95.163.180.0/22,
+            95.163.208.0/21,
+            95.163.216.0/22,
+            95.163.248.0/21,
+            95.213.0.0/17,
+            109.120.180.0/22,
+            109.120.188.0/22,
+            128.140.168.0/21,
+            130.49.224.0/19,
+            146.185.208.0/22,
+            146.185.240.0/22,
+            155.212.192.0/20,
+            176.112.168.0/21,
+            178.22.88.0/21,
+            178.237.16.0/20,
+            185.5.136.0/22,
+            185.6.244.0/22,
+            185.16.148.0/22,
+            185.16.244.0/22,
+            185.29.128.0/22,
+            185.32.248.0/22,
+            185.86.144.0/22,
+            185.100.104.0/22,
+            185.130.112.0/22,
+            185.131.68.0/22,
+            185.180.200.0/22,
+            185.187.63.0/24,
+            185.226.52.0/22,
+            185.241.192.0/22,
+            188.93.56.0/21,
+            193.203.40.0/22,
+            194.84.16.12/30,
+            195.211.20.0/22,
+            212.111.84.0/22,
+            212.233.72.0/21,
+            212.233.88.0/21,
+            212.233.96.0/22,
+            212.233.120.0/22,
+            213.219.212.0/22,
+            217.16.16.0/20,
+            217.20.144.0/20,
+            217.69.128.0/20,
+            217.174.188.0/23
+        }
+    }
+
+    set blacklist_vk_v6 {
+        type ipv6_addr
+        flags interval
+        elements = {
+            2a00:bdc0::/29
+        }
+    }
+
+}

blacklists_nftables/blacklist.nft

@@ -0,0 +1,810 @@
+# Autogenerated nftables blacklist
+# Generated: 2026-03-29T06:56:51.740005Z
+# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist.txt
+# IPv4: 778, IPv6: 3
+#
+# Usage:
+#   sudo nft -f <this-file>
+#   # VM protection from incoming blacklist sources
+#   sudo nft add chain inet filter input '{ type filter hook input priority 0; policy accept; }'
+#   sudo nft add rule inet filter input ip saddr @blacklist_v4 counter reject
+#   sudo nft add rule inet filter input ip6 saddr @blacklist_v6 counter reject
+
+table inet filter {
+
+    set blacklist_v4 {
+        type ipv4_addr
+        flags interval
+        elements = {
+            5.61.16.0/21,
+            5.61.232.0/21,
+            5.101.40.0/22,
+            5.181.60.0/22,
+            5.188.140.0/22,
+            31.44.63.64/29,
+            31.177.95.0/24,
+            37.28.161.48/30,
+            37.29.53.16/30,
+            37.29.57.52/30,
+            37.29.57.64/30,
+            37.29.59.56/30,
+            37.139.32.0/22,
+            37.139.40.0/22,
+            45.84.128.0/22,
+            45.136.20.0/22,
+            46.20.70.160/28,
+            46.29.152.0/22,
+            46.29.156.0/23,
+            46.46.142.160/28,
+            46.46.148.40/29,
+            46.47.197.128/30,
+            46.47.199.76/30,
+            46.47.203.52/30,
+            46.47.207.96/30,
+            46.47.208.84/30,
+            46.47.210.76/30,
+            46.47.211.0/24,
+            46.47.212.204/30,
+            46.47.213.0/24,
+            46.47.214.200/30,
+            46.47.219.200/30,
+            46.47.223.196/30,
+            46.47.229.0/28,
+            46.47.238.144/30,
+            46.47.249.176/29,
+            46.61.208.0/24,
+            46.228.0.232/29,
+            62.5.130.104/29,
+            62.5.132.224/29,
+            62.5.189.80/29,
+            62.5.202.60/30,
+            62.5.218.204/30,
+            62.5.224.188/30,
+            62.5.242.80/28,
+            62.28.169.168/30,
+            62.33.34.16/28,
+            62.33.87.128/28,
+            62.33.199.80/29,
+            62.63.96.32/28,
+            62.63.98.24/29,
+            62.63.100.160/30,
+            62.63.101.80/29,
+            62.76.98.0/24,
+            62.105.158.200/29,
+            62.112.110.64/28,
+            62.118.101.184/29,
+            62.118.113.232/29,
+            62.118.125.188/30,
+            62.118.127.240/28,
+            62.118.193.8/29,
+            62.118.205.68/30,
+            62.118.208.100/30,
+            62.118.209.192/30,
+            62.118.216.60/30,
+            62.118.219.184/30,
+            62.118.230.4/30,
+            62.118.233.224/29,
+            62.118.234.64/29,
+            62.118.239.128/29,
+            62.141.125.0/25,
+            62.217.160.0/20,
+            77.34.209.160/28,
+            77.35.76.80/28,
+            77.35.98.240/28,
+            77.37.128.0/17,
+            77.72.139.0/28,
+            77.82.124.112/29,
+            77.243.9.80/28,
+            78.24.159.48/29,
+            78.37.67.24/29,
+            78.37.69.160/27,
+            78.37.84.120/29,
+            78.37.97.88/29,
+            78.37.104.0/29,
+            78.107.3.208/28,
+            78.107.13.208/28,
+            78.107.16.96/28,
+            78.107.18.112/28,
+            78.107.40.160/28,
+            78.107.42.144/28,
+            78.107.51.16/28,
+            78.107.61.96/28,
+            78.107.86.32/28,
+            78.108.192.0/21,
+            78.108.200.0/24,
+            78.109.140.112/29,
+            79.133.74.160/30,
+            79.133.74.168/30,
+            79.133.75.44/30,
+            79.133.75.176/30,
+            79.137.132.0/24,
+            79.137.139.0/24,
+            79.137.157.0/24,
+            79.137.164.0/24,
+            79.137.167.0/24,
+            79.137.174.0/23,
+            79.137.180.0/24,
+            79.137.183.0/24,
+            79.137.240.0/21,
+            79.142.88.0/28,
+            80.73.16.0/20,
+            80.73.168.80/28,
+            80.73.169.244/30,
+            80.82.43.24/29,
+            80.89.152.220/30,
+            80.237.11.88/29,
+            80.237.39.112/29,
+            80.237.98.80/28,
+            80.247.32.0/20,
+            80.254.100.40/29,
+            80.254.119.168/29,
+            81.1.195.0/28,
+            81.1.205.96/27,
+            81.2.1.0/28,
+            81.2.10.192/27,
+            81.3.168.148/30,
+            81.17.2.192/28,
+            81.17.3.16/29,
+            81.176.70.0/26,
+            81.176.235.0/27,
+            81.177.12.0/24,
+            81.177.31.64/26,
+            81.177.156.0/24,
+            81.195.36.48/28,
+            81.195.44.248/30,
+            81.195.45.64/30,
+            81.195.50.72/29,
+            81.195.90.44/30,
+            81.195.92.48/30,
+            81.195.93.192/27,
+            81.195.94.72/29,
+            81.195.105.160/28,
+            81.195.108.164/30,
+            81.195.112.36/30,
+            81.195.118.48/30,
+            81.195.118.128/30,
+            81.195.120.16/29,
+            81.195.124.52/30,
+            81.195.125.96/30,
+            81.195.148.140/30,
+            81.195.150.248/30,
+            81.195.151.172/30,
+            81.195.155.0/30,
+            81.195.161.12/30,
+            81.195.165.64/28,
+            81.195.168.24/30,
+            81.195.177.160/30,
+            81.195.178.224/27,
+            81.195.182.64/28,
+            81.195.192.96/30,
+            81.195.231.128/26,
+            81.195.244.32/29,
+            81.195.245.0/28,
+            81.195.247.128/28,
+            81.195.250.16/29,
+            81.211.32.16/28,
+            81.222.194.200/29,
+            81.222.209.136/29,
+            81.222.210.24/29,
+            82.140.65.240/29,
+            82.142.162.104/29,
+            82.151.107.136/29,
+            82.162.72.208/28,
+            82.162.76.176/28,
+            82.162.80.192/28,
+            82.162.87.192/28,
+            82.162.90.0/28,
+            82.162.103.144/28,
+            82.162.126.96/28,
+            82.162.149.160/28,
+            82.162.157.64/28,
+            82.162.158.176/28,
+            82.162.172.112/28,
+            82.179.86.32/27,
+            82.196.69.152/30,
+            82.196.130.0/27,
+            82.198.176.16/29,
+            82.198.176.144/29,
+            82.198.176.208/29,
+            82.198.189.128/26,
+            82.198.190.64/26,
+            82.198.191.96/27,
+            82.198.191.248/29,
+            82.200.13.0/27,
+            82.200.22.136/29,
+            82.200.22.144/28,
+            82.200.64.0/24,
+            82.208.68.240/28,
+            82.208.77.104/29,
+            82.208.81.0/24,
+            82.208.93.160/27,
+            83.69.207.248/29,
+            83.149.42.64/29,
+            83.166.232.0/21,
+            83.166.248.0/21,
+            83.172.36.224/29,
+            83.217.216.0/22,
+            83.219.5.248/29,
+            83.219.6.72/29,
+            83.219.13.128/29,
+            83.219.13.184/29,
+            83.219.23.8/29,
+            83.219.23.48/29,
+            83.219.25.0/29,
+            83.219.25.112/29,
+            83.219.138.16/28,
+            83.220.53.16/28,
+            83.222.28.0/22,
+            83.229.181.192/26,
+            83.229.232.16/29,
+            84.23.52.0/22,
+            84.53.210.144/28,
+            84.204.7.144/29,
+            84.204.93.232/30,
+            84.204.143.44/30,
+            84.204.154.16/30,
+            84.204.170.220/30,
+            84.204.217.164/30,
+            84.204.245.208/29,
+            85.21.99.48/28,
+            85.21.99.64/28,
+            85.21.102.224/28,
+            85.21.103.64/28,
+            85.21.104.192/27,
+            85.21.148.0/26,
+            85.21.149.48/28,
+            85.21.155.208/28,
+            85.21.157.48/28,
+            85.21.204.208/28,
+            85.90.98.144/30,
+            85.90.99.168/29,
+            85.90.100.72/29,
+            85.90.101.112/28,
+            85.90.101.192/29,
+            85.90.102.168/29,
+            85.90.120.72/29,
+            85.90.121.72/29,
+            85.90.125.96/29,
+            85.90.127.16/29,
+            85.94.52.160/27,
+            85.94.53.32/28,
+            85.114.30.192/30,
+            85.114.30.204/30,
+            85.114.31.108/30,
+            85.114.93.88/29,
+            85.141.17.24/30,
+            85.141.17.112/30,
+            85.141.18.80/30,
+            85.141.19.56/30,
+            85.141.21.236/30,
+            85.141.28.0/30,
+            85.141.31.68/30,
+            85.141.32.96/28,
+            85.141.33.0/28,
+            85.141.33.64/28,
+            85.141.60.96/28,
+            85.141.61.160/28,
+            85.143.125.0/24,
+            85.146.204.44/30,
+            85.192.32.0/22,
+            85.198.106.0/23,
+            85.236.29.160/27,
+            86.102.72.240/28,
+            86.102.74.64/28,
+            86.102.100.48/28,
+            86.102.108.32/28,
+            86.102.109.32/27,
+            86.102.115.80/28,
+            86.102.126.80/28,
+            86.102.126.160/28,
+            87.117.18.144/29,
+            87.117.20.64/26,
+            87.117.20.128/28,
+            87.117.21.0/26,
+            87.117.21.64/28,
+            87.117.21.80/29,
+            87.117.23.128/28,
+            87.117.31.56/29,
+            87.225.56.224/28,
+            87.226.156.64/26,
+            87.226.191.0/24,
+            87.226.213.0/24,
+            87.226.239.180/30,
+            87.237.47.204/30,
+            87.239.104.0/21,
+            87.240.128.0/18,
+            87.242.112.0/22,
+            87.245.133.0/24,
+            87.249.3.64/28,
+            87.249.5.48/30,
+            87.249.7.120/29,
+            87.249.16.32/28,
+            87.249.18.60/30,
+            87.249.22.72/29,
+            87.249.28.232/29,
+            87.249.30.176/30,
+            88.83.195.248/30,
+            88.151.200.0/24,
+            88.200.208.112/29,
+            89.21.129.16/28,
+            89.21.140.104/29,
+            89.21.152.104/29,
+            89.28.253.168/29,
+            89.28.255.56/29,
+            89.106.172.160/29,
+            89.107.123.120/29,
+            89.107.123.136/29,
+            89.107.127.136/29,
+            89.109.7.176/29,
+            89.109.250.28/30,
+            89.109.250.80/30,
+            89.109.250.88/29,
+            89.109.250.96/30,
+            89.109.250.132/30,
+            89.109.250.140/30,
+            89.111.176.0/22,
+            89.175.6.64/27,
+            89.175.8.36/30,
+            89.175.8.40/29,
+            89.175.8.52/30,
+            89.175.8.68/30,
+            89.175.8.104/30,
+            89.175.8.140/30,
+            89.175.8.192/30,
+            89.175.9.4/30,
+            89.175.10.160/30,
+            89.175.165.208/28,
+            89.175.170.144/28,
+            89.175.174.136/29,
+            89.175.176.88/30,
+            89.175.176.140/30,
+            89.175.176.176/30,
+            89.175.188.184/29,
+            89.179.155.192/28,
+            89.179.179.16/28,
+            89.179.181.0/24,
+            89.208.84.0/22,
+            89.208.196.0/22,
+            89.208.208.0/22,
+            89.208.216.0/21,
+            89.208.228.0/22,
+            89.221.228.0/22,
+            89.221.232.0/21,
+            90.150.176.52/30,
+            90.150.189.32/29,
+            90.150.189.128/26,
+            90.150.189.192/27,
+            90.150.189.224/28,
+            90.150.189.248/29,
+            90.156.148.0/22,
+            90.156.212.0/22,
+            90.156.216.0/22,
+            90.156.232.0/21,
+            91.103.194.184/29,
+            91.215.168.0/22,
+            91.217.34.0/23,
+            91.219.192.0/22,
+            91.226.250.0/24,
+            91.227.32.0/24,
+            91.231.132.0/22,
+            91.237.76.0/24,
+            92.39.106.20/30,
+            92.39.106.168/30,
+            92.39.111.84/30,
+            92.39.128.0/21,
+            92.50.198.72/30,
+            92.50.198.124/30,
+            92.50.219.136/29,
+            92.50.238.224/29,
+            92.101.253.96/29,
+            92.101.253.152/29,
+            93.153.134.112/29,
+            93.153.135.88/30,
+            93.153.136.132/30,
+            93.153.142.4/30,
+            93.153.144.60/30,
+            93.153.171.204/30,
+            93.153.172.100/30,
+            93.153.175.44/30,
+            93.153.183.104/30,
+            93.153.194.160/29,
+            93.153.220.192/29,
+            93.153.223.8/29,
+            93.153.229.232/29,
+            93.153.244.188/30,
+            93.153.244.248/29,
+            93.153.251.0/24,
+            93.153.255.84/30,
+            93.178.104.32/29,
+            93.178.104.64/29,
+            93.178.106.0/26,
+            93.186.224.0/20,
+            93.188.20.72/29,
+            93.190.110.0/24,
+            94.25.53.56/29,
+            94.25.57.176/29,
+            94.25.57.224/28,
+            94.25.65.16/29,
+            94.25.70.64/30,
+            94.25.90.240/29,
+            94.25.95.136/30,
+            94.25.119.228/30,
+            94.100.176.0/20,
+            94.124.192.192/29,
+            94.139.244.0/22,
+            94.199.64.0/21,
+            95.53.248.0/29,
+            95.54.193.80/28,
+            95.142.192.0/20,
+            95.163.32.0/19,
+            95.163.180.0/22,
+            95.163.208.0/21,
+            95.163.216.0/22,
+            95.163.248.0/21,
+            95.167.2.4/30,
+            95.167.4.168/29,
+            95.167.5.64/27,
+            95.167.21.104/29,
+            95.167.29.104/29,
+            95.167.54.76/30,
+            95.167.59.244/30,
+            95.167.59.248/30,
+            95.167.64.20/30,
+            95.167.68.216/29,
+            95.167.69.116/30,
+            95.167.70.32/28,
+            95.167.70.136/29,
+            95.167.70.176/28,
+            95.167.72.48/30,
+            95.167.72.140/30,
+            95.167.72.204/30,
+            95.167.74.136/29,
+            95.167.74.180/30,
+            95.167.76.160/27,
+            95.167.99.48/28,
+            95.167.113.48/30,
+            95.167.114.48/30,
+            95.167.121.68/30,
+            95.167.122.128/28,
+            95.167.142.32/30,
+            95.167.157.156/30,
+            95.167.162.76/30,
+            95.167.162.236/30,
+            95.167.176.0/23,
+            95.167.213.0/24,
+            95.173.128.0/19,
+            95.213.0.0/17,
+            109.73.4.224/27,
+            109.120.180.0/22,
+            109.120.188.0/22,
+            109.124.66.128/30,
+            109.124.66.160/28,
+            109.124.71.64/29,
+            109.124.78.108/30,
+            109.124.80.132/30,
+            109.124.83.20/30,
+            109.124.87.96/29,
+            109.124.89.36/30,
+            109.124.89.140/30,
+            109.124.89.212/30,
+            109.124.90.32/30,
+            109.124.90.128/30,
+            109.124.97.4/30,
+            109.124.99.16/30,
+            109.124.99.160/28,
+            109.124.119.88/29,
+            109.204.204.232/29,
+            109.207.0.0/20,
+            109.232.187.16/29,
+            109.248.197.0/24,
+            128.140.168.0/21,
+            130.49.224.0/19,
+            145.255.238.240/28,
+            146.185.208.0/22,
+            146.185.240.0/22,
+            149.62.55.240/30,
+            155.212.192.0/20,
+            176.109.0.0/21,
+            176.112.168.0/21,
+            176.116.96.0/20,
+            176.116.112.0/22,
+            178.16.156.148/30,
+            178.20.234.224/29,
+            178.22.88.0/21,
+            178.49.148.176/29,
+            178.237.16.0/20,
+            178.237.206.0/24,
+            178.237.240.0/20,
+            178.248.232.60/32,
+            178.248.232.137/32,
+            178.248.233.26/32,
+            178.248.233.32/32,
+            178.248.233.60/32,
+            178.248.233.136/32,
+            178.248.233.244/31,
+            178.248.234.30/32,
+            178.248.234.33/32,
+            178.248.234.60/32,
+            178.248.234.79/32,
+            178.248.234.83/32,
+            178.248.234.136/32,
+            178.248.234.204/32,
+            178.248.234.228/32,
+            178.248.234.238/32,
+            178.248.235.60/32,
+            178.248.235.75/32,
+            178.248.235.244/32,
+            178.248.236.20/32,
+            178.248.236.83/32,
+            178.248.236.244/32,
+            178.248.237.18/32,
+            178.248.237.98/32,
+            178.248.237.136/32,
+            178.248.237.242/32,
+            178.248.238.55/32,
+            178.248.238.102/32,
+            178.248.238.128/31,
+            178.248.238.136/32,
+            178.248.238.155/32,
+            178.248.238.172/32,
+            178.248.238.205/32,
+            178.248.238.255/32,
+            178.248.239.215/32,
+            185.5.136.0/22,
+            185.6.244.0/22,
+            185.7.234.188/30,
+            185.16.148.0/22,
+            185.16.244.0/22,
+            185.29.128.0/22,
+            185.32.248.0/22,
+            185.65.149.170/32,
+            185.86.144.0/22,
+            185.100.104.0/22,
+            185.130.112.0/22,
+            185.131.68.0/22,
+            185.149.160.0/22,
+            185.168.60.0/22,
+            185.179.224.0/22,
+            185.180.200.0/22,
+            185.183.172.0/22,
+            185.187.63.0/24,
+            185.224.228.0/22,
+            185.226.52.0/22,
+            185.241.192.0/22,
+            188.93.56.0/21,
+            188.128.8.240/30,
+            188.128.11.196/30,
+            188.128.89.0/30,
+            188.128.92.104/30,
+            188.128.94.204/30,
+            188.128.98.204/30,
+            188.128.101.108/30,
+            188.128.112.216/29,
+            188.128.112.240/29,
+            188.128.113.0/28,
+            188.128.114.128/28,
+            188.128.115.232/29,
+            188.128.118.224/27,
+            188.128.119.104/30,
+            188.128.122.240/30,
+            188.247.36.124/30,
+            188.247.36.128/28,
+            188.247.36.204/30,
+            193.47.146.0/24,
+            193.203.40.0/22,
+            193.232.70.0/24,
+            194.8.70.0/23,
+            194.8.246.0/23,
+            194.67.63.200/30,
+            194.84.16.12/30,
+            194.140.247.0/24,
+            194.150.202.0/23,
+            194.165.22.0/23,
+            194.186.112.80/28,
+            194.190.9.0/24,
+            194.215.248.0/24,
+            194.226.80.0/20,
+            194.226.116.0/22,
+            194.226.127.0/24,
+            195.3.240.0/22,
+            195.16.55.224/27,
+            195.42.75.8/29,
+            195.54.20.168/29,
+            195.54.28.72/30,
+            195.54.221.0/24,
+            195.58.5.16/29,
+            195.58.13.120/30,
+            195.58.21.196/30,
+            195.58.29.57/32,
+            195.58.30.164/30,
+            195.58.30.200/29,
+            195.80.224.0/24,
+            195.98.38.16/28,
+            195.98.43.104/29,
+            195.98.73.56/29,
+            195.98.77.100/30,
+            195.128.157.0/24,
+            195.131.7.8/29,
+            195.131.53.248/29,
+            195.131.61.80/29,
+            195.131.63.24/29,
+            195.144.226.224/28,
+            195.144.232.144/30,
+            195.144.240.128/28,
+            195.149.110.0/24,
+            195.151.25.48/29,
+            195.162.36.64/28,
+            195.170.218.24/29,
+            195.170.218.88/29,
+            195.182.142.128/26,
+            195.182.145.64/28,
+            195.182.151.212/30,
+            195.182.151.216/30,
+            195.182.155.164/30,
+            195.182.156.96/30,
+            195.209.120.0/22,
+            195.211.20.0/22,
+            195.218.175.40/29,
+            195.218.190.0/23,
+            195.239.80.32/29,
+            195.239.113.0/24,
+            195.239.247.0/24,
+            212.13.104.116/30,
+            212.13.113.100/30,
+            212.15.105.64/28,
+            212.15.114.156/30,
+            212.15.115.80/28,
+            212.17.8.176/29,
+            212.17.9.144/28,
+            212.17.16.192/27,
+            212.17.17.176/28,
+            212.23.85.48/30,
+            212.23.85.56/29,
+            212.32.198.64/29,
+            212.48.34.176/28,
+            212.48.53.76/30,
+            212.48.53.84/30,
+            212.48.53.88/29,
+            212.48.53.100/30,
+            212.48.53.144/30,
+            212.48.53.152/29,
+            212.48.53.160/29,
+            212.48.53.184/29,
+            212.48.53.192/29,
+            212.48.53.200/30,
+            212.48.53.216/30,
+            212.48.53.236/30,
+            212.48.53.240/28,
+            212.48.54.0/30,
+            212.48.54.8/29,
+            212.48.54.16/28,
+            212.48.54.32/29,
+            212.48.54.44/30,
+            212.48.54.48/28,
+            212.48.54.64/28,
+            212.48.54.80/29,
+            212.48.54.92/30,
+            212.48.54.96/27,
+            212.48.54.128/27,
+            212.48.54.164/30,
+            212.48.54.168/29,
+            212.48.54.176/28,
+            212.48.54.196/30,
+            212.48.54.200/30,
+            212.48.54.208/28,
+            212.48.54.240/28,
+            212.48.134.192/26,
+            212.48.138.240/28,
+            212.48.141.160/27,
+            212.49.107.224/27,
+            212.49.124.0/26,
+            212.57.133.0/24,
+            212.57.159.0/24,
+            212.59.98.48/29,
+            212.59.99.96/27,
+            212.119.174.0/23,
+            212.120.169.48/29,
+            212.120.174.88/29,
+            212.120.184.48/28,
+            212.120.184.64/29,
+            212.120.189.208/29,
+            212.120.189.224/29,
+            212.120.190.112/29,
+            212.120.190.240/29,
+            212.120.191.120/29,
+            212.120.191.248/29,
+            212.192.156.0/22,
+            213.24.34.0/24,
+            213.24.75.0/24,
+            213.24.76.0/23,
+            213.24.128.0/22,
+            213.24.143.0/24,
+            213.24.152.0/22,
+            213.24.160.0/28,
+            213.33.171.240/29,
+            213.59.59.16/29,
+            213.59.59.64/29,
+            213.59.59.120/29,
+            213.59.59.128/29,
+            213.59.59.144/29,
+            213.59.59.168/29,
+            213.59.91.48/29,
+            213.59.91.128/27,
+            213.59.91.176/28,
+            213.85.2.64/28,
+            213.85.2.80/29,
+            213.85.20.8/30,
+            213.85.20.32/30,
+            213.85.20.84/30,
+            213.85.77.64/27,
+            213.85.142.176/28,
+            213.147.55.108/30,
+            213.172.4.192/26,
+            213.172.17.252/30,
+            213.172.18.60/30,
+            213.172.18.124/30,
+            213.172.18.148/30,
+            213.172.18.160/29,
+            213.172.18.252/30,
+            213.172.27.0/30,
+            213.172.27.116/30,
+            213.172.27.160/30,
+            213.172.27.204/30,
+            213.172.27.212/30,
+            213.172.27.224/30,
+            213.172.27.252/30,
+            213.172.30.136/30,
+            213.177.111.0/24,
+            213.183.253.56/29,
+            213.219.212.0/22,
+            213.219.237.68/30,
+            213.234.8.8/30,
+            213.234.13.60/30,
+            213.234.15.228/30,
+            213.234.15.248/30,
+            213.234.18.52/30,
+            213.242.204.76/30,
+            213.242.204.236/30,
+            213.242.205.88/30,
+            213.242.215.68/30,
+            213.242.215.192/29,
+            213.243.84.80/28,
+            213.243.106.48/28,
+            213.243.116.0/24,
+            217.16.16.0/20,
+            217.20.86.128/25,
+            217.20.144.0/20,
+            217.23.88.168/29,
+            217.23.88.248/29,
+            217.27.142.176/30,
+            217.65.214.24/29,
+            217.65.219.160/29,
+            217.67.177.208/29,
+            217.69.128.0/20,
+            217.106.0.0/16,
+            217.107.0.0/18,
+            217.107.200.0/21,
+            217.107.208.0/20,
+            217.147.23.112/28,
+            217.148.216.156/30,
+            217.148.220.160/29,
+            217.172.18.0/23,
+            217.172.20.0/22,
+            217.174.188.0/23,
+            217.195.92.16/28,
+            217.195.93.144/29,
+            217.195.94.200/29
+        }
+    }
+
+    set blacklist_v6 {
+        type ipv6_addr
+        flags interval
+        elements = {
+            2a00:bdc0:e002::/47,
+            2a00:bdc0:e004::/47,
+            2a00:bdc0:e007::/48
+        }
+    }
+
+}

blacklists_nginx/README.md

@@ -1,302 +1,24 @@
-# Nginx Blacklist Configurations
+# nginx blacklists
 
-Auto-generated nginx configuration files for blocking networks and IP addresses.
+Short: ready-to-use deny lists for nginx (mixed, IPv4-only, and IPv6-only).
 
-## Available Files
+## Download links
 
-### Mixed IPv4/IPv6
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nginx/blacklist.conf
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nginx/blacklist-v4.conf
+- https://raw.githubusercontent.com/C24Be/AS_Network_List/refs/heads/main/blacklists_nginx/blacklist-v6.conf
 
-- **`blacklist.conf`** - Contains both IPv4 and IPv6 deny rules (809 entries)
+## How to use
 
-### IPv4 Only
-
-- **`blacklist-v4.conf`** - Contains only IPv4 deny rules (806 entries)
-
-### IPv6 Only
-
-- **`blacklist-v6.conf`** - Contains only IPv6 deny rules (3 entries)
-
-## Usage
-
-### Basic Usage
-
-Include the desired configuration file in your nginx `server` or `location` block:
+1. Download one file (`blacklist.conf`, `blacklist-v4.conf`, or `blacklist-v6.conf`).
+2. Include it in your `server` or `location` block:
 
 ```nginx
-server {
-    listen 80;
-    server_name example.com;
-
-    # Include the blacklist
-    include /path/to/blacklist.conf;
-
-    location / {
-        # your configuration
-    }
-}
+include /etc/nginx/blacklist.conf;
 ```
 
-### Separate IPv4/IPv6 Files
-
-For more granular control, use separate files:
-
-```nginx
-server {
-    listen 80;
-    listen [::]:80;
-    server_name example.com;
-
-    # Include both IPv4 and IPv6 blacklists
-    include /path/to/blacklist-v4.conf;
-    include /path/to/blacklist-v6.conf;
-
-    location / {
-        # your configuration
-    }
-}
-```
-
-### HTTP Block Level
-
-Apply the blacklist globally to all virtual hosts:
-
-```nginx
-http {
-    # Apply blacklist globally
-    include /path/to/blacklist.conf;
-
-    server {
-        listen 80;
-        server_name example.com;
-        # ...
-    }
-
-    server {
-        listen 80;
-        server_name another.com;
-        # ...
-    }
-}
-```
-
-### Location Block Level
-
-For selective blocking within specific locations:
-
-```nginx
-server {
-    listen 80;
-    server_name example.com;
-
-    location /admin {
-        # Apply blacklist only to admin area
-        include /path/to/blacklist.conf;
-        # ...
-    }
-
-    location /public {
-        # Public area without blacklist
-        # ...
-    }
-}
-```
-
-## Testing Configuration
-
-After adding the blacklist, always test your nginx configuration:
+3. Test and reload nginx:
 
 ```bash
-# Test configuration
-nginx -t
-
-# Reload nginx if test passes
-nginx -s reload
-# or
-systemctl reload nginx
+sudo nginx -t && sudo systemctl reload nginx
 ```
-
-## Custom Response
-
-By default, denied IPs receive a connection drop. To customize the response:
-
-```nginx
-server {
-    listen 80;
-    server_name example.com;
-
-    # Return custom error page
-    error_page 403 /403.html;
-
-    include /path/to/blacklist.conf;
-
-    location = /403.html {
-        root /usr/share/nginx/html;
-        internal;
-    }
-}
-```
-
-Note: For large blacklists, using `deny` directives (as in these files) is more efficient than `if` statements.
-
-## Performance Considerations
-
-- **Deny directives** are processed in order and stop at the first match
-- For optimal performance, most frequently matched IPs should be at the top
-- Current files are sorted for consistency
-- Nginx handles hundreds of deny rules efficiently
-- For very large blacklists (10,000+ entries), consider using:
-  - Nginx GeoIP2 module for geographic blocking
-  - nftables/iptables at the firewall level for better performance
-  - Stream module for TCP/UDP level blocking
-
-## Integration Examples
-
-### Docker Deployment
-
-```dockerfile
-FROM nginx:alpine
-
-# Copy blacklist
-COPY blacklist.conf /etc/nginx/blacklist.conf
-
-# Copy nginx config that includes the blacklist
-COPY nginx.conf /etc/nginx/nginx.conf
-
-EXPOSE 80 443
-CMD ["nginx", "-g", "daemon off;"]
-```
-
-### Kubernetes ConfigMap
-
-```yaml
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: nginx-blacklist
-data:
-  blacklist.conf: |
-    # Include blacklist content here
-    deny 109.124.119.88/29;
-    deny 109.124.66.128/30;
-    # ...
-```
-
-### Automated Updates
-
-Set up a cron job to automatically fetch the latest blacklist:
-
-```bash
-#!/bin/bash
-# /etc/cron.daily/update-nginx-blacklist
-
-# Download latest blacklist
-wget -q https://raw.githubusercontent.com/C24Be/AS_Network_List/main/blacklists_nginx/blacklist.conf \
-  -O /etc/nginx/blacklist.conf.new
-
-# Test nginx configuration
-nginx -t -c /etc/nginx/nginx.conf
-
-# If test passes, reload nginx
-if [ $? -eq 0 ]; then
-    mv /etc/nginx/blacklist.conf.new /etc/nginx/blacklist.conf
-    systemctl reload nginx
-    echo "Blacklist updated successfully"
-else
-    rm /etc/nginx/blacklist.conf.new
-    echo "Nginx config test failed, blacklist not updated"
-fi
-```
-
-## Logging Blocked Requests
-
-To log denied requests:
-
-```nginx
-server {
-    listen 80;
-    server_name example.com;
-
-    # Custom log format for denied IPs
-    log_format blocked '$remote_addr - $remote_user [$time_local] '
-                      '"$request" 403 0 '
-                      '"$http_referer" "$http_user_agent"';
-
-    access_log /var/log/nginx/blocked.log blocked;
-
-    include /path/to/blacklist.conf;
-
-    location / {
-        # your configuration
-    }
-}
-```
-
-## Monitoring
-
-Check how many IPs are being blocked:
-
-```bash
-# Count deny rules
-grep -c "deny" /path/to/blacklist.conf
-
-# Check blocked access logs
-tail -f /var/log/nginx/blocked.log
-
-# Count blocked requests today
-grep "$(date +%d/%b/%Y)" /var/log/nginx/access.log | grep " 403 " | wc -l
-```
-
-## Troubleshooting
-
-### Configuration Test Fails
-
-```bash
-# Check syntax
-nginx -t
-
-# Check for duplicate includes
-grep -r "include.*blacklist" /etc/nginx/
-
-# Verify file permissions
-ls -l /path/to/blacklist.conf
-```
-
-### Legitimate Users Blocked
-
-Check if their IP is in the blacklist:
-
-```bash
-grep "YOUR_IP" /path/to/blacklist.conf
-```
-
-Whitelist specific IPs before applying the blacklist:
-
-```nginx
-server {
-    listen 80;
-    server_name example.com;
-
-    # Whitelist before blacklist
-    allow 192.168.1.100;  # Trusted IP
-
-    # Then apply blacklist
-    include /path/to/blacklist.conf;
-
-    # Deny all others not explicitly allowed
-    # deny all;  # Optional
-}
-```
-
-## Automatic Updates
-
-These files are automatically regenerated daily when the blacklists are updated via the GitHub Actions workflow.
-
-## Source
-
-Generated from the blacklist files in the `blacklists/` directory by `blacklists_updater_nginx.sh`.
-
-## See Also
-
-- [IPTables/IPSet Format](../blacklists_iptables/README.md) - For firewall-level blocking
-- [Text Format](../blacklists/README.md) - For custom integrations
-- [Main Repository](https://github.com/C24Be/AS_Network_List) - Complete documentation

blacklists_nginx/blacklist-v4.conf

@@ -1,6 +1,6 @@
 # Nginx blacklist configuration (IPv4 only)
 # Auto-generated from blacklist-v4.txt
-# Last updated: 2025-12-11 06:25:09 UTC
+# Last updated: 2026-03-29 06:56:50 UTC
 #
 # Usage: Include this file in your nginx server or location block:
 #   include /path/to/blacklist-v4.conf;
@@ -38,7 +38,6 @@ deny 128.140.168.0/23;
 deny 128.140.170.0/24;
 deny 128.140.171.0/24;
 deny 128.140.172.0/22;
-deny 128.140.173.0/24;
 deny 130.49.224.0/19;
 deny 145.255.238.240/28;
 deny 146.185.208.0/22;
@@ -50,21 +49,10 @@ deny 146.185.242.0/23;
 deny 149.62.55.240/30;
 deny 155.212.192.0/20;
 deny 176.109.0.0/21;
-deny 176.109.0.0/24;
-deny 176.109.1.0/24;
-deny 176.109.2.0/24;
-deny 176.109.3.0/24;
-deny 176.109.5.0/24;
-deny 176.109.6.0/24;
 deny 176.112.168.0/21;
+deny 176.116.112.0/22;
 deny 176.116.96.0/20;
 deny 178.16.156.148/30;
-deny 178.17.176.0/23;
-deny 178.17.178.0/23;
-deny 178.17.180.0/23;
-deny 178.17.182.0/23;
-deny 178.17.184.0/22;
-deny 178.17.188.0/22;
 deny 178.20.234.224/29;
 deny 178.22.88.0/21;
 deny 178.22.89.64/26;
@@ -79,7 +67,6 @@ deny 178.237.24.0/24;
 deny 178.237.240.0/20;
 deny 178.237.248.0/21;
 deny 178.237.28.0/24;
-deny 178.237.29.0/24;
 deny 178.237.30.0/23;
 deny 178.248.232.137/32;
 deny 178.248.232.60/32;
@@ -126,21 +113,16 @@ deny 185.130.112.0/22;
 deny 185.130.112.0/23;
 deny 185.130.114.0/23;
 deny 185.131.68.0/22;
-deny 185.131.68.0/23;
 deny 185.149.160.0/24;
 deny 185.149.161.0/24;
 deny 185.149.162.0/24;
 deny 185.149.163.0/24;
-deny 185.16.10.0/23;
 deny 185.16.148.0/22;
 deny 185.16.148.0/23;
 deny 185.16.150.0/23;
 deny 185.16.244.0/22;
 deny 185.16.244.0/23;
 deny 185.16.246.0/23;
-deny 185.16.246.0/24;
-deny 185.16.247.0/24;
-deny 185.16.8.0/23;
 deny 185.168.60.0/24;
 deny 185.168.61.0/24;
 deny 185.168.62.0/24;
@@ -213,14 +195,12 @@ deny 188.93.61.0/24;
 deny 188.93.62.0/24;
 deny 193.203.40.0/22;
 deny 193.232.70.0/24;
-deny 193.33.230.0/23;
 deny 193.47.146.0/24;
 deny 194.140.247.0/25;
 deny 194.140.247.128/25;
 deny 194.150.202.0/23;
 deny 194.165.22.0/23;
 deny 194.186.112.80/28;
-deny 194.186.63.0/24;
 deny 194.190.9.0/24;
 deny 194.215.248.0/24;
 deny 194.226.116.0/22;
@@ -252,14 +232,11 @@ deny 195.182.151.216/30;
 deny 195.182.155.164/30;
 deny 195.182.156.96/30;
 deny 195.209.120.0/22;
-deny 195.209.122.0/24;
-deny 195.209.123.0/24;
 deny 195.211.20.0/22;
 deny 195.211.22.0/24;
 deny 195.211.23.0/24;
 deny 195.218.175.40/29;
 deny 195.218.190.0/23;
-deny 195.226.203.0/24;
 deny 195.239.113.0/24;
 deny 195.239.247.0/24;
 deny 195.239.80.32/29;
@@ -280,7 +257,6 @@ deny 195.98.38.16/28;
 deny 195.98.43.104/29;
 deny 195.98.73.56/29;
 deny 195.98.77.100/30;
-deny 212.111.84.0/22;
 deny 212.119.174.0/24;
 deny 212.119.175.0/24;
 deny 212.120.169.48/29;
@@ -304,15 +280,8 @@ deny 212.17.17.176/28;
 deny 212.17.8.176/29;
 deny 212.17.9.144/28;
 deny 212.192.156.0/22;
-deny 212.192.156.0/24;
-deny 212.192.157.0/24;
-deny 212.192.158.0/24;
 deny 212.23.85.48/30;
 deny 212.23.85.56/29;
-deny 212.233.120.0/22;
-deny 212.233.72.0/21;
-deny 212.233.88.0/21;
-deny 212.233.96.0/22;
 deny 212.32.198.64/29;
 deny 212.48.134.192/26;
 deny 212.48.138.240/28;
@@ -417,8 +386,6 @@ deny 213.172.27.224/30;
 deny 213.172.27.252/30;
 deny 213.172.30.136/30;
 deny 213.172.4.192/26;
-deny 213.176.232.0/23;
-deny 213.176.234.0/23;
 deny 213.177.111.0/24;
 deny 213.183.253.56/29;
 deny 213.219.212.0/22;
@@ -474,7 +441,9 @@ deny 217.106.203.240/29;
 deny 217.106.203.88/29;
 deny 217.106.93.192/26;
 deny 217.106.95.112/28;
+deny 217.107.0.0/18;
 deny 217.107.200.0/21;
+deny 217.107.208.0/20;
 deny 217.107.5.112/29;
 deny 217.107.5.16/29;
 deny 217.107.5.24/29;
@@ -490,7 +459,7 @@ deny 217.16.16.0/20;
 deny 217.16.16.0/21;
 deny 217.16.24.0/21;
 deny 217.172.18.0/23;
-deny 217.174.188.0/22;
+deny 217.172.20.0/22;
 deny 217.174.188.0/23;
 deny 217.195.92.16/28;
 deny 217.195.93.144/29;
@@ -505,7 +474,10 @@ deny 217.20.156.0/23;
 deny 217.20.158.0/24;
 deny 217.20.159.0/24;
 deny 217.20.86.128/26;
+deny 217.20.86.192/27;
+deny 217.20.86.224/29;
 deny 217.20.86.232/29;
+deny 217.20.86.240/28;
 deny 217.23.88.168/29;
 deny 217.23.88.248/29;
 deny 217.27.142.176/30;
@@ -514,10 +486,7 @@ deny 217.65.219.160/29;
 deny 217.67.177.208/29;
 deny 217.69.128.0/20;
 deny 217.69.128.0/21;
-deny 217.69.132.0/24;
 deny 217.69.136.0/21;
-deny 31.148.205.0/24;
-deny 31.177.104.0/22;
 deny 31.177.95.0/24;
 deny 31.44.63.64/29;
 deny 37.139.32.0/22;
@@ -539,8 +508,8 @@ deny 45.84.128.0/23;
 deny 45.84.130.0/23;
 deny 46.20.70.160/28;
 deny 46.228.0.232/29;
-deny 46.245.234.0/24;
 deny 46.29.152.0/22;
+deny 46.29.156.0/23;
 deny 46.46.142.160/28;
 deny 46.46.148.40/29;
 deny 46.47.197.128/30;
@@ -583,31 +552,20 @@ deny 5.61.239.48/28;
 deny 5.61.239.64/26;
 deny 62.105.158.200/29;
 deny 62.112.110.64/28;
-deny 62.118.0.208/28;
 deny 62.118.101.184/29;
 deny 62.118.113.232/29;
 deny 62.118.125.188/30;
 deny 62.118.127.240/28;
-deny 62.118.15.16/28;
-deny 62.118.17.152/29;
-deny 62.118.19.112/30;
-deny 62.118.19.40/30;
 deny 62.118.193.8/29;
 deny 62.118.205.68/30;
 deny 62.118.208.100/30;
 deny 62.118.209.192/30;
-deny 62.118.21.160/29;
 deny 62.118.216.60/30;
 deny 62.118.219.184/30;
 deny 62.118.230.4/30;
 deny 62.118.233.224/29;
 deny 62.118.234.64/29;
 deny 62.118.239.128/29;
-deny 62.118.25.112/28;
-deny 62.118.37.168/30;
-deny 62.118.37.180/30;
-deny 62.118.37.4/30;
-deny 62.118.38.212/30;
 deny 62.141.125.0/25;
 deny 62.217.160.0/20;
 deny 62.217.160.0/21;
@@ -616,7 +574,6 @@ deny 62.28.169.168/30;
 deny 62.33.199.80/29;
 deny 62.33.34.16/28;
 deny 62.33.87.128/28;
-deny 62.33.87.152/29;
 deny 62.5.130.104/29;
 deny 62.5.132.224/29;
 deny 62.5.189.80/29;
@@ -664,9 +621,6 @@ deny 79.137.132.128/25;
 deny 79.137.139.0/24;
 deny 79.137.139.0/25;
 deny 79.137.139.128/25;
-deny 79.137.140.0/24;
-deny 79.137.142.0/24;
-deny 79.137.157.0/24;
 deny 79.137.157.0/25;
 deny 79.137.157.128/25;
 deny 79.137.164.0/24;
@@ -686,9 +640,6 @@ deny 79.137.240.0/21;
 deny 79.137.240.0/22;
 deny 79.137.244.0/22;
 deny 79.142.88.0/28;
-deny 79.143.229.0/24;
-deny 79.143.230.0/24;
-deny 79.143.232.0/24;
 deny 80.237.11.88/29;
 deny 80.237.39.112/29;
 deny 80.237.98.80/28;
@@ -698,8 +649,6 @@ deny 80.247.46.0/24;
 deny 80.254.100.40/29;
 deny 80.254.119.168/29;
 deny 80.73.16.0/20;
-deny 80.73.16.0/21;
-deny 80.73.16.0/24;
 deny 80.73.168.80/28;
 deny 80.73.169.244/30;
 deny 80.82.43.24/29;
@@ -752,7 +701,6 @@ deny 81.222.194.200/29;
 deny 81.222.209.136/29;
 deny 81.222.210.24/29;
 deny 81.3.168.148/30;
-deny 82.110.69.200/29;
 deny 82.140.65.240/29;
 deny 82.142.162.104/29;
 deny 82.151.107.136/29;
@@ -838,6 +786,7 @@ deny 85.141.33.64/28;
 deny 85.141.60.96/28;
 deny 85.141.61.160/28;
 deny 85.143.125.0/24;
+deny 85.146.204.44/30;
 deny 85.192.32.0/22;
 deny 85.192.32.0/23;
 deny 85.192.34.0/23;
@@ -904,8 +853,6 @@ deny 87.239.108.0/22;
 deny 87.240.128.0/18;
 deny 87.240.128.0/19;
 deny 87.240.160.0/19;
-deny 87.240.166.0/24;
-deny 87.240.167.0/24;
 deny 87.242.112.0/22;
 deny 87.245.133.0/24;
 deny 87.249.16.32/28;
@@ -973,11 +920,6 @@ deny 89.21.140.104/29;
 deny 89.21.152.104/29;
 deny 89.221.228.0/22;
 deny 89.221.232.0/21;
-deny 89.221.232.0/22;
-deny 89.221.233.0/24;
-deny 89.221.234.0/24;
-deny 89.221.235.0/24;
-deny 89.221.236.0/22;
 deny 89.28.253.168/29;
 deny 89.28.255.56/29;
 deny 90.150.176.52/30;
@@ -1000,7 +942,6 @@ deny 90.150.189.32/29;
 deny 90.156.148.0/22;
 deny 90.156.148.0/23;
 deny 90.156.150.0/23;
-deny 90.156.151.0/24;
 deny 90.156.212.0/22;
 deny 90.156.212.0/23;
 deny 90.156.214.0/23;
@@ -1008,27 +949,13 @@ deny 90.156.216.0/22;
 deny 90.156.216.0/23;
 deny 90.156.218.0/23;
 deny 90.156.232.0/21;
-deny 90.156.248.0/22;
 deny 91.103.194.184/29;
-deny 91.135.212.0/22;
-deny 91.135.216.0/21;
-deny 91.135.220.0/24;
-deny 91.135.221.0/24;
-deny 91.195.136.0/23;
-deny 91.208.20.0/24;
 deny 91.215.168.0/22;
 deny 91.217.34.0/23;
 deny 91.219.192.0/22;
-deny 91.219.224.0/22;
-deny 91.221.140.0/23;
-deny 91.221.140.0/24;
-deny 91.221.141.0/24;
 deny 91.226.250.0/24;
 deny 91.227.32.0/24;
 deny 91.231.132.0/22;
-deny 91.231.132.0/24;
-deny 91.231.133.0/24;
-deny 91.231.134.0/24;
 deny 91.237.76.0/24;
 deny 92.101.253.152/29;
 deny 92.101.253.96/29;
@@ -1073,7 +1000,6 @@ deny 94.100.184.0/21;
 deny 94.124.192.192/29;
 deny 94.139.244.0/22;
 deny 94.139.244.0/23;
-deny 94.139.244.0/24;
 deny 94.139.246.0/23;
 deny 94.199.64.0/21;
 deny 94.25.119.228/30;
@@ -1090,9 +1016,6 @@ deny 95.142.200.0/21;
 deny 95.142.201.0/24;
 deny 95.142.202.0/24;
 deny 95.142.203.0/24;
-deny 95.142.204.0/23;
-deny 95.142.207.0/24;
-deny 95.163.133.0/24;
 deny 95.163.180.0/22;
 deny 95.163.180.0/23;
 deny 95.163.182.0/23;
@@ -1130,6 +1053,7 @@ deny 95.167.5.64/28;
 deny 95.167.5.80/28;
 deny 95.167.54.76/30;
 deny 95.167.59.244/30;
+deny 95.167.59.248/30;
 deny 95.167.64.20/30;
 deny 95.167.68.216/29;
 deny 95.167.69.116/30;
@@ -1147,7 +1071,6 @@ deny 95.173.128.0/19;
 deny 95.173.128.0/20;
 deny 95.173.144.0/20;
 deny 95.213.0.0/17;
-deny 95.213.0.0/18;
 deny 95.213.0.0/20;
 deny 95.213.16.0/21;
 deny 95.213.24.0/23;
@@ -1162,13 +1085,8 @@ deny 95.213.33.0/24;
 deny 95.213.34.0/23;
 deny 95.213.36.0/22;
 deny 95.213.40.0/21;
-deny 95.213.44.0/24;
-deny 95.213.45.0/24;
 deny 95.213.48.0/20;
 deny 95.213.64.0/18;
-deny 95.47.189.0/24;
-deny 95.47.191.0/24;
-deny 95.47.244.0/24;
 deny 95.53.248.0/29;
 deny 95.54.193.80/28;
 

blacklists_nginx/blacklist-v6.conf

@@ -1,32 +1,14 @@
 # Nginx blacklist configuration (IPv6 only)
 # Auto-generated from blacklist-v6.txt
-# Last updated: 2025-12-11 06:25:09 UTC
+# Last updated: 2026-03-29 06:56:50 UTC
 #
 # Usage: Include this file in your nginx server or location block:
 #   include /path/to/blacklist-v6.conf;
 #
 
-deny 2a00:1148::/29;
-deny 2a00:1148::/32;
-deny 2a00:a300::/32;
-deny 2a00:b4c0::/32;
-deny 2a00:bdc0:8000::/34;
-deny 2a00:bdc0::/33;
-deny 2a00:bdc0:c000::/35;
 deny 2a00:bdc0:e002::/48;
 deny 2a00:bdc0:e003::/48;
 deny 2a00:bdc0:e004::/48;
 deny 2a00:bdc0:e005::/48;
 deny 2a00:bdc0:e007::/48;
-deny 2a00:bdc0:f000::/36;
-deny 2a00:bdc1::/32;
-deny 2a00:bdc2::/31;
-deny 2a00:bdc4::/30;
-deny 2a0c:a9c7:156::/48;
-deny 2a0c:a9c7:157::/48;
-deny 2a0c:a9c7:158::/48;
-deny 2a14:25c0::/32;
-deny 2a14:25c5::/32;
-deny 2a14:25c6::/32;
-deny 2a14:25c7::/32;
 

blacklists_nginx/blacklist.conf

@@ -1,6 +1,6 @@
 # Nginx blacklist configuration (mixed IPv4/IPv6)
 # Auto-generated from blacklist.txt
-# Last updated: 2025-12-11 06:25:09 UTC
+# Last updated: 2026-03-29 06:56:50 UTC
 #
 # Usage: Include this file in your nginx server or location block:
 #   include /path/to/blacklist.conf;
@@ -38,7 +38,6 @@ deny 128.140.168.0/23;
 deny 128.140.170.0/24;
 deny 128.140.171.0/24;
 deny 128.140.172.0/22;
-deny 128.140.173.0/24;
 deny 130.49.224.0/19;
 deny 145.255.238.240/28;
 deny 146.185.208.0/22;
@@ -50,21 +49,10 @@ deny 146.185.242.0/23;
 deny 149.62.55.240/30;
 deny 155.212.192.0/20;
 deny 176.109.0.0/21;
-deny 176.109.0.0/24;
-deny 176.109.1.0/24;
-deny 176.109.2.0/24;
-deny 176.109.3.0/24;
-deny 176.109.5.0/24;
-deny 176.109.6.0/24;
 deny 176.112.168.0/21;
+deny 176.116.112.0/22;
 deny 176.116.96.0/20;
 deny 178.16.156.148/30;
-deny 178.17.176.0/23;
-deny 178.17.178.0/23;
-deny 178.17.180.0/23;
-deny 178.17.182.0/23;
-deny 178.17.184.0/22;
-deny 178.17.188.0/22;
 deny 178.20.234.224/29;
 deny 178.22.88.0/21;
 deny 178.22.89.64/26;
@@ -79,7 +67,6 @@ deny 178.237.24.0/24;
 deny 178.237.240.0/20;
 deny 178.237.248.0/21;
 deny 178.237.28.0/24;
-deny 178.237.29.0/24;
 deny 178.237.30.0/23;
 deny 178.248.232.137/32;
 deny 178.248.232.60/32;
@@ -126,21 +113,16 @@ deny 185.130.112.0/22;
 deny 185.130.112.0/23;
 deny 185.130.114.0/23;
 deny 185.131.68.0/22;
-deny 185.131.68.0/23;
 deny 185.149.160.0/24;
 deny 185.149.161.0/24;
 deny 185.149.162.0/24;
 deny 185.149.163.0/24;
-deny 185.16.10.0/23;
 deny 185.16.148.0/22;
 deny 185.16.148.0/23;
 deny 185.16.150.0/23;
 deny 185.16.244.0/22;
 deny 185.16.244.0/23;
 deny 185.16.246.0/23;
-deny 185.16.246.0/24;
-deny 185.16.247.0/24;
-deny 185.16.8.0/23;
 deny 185.168.60.0/24;
 deny 185.168.61.0/24;
 deny 185.168.62.0/24;
@@ -213,14 +195,12 @@ deny 188.93.61.0/24;
 deny 188.93.62.0/24;
 deny 193.203.40.0/22;
 deny 193.232.70.0/24;
-deny 193.33.230.0/23;
 deny 193.47.146.0/24;
 deny 194.140.247.0/25;
 deny 194.140.247.128/25;
 deny 194.150.202.0/23;
 deny 194.165.22.0/23;
 deny 194.186.112.80/28;
-deny 194.186.63.0/24;
 deny 194.190.9.0/24;
 deny 194.215.248.0/24;
 deny 194.226.116.0/22;
@@ -252,14 +232,11 @@ deny 195.182.151.216/30;
 deny 195.182.155.164/30;
 deny 195.182.156.96/30;
 deny 195.209.120.0/22;
-deny 195.209.122.0/24;
-deny 195.209.123.0/24;
 deny 195.211.20.0/22;
 deny 195.211.22.0/24;
 deny 195.211.23.0/24;
 deny 195.218.175.40/29;
 deny 195.218.190.0/23;
-deny 195.226.203.0/24;
 deny 195.239.113.0/24;
 deny 195.239.247.0/24;
 deny 195.239.80.32/29;
@@ -280,7 +257,6 @@ deny 195.98.38.16/28;
 deny 195.98.43.104/29;
 deny 195.98.73.56/29;
 deny 195.98.77.100/30;
-deny 212.111.84.0/22;
 deny 212.119.174.0/24;
 deny 212.119.175.0/24;
 deny 212.120.169.48/29;
@@ -304,15 +280,8 @@ deny 212.17.17.176/28;
 deny 212.17.8.176/29;
 deny 212.17.9.144/28;
 deny 212.192.156.0/22;
-deny 212.192.156.0/24;
-deny 212.192.157.0/24;
-deny 212.192.158.0/24;
 deny 212.23.85.48/30;
 deny 212.23.85.56/29;
-deny 212.233.120.0/22;
-deny 212.233.72.0/21;
-deny 212.233.88.0/21;
-deny 212.233.96.0/22;
 deny 212.32.198.64/29;
 deny 212.48.134.192/26;
 deny 212.48.138.240/28;
@@ -417,8 +386,6 @@ deny 213.172.27.224/30;
 deny 213.172.27.252/30;
 deny 213.172.30.136/30;
 deny 213.172.4.192/26;
-deny 213.176.232.0/23;
-deny 213.176.234.0/23;
 deny 213.177.111.0/24;
 deny 213.183.253.56/29;
 deny 213.219.212.0/22;
@@ -474,7 +441,9 @@ deny 217.106.203.240/29;
 deny 217.106.203.88/29;
 deny 217.106.93.192/26;
 deny 217.106.95.112/28;
+deny 217.107.0.0/18;
 deny 217.107.200.0/21;
+deny 217.107.208.0/20;
 deny 217.107.5.112/29;
 deny 217.107.5.16/29;
 deny 217.107.5.24/29;
@@ -490,7 +459,7 @@ deny 217.16.16.0/20;
 deny 217.16.16.0/21;
 deny 217.16.24.0/21;
 deny 217.172.18.0/23;
-deny 217.174.188.0/22;
+deny 217.172.20.0/22;
 deny 217.174.188.0/23;
 deny 217.195.92.16/28;
 deny 217.195.93.144/29;
@@ -505,7 +474,10 @@ deny 217.20.156.0/23;
 deny 217.20.158.0/24;
 deny 217.20.159.0/24;
 deny 217.20.86.128/26;
+deny 217.20.86.192/27;
+deny 217.20.86.224/29;
 deny 217.20.86.232/29;
+deny 217.20.86.240/28;
 deny 217.23.88.168/29;
 deny 217.23.88.248/29;
 deny 217.27.142.176/30;
@@ -514,33 +486,12 @@ deny 217.65.219.160/29;
 deny 217.67.177.208/29;
 deny 217.69.128.0/20;
 deny 217.69.128.0/21;
-deny 217.69.132.0/24;
 deny 217.69.136.0/21;
-deny 2a00:1148::/29;
-deny 2a00:1148::/32;
-deny 2a00:a300::/32;
-deny 2a00:b4c0::/32;
-deny 2a00:bdc0:8000::/34;
-deny 2a00:bdc0::/33;
-deny 2a00:bdc0:c000::/35;
 deny 2a00:bdc0:e002::/48;
 deny 2a00:bdc0:e003::/48;
 deny 2a00:bdc0:e004::/48;
 deny 2a00:bdc0:e005::/48;
 deny 2a00:bdc0:e007::/48;
-deny 2a00:bdc0:f000::/36;
-deny 2a00:bdc1::/32;
-deny 2a00:bdc2::/31;
-deny 2a00:bdc4::/30;
-deny 2a0c:a9c7:156::/48;
-deny 2a0c:a9c7:157::/48;
-deny 2a0c:a9c7:158::/48;
-deny 2a14:25c0::/32;
-deny 2a14:25c5::/32;
-deny 2a14:25c6::/32;
-deny 2a14:25c7::/32;
-deny 31.148.205.0/24;
-deny 31.177.104.0/22;
 deny 31.177.95.0/24;
 deny 31.44.63.64/29;
 deny 37.139.32.0/22;
@@ -562,8 +513,8 @@ deny 45.84.128.0/23;
 deny 45.84.130.0/23;
 deny 46.20.70.160/28;
 deny 46.228.0.232/29;
-deny 46.245.234.0/24;
 deny 46.29.152.0/22;
+deny 46.29.156.0/23;
 deny 46.46.142.160/28;
 deny 46.46.148.40/29;
 deny 46.47.197.128/30;
@@ -606,31 +557,20 @@ deny 5.61.239.48/28;
 deny 5.61.239.64/26;
 deny 62.105.158.200/29;
 deny 62.112.110.64/28;
-deny 62.118.0.208/28;
 deny 62.118.101.184/29;
 deny 62.118.113.232/29;
 deny 62.118.125.188/30;
 deny 62.118.127.240/28;
-deny 62.118.15.16/28;
-deny 62.118.17.152/29;
-deny 62.118.19.112/30;
-deny 62.118.19.40/30;
 deny 62.118.193.8/29;
 deny 62.118.205.68/30;
 deny 62.118.208.100/30;
 deny 62.118.209.192/30;
-deny 62.118.21.160/29;
 deny 62.118.216.60/30;
 deny 62.118.219.184/30;
 deny 62.118.230.4/30;
 deny 62.118.233.224/29;
 deny 62.118.234.64/29;
 deny 62.118.239.128/29;
-deny 62.118.25.112/28;
-deny 62.118.37.168/30;
-deny 62.118.37.180/30;
-deny 62.118.37.4/30;
-deny 62.118.38.212/30;
 deny 62.141.125.0/25;
 deny 62.217.160.0/20;
 deny 62.217.160.0/21;
@@ -639,7 +579,6 @@ deny 62.28.169.168/30;
 deny 62.33.199.80/29;
 deny 62.33.34.16/28;
 deny 62.33.87.128/28;
-deny 62.33.87.152/29;
 deny 62.5.130.104/29;
 deny 62.5.132.224/29;
 deny 62.5.189.80/29;
@@ -687,9 +626,6 @@ deny 79.137.132.128/25;
 deny 79.137.139.0/24;
 deny 79.137.139.0/25;
 deny 79.137.139.128/25;
-deny 79.137.140.0/24;
-deny 79.137.142.0/24;
-deny 79.137.157.0/24;
 deny 79.137.157.0/25;
 deny 79.137.157.128/25;
 deny 79.137.164.0/24;
@@ -709,9 +645,6 @@ deny 79.137.240.0/21;
 deny 79.137.240.0/22;
 deny 79.137.244.0/22;
 deny 79.142.88.0/28;
-deny 79.143.229.0/24;
-deny 79.143.230.0/24;
-deny 79.143.232.0/24;
 deny 80.237.11.88/29;
 deny 80.237.39.112/29;
 deny 80.237.98.80/28;
@@ -721,8 +654,6 @@ deny 80.247.46.0/24;
 deny 80.254.100.40/29;
 deny 80.254.119.168/29;
 deny 80.73.16.0/20;
-deny 80.73.16.0/21;
-deny 80.73.16.0/24;
 deny 80.73.168.80/28;
 deny 80.73.169.244/30;
 deny 80.82.43.24/29;
@@ -775,7 +706,6 @@ deny 81.222.194.200/29;
 deny 81.222.209.136/29;
 deny 81.222.210.24/29;
 deny 81.3.168.148/30;
-deny 82.110.69.200/29;
 deny 82.140.65.240/29;
 deny 82.142.162.104/29;
 deny 82.151.107.136/29;
@@ -861,6 +791,7 @@ deny 85.141.33.64/28;
 deny 85.141.60.96/28;
 deny 85.141.61.160/28;
 deny 85.143.125.0/24;
+deny 85.146.204.44/30;
 deny 85.192.32.0/22;
 deny 85.192.32.0/23;
 deny 85.192.34.0/23;
@@ -927,8 +858,6 @@ deny 87.239.108.0/22;
 deny 87.240.128.0/18;
 deny 87.240.128.0/19;
 deny 87.240.160.0/19;
-deny 87.240.166.0/24;
-deny 87.240.167.0/24;
 deny 87.242.112.0/22;
 deny 87.245.133.0/24;
 deny 87.249.16.32/28;
@@ -996,11 +925,6 @@ deny 89.21.140.104/29;
 deny 89.21.152.104/29;
 deny 89.221.228.0/22;
 deny 89.221.232.0/21;
-deny 89.221.232.0/22;
-deny 89.221.233.0/24;
-deny 89.221.234.0/24;
-deny 89.221.235.0/24;
-deny 89.221.236.0/22;
 deny 89.28.253.168/29;
 deny 89.28.255.56/29;
 deny 90.150.176.52/30;
@@ -1023,7 +947,6 @@ deny 90.150.189.32/29;
 deny 90.156.148.0/22;
 deny 90.156.148.0/23;
 deny 90.156.150.0/23;
-deny 90.156.151.0/24;
 deny 90.156.212.0/22;
 deny 90.156.212.0/23;
 deny 90.156.214.0/23;
@@ -1031,27 +954,13 @@ deny 90.156.216.0/22;
 deny 90.156.216.0/23;
 deny 90.156.218.0/23;
 deny 90.156.232.0/21;
-deny 90.156.248.0/22;
 deny 91.103.194.184/29;
-deny 91.135.212.0/22;
-deny 91.135.216.0/21;
-deny 91.135.220.0/24;
-deny 91.135.221.0/24;
-deny 91.195.136.0/23;
-deny 91.208.20.0/24;
 deny 91.215.168.0/22;
 deny 91.217.34.0/23;
 deny 91.219.192.0/22;
-deny 91.219.224.0/22;
-deny 91.221.140.0/23;
-deny 91.221.140.0/24;
-deny 91.221.141.0/24;
 deny 91.226.250.0/24;
 deny 91.227.32.0/24;
 deny 91.231.132.0/22;
-deny 91.231.132.0/24;
-deny 91.231.133.0/24;
-deny 91.231.134.0/24;
 deny 91.237.76.0/24;
 deny 92.101.253.152/29;
 deny 92.101.253.96/29;
@@ -1096,7 +1005,6 @@ deny 94.100.184.0/21;
 deny 94.124.192.192/29;
 deny 94.139.244.0/22;
 deny 94.139.244.0/23;
-deny 94.139.244.0/24;
 deny 94.139.246.0/23;
 deny 94.199.64.0/21;
 deny 94.25.119.228/30;
@@ -1113,9 +1021,6 @@ deny 95.142.200.0/21;
 deny 95.142.201.0/24;
 deny 95.142.202.0/24;
 deny 95.142.203.0/24;
-deny 95.142.204.0/23;
-deny 95.142.207.0/24;
-deny 95.163.133.0/24;
 deny 95.163.180.0/22;
 deny 95.163.180.0/23;
 deny 95.163.182.0/23;
@@ -1153,6 +1058,7 @@ deny 95.167.5.64/28;
 deny 95.167.5.80/28;
 deny 95.167.54.76/30;
 deny 95.167.59.244/30;
+deny 95.167.59.248/30;
 deny 95.167.64.20/30;
 deny 95.167.68.216/29;
 deny 95.167.69.116/30;
@@ -1170,7 +1076,6 @@ deny 95.173.128.0/19;
 deny 95.173.128.0/20;
 deny 95.173.144.0/20;
 deny 95.213.0.0/17;
-deny 95.213.0.0/18;
 deny 95.213.0.0/20;
 deny 95.213.16.0/21;
 deny 95.213.24.0/23;
@@ -1185,13 +1090,8 @@ deny 95.213.33.0/24;
 deny 95.213.34.0/23;
 deny 95.213.36.0/22;
 deny 95.213.40.0/21;
-deny 95.213.44.0/24;
-deny 95.213.45.0/24;
 deny 95.213.48.0/20;
 deny 95.213.64.0/18;
-deny 95.47.189.0/24;
-deny 95.47.191.0/24;
-deny 95.47.244.0/24;
 deny 95.53.248.0/29;
 deny 95.54.193.80/28;
 

blacklists_route/blacklist-vk-v4.routes

@@ -0,0 +1,274 @@
+# Linux routes for VK networks (IPv4)
+# Auto-generated by blacklists_updater_routes.sh
+# Last updated: 2026-03-29 06:56:52 UTC
+#
+# Apply:
+#   sudo sh blacklist-vk-v4.routes
+#
+
+ip route replace 109.120.180.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 109.120.180.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 109.120.182.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 109.120.188.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 109.120.188.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 109.120.190.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 128.140.168.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 128.140.168.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 128.140.170.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 128.140.171.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 128.140.172.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 130.49.224.0/19 via 127.0.0.1 dev lo onlink
+ip route replace 146.185.208.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 146.185.208.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 146.185.210.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 146.185.240.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 146.185.240.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 146.185.242.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 155.212.192.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 176.112.168.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 178.22.88.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 178.22.89.64/26 via 127.0.0.1 dev lo onlink
+ip route replace 178.22.94.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 178.237.16.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 178.237.16.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 178.237.24.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 178.237.30.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.100.104.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.100.104.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.100.106.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.130.112.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.130.112.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.130.114.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.131.68.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.16.148.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.16.148.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.16.150.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.16.244.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.16.244.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.16.246.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.180.200.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.187.63.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 185.187.63.0/25 via 127.0.0.1 dev lo onlink
+ip route replace 185.187.63.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 185.226.52.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.226.52.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.226.54.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.241.192.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.241.192.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.241.194.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.29.128.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.29.130.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 185.32.248.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.32.248.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.32.250.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.5.136.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.5.136.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.5.138.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.6.244.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.6.244.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.6.246.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.86.144.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 185.86.144.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 185.86.146.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 188.93.56.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 188.93.56.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 188.93.57.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 188.93.58.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 188.93.60.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 188.93.61.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 188.93.62.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 193.203.40.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 194.84.16.12/30 via 127.0.0.1 dev lo onlink
+ip route replace 195.211.20.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 195.211.22.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 195.211.23.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 212.111.84.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 212.233.120.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 212.233.72.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 212.233.88.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 212.233.96.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 213.219.212.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 213.219.212.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 213.219.214.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 217.16.16.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 217.16.16.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 217.16.24.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 217.174.188.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.144.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.144.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.148.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.149.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.150.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.152.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.156.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.158.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 217.20.159.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 217.69.128.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 217.69.128.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 217.69.136.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 37.139.32.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 37.139.32.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 37.139.34.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 37.139.40.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 37.139.40.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 37.139.42.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 45.136.20.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 45.136.20.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 45.136.22.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 45.84.128.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 45.84.128.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 45.84.130.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 5.101.40.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 5.101.40.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 5.101.42.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 5.181.60.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 5.181.60.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 5.181.61.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 5.181.62.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 5.188.140.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 5.188.140.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 5.188.142.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.16.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.16.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.20.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.232.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.232.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.236.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.238.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.239.0/27 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.239.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.239.40/29 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.239.48/28 via 127.0.0.1 dev lo onlink
+ip route replace 5.61.239.64/26 via 127.0.0.1 dev lo onlink
+ip route replace 62.217.160.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 62.217.160.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 62.217.168.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.132.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.132.0/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.132.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.139.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.139.0/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.139.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.157.0/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.157.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.164.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.164.0/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.164.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.167.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.167.0/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.167.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.174.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.174.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.175.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.180.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.180.0/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.180.128/25 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.240.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.240.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 79.137.244.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 83.166.232.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 83.166.232.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 83.166.236.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 83.166.248.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 83.166.248.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 83.166.252.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 83.217.216.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 83.217.216.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 83.217.218.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 83.222.28.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 84.23.52.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 84.23.52.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 84.23.54.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 85.114.31.108/30 via 127.0.0.1 dev lo onlink
+ip route replace 85.192.32.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 85.192.32.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 85.192.34.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 85.198.106.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 85.198.107.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 87.239.104.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 87.239.104.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 87.239.108.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 87.240.128.0/18 via 127.0.0.1 dev lo onlink
+ip route replace 87.240.128.0/19 via 127.0.0.1 dev lo onlink
+ip route replace 87.240.160.0/19 via 127.0.0.1 dev lo onlink
+ip route replace 87.242.112.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.196.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.196.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.198.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.208.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.208.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.210.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.216.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.216.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.218.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.220.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.228.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.228.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.230.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.84.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.84.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.208.86.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 89.221.228.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 89.221.232.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.148.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.148.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.150.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.212.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.212.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.214.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.216.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.216.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.218.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 90.156.232.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 91.219.224.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 91.231.132.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 91.237.76.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 93.153.255.84/30 via 127.0.0.1 dev lo onlink
+ip route replace 93.186.224.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 93.186.224.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 93.186.232.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 94.100.176.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 94.100.176.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 94.100.184.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 94.139.244.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 94.139.244.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 94.139.246.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.142.192.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 95.142.192.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 95.142.200.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.180.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.180.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.182.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.208.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.208.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.210.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.212.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.216.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.216.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.218.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.248.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.248.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.252.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.254.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.32.0/19 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.32.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.36.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.40.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 95.163.48.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.0.0/17 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.0.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.16.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.24.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.26.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.27.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.28.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.29.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.30.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.31.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.32.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.33.0/24 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.34.0/23 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.36.0/22 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.40.0/21 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.48.0/20 via 127.0.0.1 dev lo onlink
+ip route replace 95.213.64.0/18 via 127.0.0.1 dev lo onlink

blacklists_route/blacklist-vk-v6.routes

@@ -0,0 +1,9 @@
+# Linux routes for VK networks (IPv6)
+# Auto-generated by blacklists_updater_routes.sh
+# Last updated: 2026-03-29 06:56:52 UTC
+#
+# Apply:
+#   sudo sh blacklist-vk-v6.routes
+#
+
+ip -6 route replace 2a00:bdc0::/29 via ::1 dev lo

blacklists_updater_iptables.sh

@@ -1,18 +1,43 @@
 #!/bin/sh
 
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
 # Input files (generated by blacklists_updater_txt.sh)
-blacklist_file="blacklists/blacklist.txt"
-blacklist_v4_file="blacklists/blacklist-v4.txt"
-blacklist_v6_file="blacklists/blacklist-v6.txt"
+blacklist_file="${SCRIPT_DIR}/blacklists/blacklist.txt"
+blacklist_v4_file="${SCRIPT_DIR}/blacklists/blacklist-v4.txt"
+blacklist_v6_file="${SCRIPT_DIR}/blacklists/blacklist-v6.txt"
+
+# Source files for name-based VK filtering
+auto_all_v4_file="${SCRIPT_DIR}/auto/all-ru-ipv4.txt"
+auto_all_v6_file="${SCRIPT_DIR}/auto/all-ru-ipv6.txt"
+auto_ripe_v4_file="${SCRIPT_DIR}/auto/ripe-ru-ipv4.txt"
+vk_name_pattern='vk[[:space:]-]*cloud|vkcompany|vkontakte'
+
+# Additional VK-only text blacklists
+blacklist_vk_file="${SCRIPT_DIR}/blacklists/blacklist-vk.txt"
+blacklist_vk_v4_file="${SCRIPT_DIR}/blacklists/blacklist-vk-v4.txt"
+blacklist_vk_v6_file="${SCRIPT_DIR}/blacklists/blacklist-vk-v6.txt"
 
 # Output directory and files
-iptables_output_dir="blacklists_iptables"
-iptables_output_file="${iptables_output_dir}/blacklist.ipset"
+iptables_output_dir="${SCRIPT_DIR}/blacklists_iptables"
 iptables_v4_output_file="${iptables_output_dir}/blacklist-v4.ipset"
 iptables_v6_output_file="${iptables_output_dir}/blacklist-v6.ipset"
+iptables_vk_v4_output_file="${iptables_output_dir}/blacklist-vk-v4.ipset"
+iptables_vk_v6_output_file="${iptables_output_dir}/blacklist-vk-v6.ipset"
 
-# Create iptables directory if it doesn't exist
-mkdir -p "${iptables_output_dir}"
+# Create required directories if they don't exist
+mkdir -p "${iptables_output_dir}" "${SCRIPT_DIR}/blacklists"
+
+# Build additional VK-only blacklist from network names in auto/*.txt files
+tmp_vk_file="$(mktemp "${SCRIPT_DIR}/blacklists/.blacklist-vk.XXXXXX")"
+for source_file in "${auto_all_v4_file}" "${auto_all_v6_file}" "${auto_ripe_v4_file}"; do
+    [ -f "${source_file}" ] || continue
+    awk -v pattern="${vk_name_pattern}" 'tolower($0) ~ pattern { print $1 }' "${source_file}" >> "${tmp_vk_file}"
+done
+sort -u "${tmp_vk_file}" > "${blacklist_vk_file}"
+grep ':' "${blacklist_vk_file}" | sort -u > "${blacklist_vk_v6_file}" || true
+grep -v ':' "${blacklist_vk_file}" | sort -u > "${blacklist_vk_v4_file}" || true
+rm -f "${tmp_vk_file}"
 
 # Function to generate ipset config from input file
 generate_ipset_config() {
@@ -21,12 +46,25 @@ generate_ipset_config() {
     local ip_version="$3"
     local set_name="$4"
     local family="$5"
-    
+    local iptables_cmd="iptables"
+    local rule_primary=""
+    local rule_secondary=""
+
+    [ "${family}" = "inet6" ] && iptables_cmd="ip6tables"
+
+    if printf "%s" "${set_name}" | grep -q '^blacklist-vk'; then
+        rule_primary="${iptables_cmd} -I OUTPUT -m set --match-set ${set_name} dst -j REJECT"
+        rule_secondary="${iptables_cmd} -I FORWARD -m set --match-set ${set_name} dst -j REJECT"
+    else
+        rule_primary="${iptables_cmd} -I INPUT -m set --match-set ${set_name} src -m conntrack --ctstate NEW -j DROP"
+        rule_secondary="${iptables_cmd} -I FORWARD -m set --match-set ${set_name} src -m conntrack --ctstate NEW -j DROP"
+    fi
+
     # Count entries for hash size calculation
     local count=$(wc -l < "${input_file}" | tr -d ' ')
     local hashsize=$((count > 1024 ? count : 1024))
     local maxelem=$((count * 2))
-    
+
     # Generate ipset configuration with header
     cat > "${output_file}" << EOF
 # IPSet blacklist configuration ${ip_version}
@@ -38,8 +76,8 @@ generate_ipset_config() {
 #      ipset restore < $(basename ${output_file})
 #
 #   2. Use with iptables/ip6tables:
-#      iptables -I INPUT -m set --match-set ${set_name} src -j DROP
-#      iptables -I FORWARD -m set --match-set ${set_name} src -j DROP
+#      ${rule_primary}
+${rule_secondary:+#      ${rule_secondary}}
 #
 #   3. To flush/delete the set:
 #      ipset flush ${set_name}
@@ -55,7 +93,7 @@ EOF
         [ -z "${network}" ] && continue
         echo "add ${set_name} ${network}" >> "${output_file}"
     done < "${input_file}"
-    
+
     echo "✓ Generated ${ip_version}: ${output_file}"
     echo "  Total entries: ${count}"
 }
@@ -63,34 +101,16 @@ EOF
 # Generate ipset configurations from blacklist files
 generate_ipset_config "${blacklist_v4_file}" "${iptables_v4_output_file}" "(IPv4 only)" "blacklist-v4" "inet"
 generate_ipset_config "${blacklist_v6_file}" "${iptables_v6_output_file}" "(IPv6 only)" "blacklist-v6" "inet6"
+generate_ipset_config "${blacklist_vk_v4_file}" "${iptables_vk_v4_output_file}" "(VK names, IPv4 only)" "blacklist-vk-v4" "inet"
+generate_ipset_config "${blacklist_vk_v6_file}" "${iptables_vk_v6_output_file}" "(VK names, IPv6 only)" "blacklist-vk-v6" "inet6"
 
-# For mixed file, we need to create two sets (IPv4 and IPv6) as ipset doesn't support mixed families
-cat > "${iptables_output_file}" << EOF
-# IPSet blacklist configuration (mixed IPv4/IPv6)
-# Auto-generated from $(basename ${blacklist_file})
-# Last updated: $(date -u +"%Y-%m-%d %H:%M:%S UTC")
-#
-# Usage:
-#   1. Load the ipset:
-#      ipset restore < $(basename ${iptables_output_file})
-#
-#   2. Use with iptables/ip6tables:
-#      iptables -I INPUT -m set --match-set blacklist-v4 src -j DROP
-#      iptables -I FORWARD -m set --match-set blacklist-v4 src -j DROP
-#      ip6tables -I INPUT -m set --match-set blacklist-v6 src -j DROP
-#      ip6tables -I FORWARD -m set --match-set blacklist-v6 src -j DROP
-#
-#   3. To flush/delete the sets:
-#      ipset flush blacklist-v4 && ipset destroy blacklist-v4
-#      ipset flush blacklist-v6 && ipset destroy blacklist-v6
-#
-
-EOF
-
-# Append both IPv4 and IPv6 sets to the mixed file
-tail -n +2 "${iptables_v4_output_file}" | grep -E "^(create|add)" >> "${iptables_output_file}"
-echo "" >> "${iptables_output_file}"
-tail -n +2 "${iptables_v6_output_file}" | grep -E "^(create|add)" >> "${iptables_output_file}"
-
-echo "✓ Generated (mixed IPv4/IPv6): ${iptables_output_file}"
-echo "  Total entries: $(wc -l < "${blacklist_file}" | tr -d ' ')"
+echo ""
+echo "VK outgoing block examples (iptables/ipset):"
+echo "  ipset restore < ${iptables_vk_v4_output_file}"
+echo "  ipset restore < ${iptables_vk_v6_output_file}"
+echo "  iptables -I OUTPUT -m set --match-set blacklist-vk-v4 dst -j REJECT"
+echo "  iptables -I FORWARD -m set --match-set blacklist-vk-v4 dst -j REJECT"
+echo "  ip6tables -I OUTPUT -m set --match-set blacklist-vk-v6 dst -j REJECT"
+echo "  ip6tables -I FORWARD -m set --match-set blacklist-vk-v6 dst -j REJECT"
+echo ""
+echo "Tip: Do not install Messenger MAX on the same phone/device that has VPN access configured."

blacklists_updater_nftables.sh

@@ -0,0 +1,88 @@
+#!/bin/bash
+# Generates nftables blacklist configurations from the main blacklist
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INPUT_FILE="$SCRIPT_DIR/blacklists/blacklist.txt"
+OUTPUT_DIR="$SCRIPT_DIR/blacklists_nftables"
+
+# Source files for name-based VK filtering
+AUTO_ALL_V4_FILE="$SCRIPT_DIR/auto/all-ru-ipv4.txt"
+AUTO_ALL_V6_FILE="$SCRIPT_DIR/auto/all-ru-ipv6.txt"
+AUTO_RIPE_V4_FILE="$SCRIPT_DIR/auto/ripe-ru-ipv4.txt"
+VK_NAME_PATTERN='vk[[:space:]-]*cloud|vkcompany|vkontakte'
+
+# Additional VK-only text blacklists
+VK_INPUT_FILE="$SCRIPT_DIR/blacklists/blacklist-vk.txt"
+VK_INPUT_V4_FILE="$SCRIPT_DIR/blacklists/blacklist-vk-v4.txt"
+VK_INPUT_V6_FILE="$SCRIPT_DIR/blacklists/blacklist-vk-v6.txt"
+
+# Create required directories if they don't exist
+mkdir -p "$OUTPUT_DIR" "$SCRIPT_DIR/blacklists"
+
+echo "Generating nftables blacklists..."
+
+# Build additional VK-only blacklist from network names in auto/*.txt files
+TMP_VK_FILE="$(mktemp "$SCRIPT_DIR/blacklists/.blacklist-vk.XXXXXX")"
+for source_file in "$AUTO_ALL_V4_FILE" "$AUTO_ALL_V6_FILE" "$AUTO_RIPE_V4_FILE"; do
+    [[ -f "$source_file" ]] || continue
+    awk -v pattern="$VK_NAME_PATTERN" 'tolower($0) ~ pattern { print $1 }' "$source_file" >> "$TMP_VK_FILE"
+done
+sort -u "$TMP_VK_FILE" > "$VK_INPUT_FILE"
+grep ':' "$VK_INPUT_FILE" | sort -u > "$VK_INPUT_V6_FILE" || true
+grep -v ':' "$VK_INPUT_FILE" | sort -u > "$VK_INPUT_V4_FILE" || true
+rm -f "$TMP_VK_FILE"
+
+# Generate mixed IPv4/IPv6 blacklist (recommended single-file load)
+python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
+    "$INPUT_FILE" \
+    "$OUTPUT_DIR/blacklist.nft"
+
+# Generate IPv4-only blacklist
+TMP_V4_FILE="/tmp/blacklist-v4.txt"
+TMP_V6_FILE="/tmp/blacklist-v6.txt"
+grep -E '^[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+' "$INPUT_FILE" > "$TMP_V4_FILE" || true
+python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
+    "$TMP_V4_FILE" \
+    "$OUTPUT_DIR/blacklist-v4.nft"
+
+# Generate IPv6-only blacklist
+grep -E '^[0-9a-fA-F:]+:' "$INPUT_FILE" > "$TMP_V6_FILE" || true
+python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
+    "$TMP_V6_FILE" \
+    "$OUTPUT_DIR/blacklist-v6.nft"
+
+# Generate VK-only blacklists (network names: VK Cloud / VKCOMPANY / VKONTAKTE)
+python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
+    "$VK_INPUT_FILE" \
+    "$OUTPUT_DIR/blacklist-vk.nft"
+python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
+    "$VK_INPUT_V4_FILE" \
+    "$OUTPUT_DIR/blacklist-vk-v4.nft"
+python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
+    "$VK_INPUT_V6_FILE" \
+    "$OUTPUT_DIR/blacklist-vk-v6.nft"
+
+# Clean up temp files
+rm -f "$TMP_V4_FILE" "$TMP_V6_FILE"
+
+echo "nftables blacklists generated successfully!"
+echo ""
+echo "VM incoming block examples (all lists, nftables):"
+echo "  sudo nft -f $OUTPUT_DIR/blacklist.nft"
+echo "  sudo nft -f $OUTPUT_DIR/blacklist-v4.nft"
+echo "  sudo nft -f $OUTPUT_DIR/blacklist-v6.nft"
+echo "  sudo nft add chain inet filter input '{ type filter hook input priority 0; policy accept; }'"
+echo "  sudo nft add rule inet filter input ip saddr @blacklist_v4 counter reject"
+echo "  sudo nft add rule inet filter input ip6 saddr @blacklist_v6 counter reject"
+echo ""
+echo "VK outbound block examples for VPN clients via NAT (nftables):"
+echo "  sudo nft -f $OUTPUT_DIR/blacklist-vk.nft"
+echo "  sudo nft -f $OUTPUT_DIR/blacklist-vk-v4.nft"
+echo "  sudo nft -f $OUTPUT_DIR/blacklist-vk-v6.nft"
+echo "  sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'"
+echo "  sudo nft add rule inet filter forward iifname \"<VPN_IFACE>\" ip daddr @blacklist_vk_v4 counter reject"
+echo "  sudo nft add rule inet filter forward iifname \"<VPN_IFACE>\" ip6 daddr @blacklist_vk_v6 counter reject"
+echo ""
+echo "Tip: Do not install Messenger MAX on the same phone/device that has VPN access configured."

blacklists_updater_nginx.sh

@@ -11,8 +11,8 @@ nginx_output_file="${nginx_output_dir}/blacklist.conf"
 nginx_v4_output_file="${nginx_output_dir}/blacklist-v4.conf"
 nginx_v6_output_file="${nginx_output_dir}/blacklist-v6.conf"
 
-# Create nginx directory if it doesn't exist
-mkdir -p "${nginx_output_dir}"
+# Create required directories if they don't exist
+mkdir -p "${nginx_output_dir}" "blacklists"
 
 # Function to generate nginx config from input file
 generate_nginx_config() {

blacklists_updater_routes.sh

@@ -0,0 +1,78 @@
+#!/bin/sh
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+
+# Source files for name-based VK filtering
+AUTO_ALL_V4_FILE="${SCRIPT_DIR}/auto/all-ru-ipv4.txt"
+AUTO_ALL_V6_FILE="${SCRIPT_DIR}/auto/all-ru-ipv6.txt"
+AUTO_RIPE_V4_FILE="${SCRIPT_DIR}/auto/ripe-ru-ipv4.txt"
+VK_NAME_PATTERN='vk[[:space:]-]*cloud|vkcompany|vkontakte'
+
+# Additional VK-only text blacklists
+VK_INPUT_FILE="${SCRIPT_DIR}/blacklists/blacklist-vk.txt"
+VK_INPUT_V4_FILE="${SCRIPT_DIR}/blacklists/blacklist-vk-v4.txt"
+VK_INPUT_V6_FILE="${SCRIPT_DIR}/blacklists/blacklist-vk-v6.txt"
+
+# Output directory and files
+ROUTES_OUTPUT_DIR="${SCRIPT_DIR}/blacklists_route"
+ROUTES_V4_FILE="${ROUTES_OUTPUT_DIR}/blacklist-vk-v4.routes"
+ROUTES_V6_FILE="${ROUTES_OUTPUT_DIR}/blacklist-vk-v6.routes"
+
+mkdir -p "${ROUTES_OUTPUT_DIR}" "${SCRIPT_DIR}/blacklists"
+
+echo "Generating VK route blacklists..."
+
+# Build additional VK-only blacklist from network names in auto/*.txt files
+TMP_VK_FILE="$(mktemp "${SCRIPT_DIR}/blacklists/.blacklist-vk.XXXXXX")"
+for source_file in "${AUTO_ALL_V4_FILE}" "${AUTO_ALL_V6_FILE}" "${AUTO_RIPE_V4_FILE}"; do
+	[ -f "${source_file}" ] || continue
+	awk -v pattern="${VK_NAME_PATTERN}" 'tolower($0) ~ pattern { print $1 }' "${source_file}" >> "${TMP_VK_FILE}"
+done
+
+sort -u "${TMP_VK_FILE}" > "${VK_INPUT_FILE}"
+grep ':' "${VK_INPUT_FILE}" | sort -u > "${VK_INPUT_V6_FILE}" || true
+grep -v ':' "${VK_INPUT_FILE}" | sort -u > "${VK_INPUT_V4_FILE}" || true
+rm -f "${TMP_VK_FILE}"
+
+# Generate IPv4 routes file (route VK prefixes to loopback via 127.0.0.1)
+cat > "${ROUTES_V4_FILE}" << EOF
+# Linux routes for VK networks (IPv4)
+# Auto-generated by $(basename "$0")
+# Last updated: $(date -u +"%Y-%m-%d %H:%M:%S UTC")
+#
+# Apply:
+#   sudo sh $(basename "${ROUTES_V4_FILE}")
+#
+
+EOF
+
+while IFS= read -r network; do
+	[ -n "${network}" ] || continue
+	printf 'ip route replace %s via 127.0.0.1 dev lo onlink\n' "${network}" >> "${ROUTES_V4_FILE}"
+done < "${VK_INPUT_V4_FILE}"
+
+# Generate IPv6 routes file (route VK prefixes to loopback via ::1)
+cat > "${ROUTES_V6_FILE}" << EOF
+# Linux routes for VK networks (IPv6)
+# Auto-generated by $(basename "$0")
+# Last updated: $(date -u +"%Y-%m-%d %H:%M:%S UTC")
+#
+# Apply:
+#   sudo sh $(basename "${ROUTES_V6_FILE}")
+#
+
+EOF
+
+while IFS= read -r network; do
+	[ -n "${network}" ] || continue
+	printf 'ip -6 route replace %s via ::1 dev lo\n' "${network}" >> "${ROUTES_V6_FILE}"
+done < "${VK_INPUT_V6_FILE}"
+
+echo "✓ Generated: ${ROUTES_V4_FILE} (entries: $(wc -l < "${VK_INPUT_V4_FILE}" | tr -d ' '))"
+echo "✓ Generated: ${ROUTES_V6_FILE} (entries: $(wc -l < "${VK_INPUT_V6_FILE}" | tr -d ' '))"
+echo ""
+echo "Examples:"
+echo "  sudo sh ${ROUTES_V4_FILE}"
+echo "  sudo sh ${ROUTES_V6_FILE}"

blacklists_updater_txt.sh

@@ -11,6 +11,8 @@ black_names="uvd|umvd|fgup|grchc|roskomnad|federalnaya sluzhba|ufsb|zonatelecom|
 # M100 - mail.ru
 white_names="ruvds"
 
+mkdir -p blacklists auto
+
 grep -iE "${black_names}" auto/all-ru-asn.txt   | grep -viE "${white_names}" | awk '{ print "# AS-Name: " $0 "\n" $1}' > ${auto_black_ass}
 ./network_list_from_as.py ${auto_black_ass} > ${outfile_w_comments}
 ./network_list_from_netname.py lists/ru-gov-netnames.txt >> ${outfile_w_comments}

check_nft_blacklist.py

@@ -0,0 +1,117 @@
+#!/usr/bin/env python3
+"""
+check_nft_blacklist.py
+Checks if an IP address is in the nftables blacklist configuration.
+Usage:
+  check_nft_blacklist.py nft_bl.conf 192.168.1.1
+  check_nft_blacklist.py nft_bl.conf 2001:db8::1
+"""
+
+import sys
+import re
+from ipaddress import ip_address, ip_network, AddressValueError
+from pathlib import Path
+
+def iter_set_blocks(content):
+    current_name = None
+    current_lines = []
+    brace_depth = 0
+
+    for line in content.splitlines():
+        if current_name is None:
+            match = re.match(r"\s*set\s+([A-Za-z0-9_]+)\s*\{", line)
+            if match:
+                current_name = match.group(1)
+                current_lines = [line]
+                brace_depth = line.count("{") - line.count("}")
+            continue
+
+        current_lines.append(line)
+        brace_depth += line.count("{") - line.count("}")
+        if brace_depth == 0:
+            yield current_name, "\n".join(current_lines)
+            current_name = None
+            current_lines = []
+
+def parse_nft_config(config_path):
+    """Extract IPv4 and IPv6 prefixes from nftables config."""
+    p = Path(config_path)
+    if not p.exists():
+        raise FileNotFoundError(f"Config file not found: {config_path}")
+    
+    content = p.read_text(encoding="utf-8")
+    v4_prefixes = []
+    v6_prefixes = []
+
+    for _, block in iter_set_blocks(content):
+        if "type ipv4_addr" in block:
+            for match in re.finditer(r"(\d+\.\d+\.\d+\.\d+(?:/\d+)?)", block):
+                try:
+                    v4_prefixes.append(ip_network(match.group(1), strict=False))
+                except Exception as e:
+                    print(f"Warning: Could not parse IPv4 prefix '{match.group(1)}': {e}", file=sys.stderr)
+        elif "type ipv6_addr" in block:
+            for match in re.finditer(r"([0-9a-fA-F:]+(?:/\d+)?)", block):
+                try:
+                    v6_prefixes.append(ip_network(match.group(1), strict=False))
+                except Exception:
+                    pass
+    
+    return v4_prefixes, v6_prefixes
+
+def check_ip_in_blacklist(ip_addr, v4_prefixes, v6_prefixes):
+    """Check if IP address is in any of the blacklist prefixes."""
+    try:
+        addr = ip_address(ip_addr)
+    except AddressValueError as e:
+        raise ValueError(f"Invalid IP address: {ip_addr} ({e})")
+    
+    prefixes = v4_prefixes if addr.version == 4 else v6_prefixes
+    
+    for prefix in prefixes:
+        if addr in prefix:
+            return True, prefix
+    
+    return False, None
+
+def main(argv):
+    if len(argv) < 3:
+        print("Usage: python3 check_nft_blacklist.py <nft_config.conf> <ip_address>")
+        print("Examples:")
+        print("  check_nft_blacklist.py nft_bl.conf 192.168.1.1")
+        print("  check_nft_blacklist.py nft_bl.conf 2001:db8::1")
+        return 2
+    
+    config_file = argv[1]
+    ip_to_check = argv[2]
+    
+    # Parse the nftables config
+    try:
+        print(f"Loading blacklist from: {config_file}")
+        v4_prefixes, v6_prefixes = parse_nft_config(config_file)
+        print(f"Loaded {len(v4_prefixes)} IPv4 prefixes and {len(v6_prefixes)} IPv6 prefixes")
+    except Exception as e:
+        print(f"ERROR: Could not parse config file: {e}", file=sys.stderr)
+        return 3
+    
+    # Check if IP is in blacklist
+    try:
+        is_blocked, matching_prefix = check_ip_in_blacklist(ip_to_check, v4_prefixes, v6_prefixes)
+        
+        print(f"\nChecking IP: {ip_to_check}")
+        print("-" * 50)
+        
+        if is_blocked:
+            print(f"✗ BLOCKED - IP is in blacklist")
+            print(f"  Matching prefix: {matching_prefix}")
+            return 1
+        else:
+            print(f"✓ OK - IP is NOT in blacklist")
+            return 0
+            
+    except ValueError as e:
+        print(f"ERROR: {e}", file=sys.stderr)
+        return 4
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv))

generate_nft_blacklist.py

@@ -0,0 +1,174 @@
+#!/usr/bin/env python3
+"""
+generate_nft_blacklist.py
+Reads prefixes from a file or stdin, aggregates them and writes nftables config.
+Uses named sets for efficient blacklist management.
+Usage:
+  git clone https://github.com/C24Be/AS_Network_List.git
+  generate_nft_blacklist.py ./AS_Network_List/blacklists/blacklist.txt nft_bl.conf
+  cp nft_bl.conf /etc/nftables.d/
+  systemctl restart nftables
+"""
+
+import sys
+from ipaddress import ip_network, collapse_addresses
+from pathlib import Path
+from datetime import datetime, UTC
+
+def read_lines(path_or_dash):
+    if path_or_dash == "-":
+        print("Reading prefixes from STDIN...")
+        return [ln.rstrip("\n") for ln in sys.stdin]
+    p = Path(path_or_dash)
+    if not p.exists():
+        raise FileNotFoundError(f"Input file not found: {path_or_dash}")
+    text = p.read_text(encoding="utf-8")
+    return text.splitlines()
+
+def aggregate_prefixes(lines):
+    v4, v6, invalid = [], [], []
+    for lineno, ln in enumerate(lines, start=1):
+        s = ln.strip()
+        if not s or s.startswith("#"):
+            continue
+        try:
+            net = ip_network(s, strict=False)
+            if net.version == 4:
+                v4.append(net)
+            else:
+                v6.append(net)
+        except Exception as e:
+            invalid.append((lineno, s, str(e)))
+    agg_v4 = list(collapse_addresses(sorted(v4, key=lambda x: (int(x.network_address), x.prefixlen))))
+    agg_v6 = list(collapse_addresses(sorted(v6, key=lambda x: (int(x.network_address), x.prefixlen))))
+    return agg_v4, agg_v6, invalid
+
+def make_nft_config(agg_v4, agg_v6, comment=None, usage_profile="vm_input"):
+    if usage_profile == "vk_forward":
+        set_v4_name = "blacklist_vk_v4"
+        set_v6_name = "blacklist_vk_v6"
+        rule_v4 = f'sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip daddr @{set_v4_name} counter reject'
+        rule_v6 = f'sudo nft add rule inet filter forward iifname "<VPN_IFACE>" ip6 daddr @{set_v6_name} counter reject'
+    else:
+        set_v4_name = "blacklist_v4"
+        set_v6_name = "blacklist_v6"
+        rule_v4 = f"sudo nft add rule inet filter input ip saddr @{set_v4_name} counter reject"
+        rule_v6 = f"sudo nft add rule inet filter input ip6 saddr @{set_v6_name} counter reject"
+
+    lines = []
+    lines.append("# Autogenerated nftables blacklist")
+    lines.append(f"# Generated: {datetime.now(UTC).isoformat().replace('+00:00', 'Z')}")
+    if comment:
+        lines.append(f"# {comment}")
+    lines.append(f"# IPv4: {len(agg_v4)}, IPv6: {len(agg_v6)}")
+    lines.append("#")
+    lines.append("# Usage:")
+    lines.append("#   sudo nft -f <this-file>")
+    if usage_profile == "vk_forward":
+        lines.append("#   # VK egress blocking for VPN clients via NAT/FORWARD")
+        lines.append("#   sudo nft add chain inet filter forward '{ type filter hook forward priority 0; policy accept; }'")
+        lines.append(f"#   {rule_v4}")
+        lines.append(f"#   {rule_v6}")
+    else:
+        lines.append("#   # VM protection from incoming blacklist sources")
+        lines.append("#   sudo nft add chain inet filter input '{ type filter hook input priority 0; policy accept; }'")
+        lines.append(f"#   {rule_v4}")
+        lines.append(f"#   {rule_v6}")
+    lines.append("")
+    lines.append("table inet filter {")
+    lines.append("")
+
+    # Define IPv4 blacklist set
+    lines.append(f"    set {set_v4_name} {{")
+    lines.append("        type ipv4_addr")
+    lines.append("        flags interval")
+    if agg_v4:
+        lines.append("        elements = {")
+        for i, net in enumerate(agg_v4):
+            comma = "," if i < len(agg_v4) - 1 else ""
+            rendered_net = net.with_prefixlen if hasattr(net, "with_prefixlen") else str(net)
+            lines.append(f"            {rendered_net}{comma}")
+        lines.append("        }")
+    lines.append("    }")
+    lines.append("")
+
+    # Define IPv6 blacklist set
+    lines.append(f"    set {set_v6_name} {{")
+    lines.append("        type ipv6_addr")
+    lines.append("        flags interval")
+    if agg_v6:
+        lines.append("        elements = {")
+        for i, net in enumerate(agg_v6):
+            comma = "," if i < len(agg_v6) - 1 else ""
+            rendered_net = net.with_prefixlen if hasattr(net, "with_prefixlen") else str(net)
+            lines.append(f"            {rendered_net}{comma}")
+        lines.append("        }")
+    lines.append("    }")
+    lines.append("")
+
+    lines.append("}")
+    return "\n".join(lines)
+
+def write_output(outpath, content):
+    if outpath == "-":
+        print(content)
+        return
+    p = Path(outpath)
+    p.write_text(content, encoding="utf-8")
+    p.chmod(0o644)
+    print(f"Wrote nft config to: {p} (size: {p.stat().st_size} bytes)")
+
+def main(argv):
+    if len(argv) < 3:
+        print("Usage: python3 generate_nft_blacklist.py input.txt output.conf")
+        print("Use '-' as input or output to mean STDIN/STDOUT respectively.")
+        return 2
+
+    infile, outfile = argv[1], argv[2]
+    try:
+        lines = read_lines(infile)
+    except Exception as e:
+        print(f"ERROR reading input: {e}", file=sys.stderr)
+        return 3
+
+    if not any(line.strip() and not line.strip().startswith("#") for line in lines):
+        print("WARNING: input contains no prefixes (empty or only comments). Nothing to aggregate.")
+        profile = "vk_forward" if "vk" in Path(infile).name.lower() else "vm_input"
+        nft_conf = make_nft_config([], [], comment="Empty input produced no prefixes", usage_profile=profile)
+        write_output(outfile, nft_conf)
+        return 0
+
+    agg_v4, agg_v6, invalid = aggregate_prefixes(lines)
+
+    if invalid:
+        print("Some lines could not be parsed (line, text, error):")
+        for ln, txt, err in invalid:
+            print(f"  {ln}: '{txt}' --> {err}", file=sys.stderr)
+
+    print(f"Aggregated IPv4 prefixes: {len(agg_v4)}")
+    for n in agg_v4:
+        print("  v4:", n)
+    print(f"Aggregated IPv6 prefixes: {len(agg_v6)}")
+    for n in agg_v6:
+        print("  v6:", n)
+
+    profile = "vk_forward" if "vk" in Path(infile).name.lower() else "vm_input"
+    nft_conf = make_nft_config(agg_v4, agg_v6, comment=f"Source: {infile}", usage_profile=profile)
+    try:
+        write_output(outfile, nft_conf)
+    except Exception as e:
+        print(f"ERROR writing output: {e}", file=sys.stderr)
+        return 4
+
+    print("Done.")
+    print("Load with: sudo nft -f <output.conf>")
+    if profile == "vk_forward":
+        print("View sets: sudo nft list set inet filter blacklist_vk_v4")
+        print("           sudo nft list set inet filter blacklist_vk_v6")
+    else:
+        print("View sets: sudo nft list set inet filter blacklist_v4")
+        print("           sudo nft list set inet filter blacklist_v6")
+    return 0
+
+if __name__ == "__main__":
+    sys.exit(main(sys.argv))

network_list_from_as.py

@@ -1,60 +1,94 @@
 #!/usr/bin/env python3
 
-import requests
 import argparse
 import re
-from cymruwhois import Client
+import sys
+
+import requests
+
 from pylib.whois import whois_query
 
+ASN_RE = re.compile(r"\bAS\d+\b", re.IGNORECASE)
+
 def get_as_prefixes(asn):
     url = f"https://stat.ripe.net/data/announced-prefixes/data.json?resource={asn}"
-    response = requests.get(url)
-    if response.status_code == 200:
-        data = response.json()
-        prefixes = data['data']['prefixes']
-        return [prefix['prefix'] for prefix in prefixes]
-    else:
-        return []
+    response = requests.get(url, timeout=30)
+    response.raise_for_status()
+    data = response.json()
+    prefixes = data["data"]["prefixes"]
+    return [prefix["prefix"] for prefix in prefixes]
 
 def convert_to_raw_github_url(url):
     return url.replace("https://github.com/", "https://raw.githubusercontent.com/").replace("/blob", "")
 
-def print_prefixes(asn):
-    line = re.sub(r'[^AS0-9]', '', asn)
-    if not args.quiet:
-        print(f"# Networks announced by {line}")
-        response = whois_query(line, "as-name", True)
+
+def normalize_asn(value):
+    match = ASN_RE.search(value)
+    if match:
+        return match.group(0).upper()
+    return None
+
+
+def print_prefixes(asn, quiet=False):
+    normalized_asn = normalize_asn(asn)
+    if normalized_asn is None:
+        return
+
+    if not quiet:
+        print(f"# Networks announced by {normalized_asn}")
+        response = whois_query(normalized_asn, "as-name", True)
         if response is not None:
             info = response.strip()
             print(f"# AS-Name (ORG): {info}")
-    prefixes = get_as_prefixes(line)
+    prefixes = get_as_prefixes(normalized_asn)
     for prefix in prefixes:
         print(prefix)
 
-def extract_asses(asn_filename_or_url):
-    if asn_filename_or_url.startswith('AS'):
-        print_prefixes(asn_filename_or_url)
+
+def extract_asses(asn_filename_or_url, quiet=False):
+    if normalize_asn(asn_filename_or_url) and not asn_filename_or_url.startswith(("http://", "https://")):
+        print_prefixes(asn_filename_or_url, quiet=quiet)
 
         return None
 
-    if asn_filename_or_url.startswith('http://') or asn_filename_or_url.startswith('https://'):
-        if 'github.com' in asn_filename_or_url:
+    if asn_filename_or_url.startswith("http://") or asn_filename_or_url.startswith("https://"):
+        if "github.com" in asn_filename_or_url:
             asn_filename_or_url = convert_to_raw_github_url(asn_filename_or_url)
-        response = requests.get(asn_filename_or_url)
-        lines = response.text.split('\n')
+        response = requests.get(asn_filename_or_url, timeout=30)
+        response.raise_for_status()
+        lines = response.text.splitlines()
     else:
-        with open(asn_filename_or_url, 'r') as file:
+        with open(asn_filename_or_url, "r", encoding="utf-8") as file:
             lines = file.readlines()
 
     for line in lines:
-        if re.match(r'^AS.*', line):
-            print_prefixes(line)
+        normalized_asn = normalize_asn(line)
+        if normalized_asn:
+            print_prefixes(normalized_asn, quiet=quiet)
 
     return None
 
-parser = argparse.ArgumentParser(description='./as_network_list.py -q AS61280')
-parser.add_argument('asn_filename_or_url', help='The AS number to get networks / The file or URL to extract AS numbers from.')
-parser.add_argument('-q', '--quiet', action='store_true', help='Disable all output except prefixes.')
-args = parser.parse_args()
 
-extract_asses(args.asn_filename_or_url)
+def build_parser():
+    parser = argparse.ArgumentParser(description="./network_list_from_as.py -q AS61280")
+    parser.add_argument("asn_filename_or_url", help="The AS number to get networks / The file or URL to extract AS numbers from.")
+    parser.add_argument("-q", "--quiet", action="store_true", help="Disable all output except prefixes.")
+    return parser
+
+
+def main(argv=None):
+    parser = build_parser()
+    args = parser.parse_args(argv)
+    try:
+        extract_asses(args.asn_filename_or_url, quiet=args.quiet)
+    except requests.RequestException as exc:
+        print(f"ERROR: failed to fetch ASN data: {exc}", file=sys.stderr)
+        return 1
+    except OSError as exc:
+        print(f"ERROR: failed to read input: {exc}", file=sys.stderr)
+        return 1
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

network_list_from_netname.py

@@ -1,41 +1,72 @@
 #!/usr/bin/env python3
 
 import argparse
-import requests
 import re
-from   pylib.whois import whois_query
-from   pylib.ip    import convert_to_cidr
+import sys
+
+import requests
+
+from pylib.ip import convert_to_cidr
+from pylib.whois import whois_query
 
 def convert_to_raw_github_url(url):
     return url.replace("https://github.com/", "https://raw.githubusercontent.com/").replace("/blob", "")
 
-def extract_netname(filename_or_url):
-    if filename_or_url.startswith('http://') or filename_or_url.startswith('https://'):
-        if 'github.com' in filename_or_url:
+
+def iter_netnames(lines):
+    for line in lines:
+        stripped = line.strip()
+        if not stripped or stripped.startswith("#"):
+            continue
+        if re.match(r"^netname:", stripped, re.IGNORECASE):
+            yield stripped.split(":", 1)[1].strip()
+        else:
+            yield stripped
+
+
+def extract_netname(filename_or_url, quiet=False):
+    if filename_or_url.startswith("http://") or filename_or_url.startswith("https://"):
+        if "github.com" in filename_or_url:
             filename_or_url = convert_to_raw_github_url(filename_or_url)
-        response = requests.get(filename_or_url)
-        lines = response.text.split('\n')
+        response = requests.get(filename_or_url, timeout=30)
+        response.raise_for_status()
+        lines = response.text.splitlines()
     else:
-        with open(filename_or_url, 'r') as file:
+        with open(filename_or_url, "r", encoding="utf-8") as file:
             lines = file.readlines()
 
-    for line in lines:
-        if re.match(r'^netname:', line):
-            netname = line.split(':')[1].strip()
-            response = whois_query(netname, "inetnum")
-            if response is not None and len(response) > 0:
-                if not args.quiet:
-                    print(f"# Network name: {netname}")
-                for cidr in response:
-                    net = convert_to_cidr(cidr)
-                    net = net[0]
-                    print(net)
+    for netname in iter_netnames(lines):
+        response = whois_query(netname, "inetnum")
+        if response is not None and len(response) > 0:
+            if not quiet:
+                print(f"# Network name: {netname}")
+            for cidr in response:
+                for network in convert_to_cidr(cidr):
+                    print(network)
 
     return None
 
-parser = argparse.ArgumentParser(description='Extract netname from file.')
-parser.add_argument('filename_or_url', help='The file or URL to extract netnames from.')
-parser.add_argument('-q', '--quiet', action='store_true', help='Disable all output except prefixes.')
-args = parser.parse_args()
 
-extract_netname(args.filename_or_url)
+def build_parser():
+    parser = argparse.ArgumentParser(description="Extract netname from file.")
+    parser.add_argument("filename_or_url", help="The file or URL to extract netnames from.")
+    parser.add_argument("-q", "--quiet", action="store_true", help="Disable all output except prefixes.")
+    return parser
+
+
+def main(argv=None):
+    parser = build_parser()
+    args = parser.parse_args(argv)
+    try:
+        extract_netname(args.filename_or_url, quiet=args.quiet)
+    except requests.RequestException as exc:
+        print(f"ERROR: failed to fetch netname data: {exc}", file=sys.stderr)
+        return 1
+    except OSError as exc:
+        print(f"ERROR: failed to read input: {exc}", file=sys.stderr)
+        return 1
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

parse_ripe_db.py

@@ -1,62 +1,84 @@
 #!/usr/bin/env python3
 
 import argparse
-import re
 import json
-from   pylib.ip import convert_to_cidr
+import sys
+
+from pylib.ip import convert_to_cidr
 
 country = "RU"
 
+
+def normalize_record(record):
+    if not record:
+        return None
+    if record.get("country") != country:
+        return None
+
+    normalized = dict(record)
+    normalized["inetnum"] = convert_to_cidr(record["inetnum"])
+    return normalized
+
+
 def parse(filename, output_text, output_json):
-    cList = []
+    c_list = []
     record = {}
-    with open(filename, 'r', encoding='latin-1') as f:
+    with open(filename, "r", encoding="latin-1") as f:
         lines = f.readlines()
-        f.close()
+
     for line in lines:
-        if re.match(r'^inetnum:', line):
-            if record:
-                record['inetnum'] = convert_to_cidr(record['inetnum'])
-                if record['country'] == country:
-#                    print(record)
-                    cList.append(record)
+        if line.startswith("inetnum:"):
+            normalized = normalize_record(record)
+            if normalized is not None:
+                c_list.append(normalized)
             record = {}
-            record['inetnum'] = line.split('inetnum:', 1)[1].strip()
-            record['descr'] = ''
-            record['netname'] = ''
-            record['country'] = ''
-            record['org'] = ''
-        if re.match(r'^netname:', line):
-            record['netname'] = line.split('netname:', 1)[1].strip()
-        if re.match(r'^descr:', line):
-            record['descr'] = str(record['descr'].strip() + ' ' + line.split('descr:', 1)[1].strip()).strip()
-        if re.match(r'^mnt-by:', line):
-            record['netname'] = str(record['netname'].strip() + ' ' + line.split('mnt-by:', 1)[1].strip()).strip()
-        if re.match(r'^country:', line):
-            record['country'] = line.split('country:', 1)[1].strip()
-        if re.match(r'^org:', line):
-            record['org'] = line.split('org:', 1)[1].strip()
-    if record:
-        cList.append(record)
+            record["inetnum"] = line.split("inetnum:", 1)[1].strip()
+            record["descr"] = ""
+            record["netname"] = ""
+            record["country"] = ""
+            record["org"] = ""
+        if line.startswith("netname:"):
+            record["netname"] = line.split("netname:", 1)[1].strip()
+        if line.startswith("descr:"):
+            record["descr"] = str(record["descr"].strip() + " " + line.split("descr:", 1)[1].strip()).strip()
+        if line.startswith("mnt-by:"):
+            record["netname"] = str(record["netname"].strip() + " " + line.split("mnt-by:", 1)[1].strip()).strip()
+        if line.startswith("country:"):
+            record["country"] = line.split("country:", 1)[1].strip()
+        if line.startswith("org:"):
+            record["org"] = line.split("org:", 1)[1].strip()
 
-    with open(output_json, 'w') as f:
-        json.dump(cList, f, indent=4)
-        f.close()
+    normalized = normalize_record(record)
+    if normalized is not None:
+        c_list.append(normalized)
 
-    with open(output_text, 'w') as f:
-        for record in cList:
-            for net in record['inetnum']:
-                f.write(net + ' ' + record['netname'] + ' (' + record['org'] + ') [' + record['descr'] + ']\n')
-        f.close()
+    with open(output_json, "w", encoding="utf-8") as f:
+        json.dump(c_list, f, indent=4)
 
-parser = argparse.ArgumentParser(description='Parse RIPE DB for getting a list of RU networks.')
-parser.add_argument('filename', help='ripe.db.inetnum file to parse.')
-parser.add_argument('output_text', help='write text db to...')
-parser.add_argument('output_json', help='write json do to...')
-args = parser.parse_args()
+    with open(output_text, "w", encoding="utf-8") as f:
+        for item in c_list:
+            for net in item["inetnum"]:
+                f.write(net + " " + item["netname"] + " (" + item["org"] + ") [" + item["descr"] + "]\n")
 
-if not (args.filename):
-    parser.print_help()
-    exit()
 
-parse(args.filename, args.output_text, args.output_json)
+def build_parser():
+    parser = argparse.ArgumentParser(description="Parse RIPE DB for getting a list of RU networks.")
+    parser.add_argument("filename", help="ripe.db.inetnum file to parse.")
+    parser.add_argument("output_text", help="write text db to...")
+    parser.add_argument("output_json", help="write json db to...")
+    return parser
+
+
+def main(argv=None):
+    parser = build_parser()
+    args = parser.parse_args(argv)
+    try:
+        parse(args.filename, args.output_text, args.output_json)
+    except OSError as exc:
+        print(f"ERROR: {exc}", file=sys.stderr)
+        return 1
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

tests/test_check_nft_blacklist.py

@@ -0,0 +1,26 @@
+import tempfile
+import unittest
+from pathlib import Path
+
+from check_nft_blacklist import check_ip_in_blacklist, parse_nft_config
+from generate_nft_blacklist import make_nft_config
+
+
+class CheckNftBlacklistTests(unittest.TestCase):
+    def test_vk_sets_are_parsed(self):
+        config = make_nft_config(["87.240.128.0/18"], [], usage_profile="vk_forward")
+
+        with tempfile.TemporaryDirectory() as tmpdir:
+            config_path = Path(tmpdir) / "blacklist-vk-v4.nft"
+            config_path.write_text(config, encoding="utf-8")
+
+            v4_prefixes, v6_prefixes = parse_nft_config(config_path)
+            blocked, prefix = check_ip_in_blacklist("87.240.128.1", v4_prefixes, v6_prefixes)
+
+            self.assertEqual(len(v4_prefixes), 1)
+            self.assertTrue(blocked)
+            self.assertEqual(str(prefix), "87.240.128.0/18")
+
+
+if __name__ == "__main__":
+    unittest.main()

tests/test_generate_nft_blacklist.py

@@ -0,0 +1,25 @@
+import unittest
+
+from generate_nft_blacklist import make_nft_config
+
+
+class GenerateNftBlacklistTests(unittest.TestCase):
+    def test_general_profile_generates_plain_sets_only(self):
+        config = make_nft_config(["10.0.0.0/24"], [], usage_profile="vm_input")
+
+        self.assertIn("set blacklist_v4", config)
+        self.assertNotIn("chain input", config)
+        self.assertIn("ip saddr @blacklist_v4", config)
+
+    def test_vk_profile_uses_vk_set_names_and_forward_example(self):
+        config = make_nft_config(["10.0.0.0/24"], ["2001:db8::/32"], usage_profile="vk_forward")
+
+        self.assertIn("set blacklist_vk_v4", config)
+        self.assertIn("set blacklist_vk_v6", config)
+        self.assertNotIn("chain forward", config)
+        self.assertIn("ip daddr @blacklist_vk_v4", config)
+        self.assertIn("ip6 daddr @blacklist_vk_v6", config)
+
+
+if __name__ == "__main__":
+    unittest.main()

tests/test_parse_ripe_db.py

@@ -0,0 +1,41 @@
+import json
+import tempfile
+import unittest
+from pathlib import Path
+
+from parse_ripe_db import parse
+
+
+class ParseRipeDbTests(unittest.TestCase):
+    def test_skips_non_ru_last_record_and_normalizes_last_ru_record(self):
+        sample = """\
+inetnum: 10.0.0.0 - 10.0.0.255
+netname: TEST1
+country: RU
+org: ORG-1
+descr: desc1
+inetnum: 20.0.0.0 - 20.0.0.255
+netname: TEST2
+country: US
+org: ORG-2
+"""
+
+        with tempfile.TemporaryDirectory() as tmpdir:
+            source = Path(tmpdir) / "ripe.db.inetnum"
+            output_text = Path(tmpdir) / "out.txt"
+            output_json = Path(tmpdir) / "out.json"
+            source.write_text(sample, encoding="latin-1")
+
+            parse(str(source), str(output_text), str(output_json))
+
+            payload = json.loads(output_json.read_text(encoding="utf-8"))
+            self.assertEqual(len(payload), 1)
+            self.assertEqual(payload[0]["inetnum"], ["10.0.0.0/24"])
+            self.assertEqual(payload[0]["country"], "RU")
+
+            text_lines = output_text.read_text(encoding="utf-8").splitlines()
+            self.assertEqual(text_lines, ["10.0.0.0/24 TEST1 (ORG-1) [desc1]"])
+
+
+if __name__ == "__main__":
+    unittest.main()