Compare commits

...

3 Commits

Author SHA1 Message Date
C24Be
2609a465f3 Update 2026.04.06 15:59:47 2026-04-06 15:59:47 +00:00
C24Be
8bd3f4d283 readme 2026-04-06 17:57:39 +02:00
C24Be
2be4631e02 New VK Exclude rules 2026-04-06 17:55:22 +02:00
26 changed files with 449 additions and 733 deletions

View File

@@ -3,7 +3,7 @@
### Blacklists are updated daily!
> [!IMPORTANT]
> A very important feature has been added: dedicated lists of VK Cloud / VK networks that can be used to block **OUTGOING** traffic from your server (iptables/ipset and nftables formats are available).
> A very important feature has been added: dedicated lists of VK/Max/OK Service networks that can be used to block **OUTGOING** traffic from your server (iptables/ipset and nftables formats are available).
> This can help reduce the risk of Messenger MAX being used to compromise your VPN server.
> The best security option is to avoid installing Messenger MAX at all on a phone where VPN access is configured.

View File

@@ -1,9 +1,5 @@
109.120.180.0/22
109.120.180.0/23
109.120.182.0/23
109.120.188.0/22
109.120.188.0/23
109.120.190.0/23
128.140.168.0/21
128.140.168.0/23
128.140.170.0/24
@@ -11,15 +7,9 @@
128.140.172.0/22
130.49.224.0/19
146.185.208.0/22
146.185.208.0/23
146.185.210.0/23
146.185.240.0/22
146.185.240.0/23
146.185.242.0/23
155.212.192.0/20
161.104.104.0/21
161.104.104.0/22
161.104.108.0/22
176.112.168.0/21
178.22.88.0/21
178.22.89.64/26
@@ -32,8 +22,6 @@
185.100.104.0/23
185.100.106.0/23
185.130.112.0/22
185.130.112.0/23
185.130.114.0/23
185.131.68.0/22
185.16.148.0/22
185.16.148.0/23
@@ -49,8 +37,6 @@
185.226.52.0/23
185.226.54.0/23
185.241.192.0/22
185.241.192.0/23
185.241.194.0/23
185.29.128.0/22
185.29.130.0/24
185.32.248.0/22
@@ -63,8 +49,6 @@
185.6.244.0/23
185.6.246.0/23
185.86.144.0/22
185.86.144.0/23
185.86.146.0/23
188.93.56.0/21
188.93.56.0/24
188.93.57.0/24
@@ -77,17 +61,8 @@
195.211.20.0/22
195.211.22.0/24
195.211.23.0/24
212.111.84.0/22
212.233.120.0/22
212.233.72.0/21
212.233.88.0/21
212.233.96.0/22
195.239.247.0/24
213.219.212.0/22
213.219.212.0/23
213.219.214.0/23
217.16.16.0/20
217.16.16.0/21
217.16.24.0/21
217.174.188.0/23
217.20.144.0/20
217.20.144.0/22
@@ -102,11 +77,7 @@
217.69.128.0/21
217.69.136.0/21
37.139.32.0/22
37.139.32.0/23
37.139.34.0/23
37.139.40.0/22
37.139.40.0/23
37.139.42.0/23
45.136.20.0/22
45.136.20.0/23
45.136.22.0/23
@@ -121,8 +92,6 @@
5.181.61.0/24
5.181.62.0/23
5.188.140.0/22
5.188.140.0/23
5.188.142.0/23
5.61.16.0/21
5.61.16.0/22
5.61.20.0/22
@@ -153,69 +122,40 @@
79.137.167.0/25
79.137.167.128/25
79.137.174.0/23
79.137.174.0/24
79.137.175.0/24
79.137.180.0/24
79.137.180.0/25
79.137.180.128/25
79.137.240.0/21
79.137.240.0/22
79.137.244.0/22
81.177.12.0/24
81.177.31.64/26
83.166.232.0/21
83.166.232.0/22
83.166.236.0/22
83.166.248.0/21
83.166.248.0/22
83.166.252.0/22
83.217.216.0/22
83.217.216.0/23
83.217.218.0/23
83.222.28.0/22
84.23.52.0/22
84.23.52.0/23
84.23.54.0/23
85.114.31.108/30
85.192.32.0/22
85.192.32.0/23
85.192.34.0/23
85.198.106.0/24
85.198.107.0/24
87.239.104.0/21
87.239.104.0/22
87.239.108.0/22
87.240.128.0/18
87.240.128.0/19
87.240.160.0/19
87.242.112.0/22
89.208.196.0/22
89.208.196.0/23
89.208.198.0/23
89.208.208.0/22
89.208.208.0/23
89.208.210.0/23
89.208.216.0/21
89.208.216.0/23
89.208.218.0/23
89.208.220.0/22
89.208.228.0/22
89.208.228.0/23
89.208.230.0/23
89.208.84.0/22
89.208.84.0/23
89.208.86.0/23
89.221.228.0/22
89.221.232.0/21
90.156.148.0/22
90.156.148.0/23
90.156.150.0/23
90.156.212.0/22
90.156.212.0/23
90.156.214.0/23
90.156.216.0/22
90.156.216.0/23
90.156.218.0/23
90.156.232.0/21
91.219.224.0/22
90.156.248.0/22
91.231.132.0/22
91.237.76.0/24
93.153.255.84/30
@@ -226,23 +166,15 @@
94.100.176.0/21
94.100.184.0/21
94.139.244.0/22
94.139.244.0/23
94.139.246.0/23
95.142.192.0/20
95.142.192.0/21
95.142.200.0/21
95.163.180.0/22
95.163.180.0/23
95.163.182.0/23
95.163.208.0/21
95.163.208.0/23
95.163.210.0/23
95.163.212.0/22
95.163.216.0/22
95.163.216.0/23
95.163.218.0/23
95.163.248.0/21
95.163.248.0/22
95.163.252.0/23
95.163.254.0/23
95.163.32.0/19

View File

@@ -1 +1,3 @@
2a00:1148::/29
2a00:b4c0::/29
2a00:bdc0::/29

View File

@@ -1,9 +1,5 @@
109.120.180.0/22
109.120.180.0/23
109.120.182.0/23
109.120.188.0/22
109.120.188.0/23
109.120.190.0/23
128.140.168.0/21
128.140.168.0/23
128.140.170.0/24
@@ -11,15 +7,9 @@
128.140.172.0/22
130.49.224.0/19
146.185.208.0/22
146.185.208.0/23
146.185.210.0/23
146.185.240.0/22
146.185.240.0/23
146.185.242.0/23
155.212.192.0/20
161.104.104.0/21
161.104.104.0/22
161.104.108.0/22
176.112.168.0/21
178.22.88.0/21
178.22.89.64/26
@@ -32,8 +22,6 @@
185.100.104.0/23
185.100.106.0/23
185.130.112.0/22
185.130.112.0/23
185.130.114.0/23
185.131.68.0/22
185.16.148.0/22
185.16.148.0/23
@@ -49,8 +37,6 @@
185.226.52.0/23
185.226.54.0/23
185.241.192.0/22
185.241.192.0/23
185.241.194.0/23
185.29.128.0/22
185.29.130.0/24
185.32.248.0/22
@@ -63,8 +49,6 @@
185.6.244.0/23
185.6.246.0/23
185.86.144.0/22
185.86.144.0/23
185.86.146.0/23
188.93.56.0/21
188.93.56.0/24
188.93.57.0/24
@@ -77,17 +61,8 @@
195.211.20.0/22
195.211.22.0/24
195.211.23.0/24
212.111.84.0/22
212.233.120.0/22
212.233.72.0/21
212.233.88.0/21
212.233.96.0/22
195.239.247.0/24
213.219.212.0/22
213.219.212.0/23
213.219.214.0/23
217.16.16.0/20
217.16.16.0/21
217.16.24.0/21
217.174.188.0/23
217.20.144.0/20
217.20.144.0/22
@@ -101,13 +76,11 @@
217.69.128.0/20
217.69.128.0/21
217.69.136.0/21
2a00:1148::/29
2a00:b4c0::/29
2a00:bdc0::/29
37.139.32.0/22
37.139.32.0/23
37.139.34.0/23
37.139.40.0/22
37.139.40.0/23
37.139.42.0/23
45.136.20.0/22
45.136.20.0/23
45.136.22.0/23
@@ -122,8 +95,6 @@
5.181.61.0/24
5.181.62.0/23
5.188.140.0/22
5.188.140.0/23
5.188.142.0/23
5.61.16.0/21
5.61.16.0/22
5.61.20.0/22
@@ -154,69 +125,40 @@
79.137.167.0/25
79.137.167.128/25
79.137.174.0/23
79.137.174.0/24
79.137.175.0/24
79.137.180.0/24
79.137.180.0/25
79.137.180.128/25
79.137.240.0/21
79.137.240.0/22
79.137.244.0/22
81.177.12.0/24
81.177.31.64/26
83.166.232.0/21
83.166.232.0/22
83.166.236.0/22
83.166.248.0/21
83.166.248.0/22
83.166.252.0/22
83.217.216.0/22
83.217.216.0/23
83.217.218.0/23
83.222.28.0/22
84.23.52.0/22
84.23.52.0/23
84.23.54.0/23
85.114.31.108/30
85.192.32.0/22
85.192.32.0/23
85.192.34.0/23
85.198.106.0/24
85.198.107.0/24
87.239.104.0/21
87.239.104.0/22
87.239.108.0/22
87.240.128.0/18
87.240.128.0/19
87.240.160.0/19
87.242.112.0/22
89.208.196.0/22
89.208.196.0/23
89.208.198.0/23
89.208.208.0/22
89.208.208.0/23
89.208.210.0/23
89.208.216.0/21
89.208.216.0/23
89.208.218.0/23
89.208.220.0/22
89.208.228.0/22
89.208.228.0/23
89.208.230.0/23
89.208.84.0/22
89.208.84.0/23
89.208.86.0/23
89.221.228.0/22
89.221.232.0/21
90.156.148.0/22
90.156.148.0/23
90.156.150.0/23
90.156.212.0/22
90.156.212.0/23
90.156.214.0/23
90.156.216.0/22
90.156.216.0/23
90.156.218.0/23
90.156.232.0/21
91.219.224.0/22
90.156.248.0/22
91.231.132.0/22
91.237.76.0/24
93.153.255.84/30
@@ -227,23 +169,15 @@
94.100.176.0/21
94.100.184.0/21
94.139.244.0/22
94.139.244.0/23
94.139.246.0/23
95.142.192.0/20
95.142.192.0/21
95.142.200.0/21
95.163.180.0/22
95.163.180.0/23
95.163.182.0/23
95.163.208.0/21
95.163.208.0/23
95.163.210.0/23
95.163.212.0/22
95.163.216.0/22
95.163.216.0/23
95.163.218.0/23
95.163.248.0/21
95.163.248.0/22
95.163.252.0/23
95.163.254.0/23
95.163.32.0/19

View File

@@ -1,382 +1,382 @@
# Networks announced by AS28709
# AS-Name (ORG): VKONTAKTE-REGIONAL-CDN (LLC VK)
128.140.170.0/24
2a00:bdc0:e003::/48
178.237.22.0/24
2a00:bdc0:e007::/48
185.32.251.0/24
178.237.28.0/24
2a00:bdc0:e004::/48
95.142.201.0/24
178.237.24.0/24
2a00:bdc0:e002::/48
185.32.249.0/24
95.142.203.0/24
95.142.202.0/24
185.32.249.0/24
2a00:bdc0:e005::/48
2a00:bdc0:e007::/48
178.237.21.0/24
2a00:bdc0:e003::/48
2a00:bdc0:e002::/48
178.237.22.0/24
128.140.170.0/24
95.142.201.0/24
178.237.28.0/24
95.142.202.0/24
178.237.24.0/24
185.32.251.0/24
2a00:bdc0:e004::/48
# Networks announced by AS28709
# AS-Name (ORG): VKONTAKTE-REGIONAL-CDN (LLC VK)
128.140.170.0/24
2a00:bdc0:e003::/48
178.237.22.0/24
2a00:bdc0:e007::/48
185.32.251.0/24
178.237.28.0/24
2a00:bdc0:e004::/48
95.142.201.0/24
178.237.24.0/24
2a00:bdc0:e002::/48
185.32.249.0/24
95.142.203.0/24
95.142.202.0/24
185.32.249.0/24
2a00:bdc0:e005::/48
2a00:bdc0:e007::/48
178.237.21.0/24
2a00:bdc0:e003::/48
2a00:bdc0:e002::/48
178.237.22.0/24
128.140.170.0/24
95.142.201.0/24
178.237.28.0/24
95.142.202.0/24
178.237.24.0/24
185.32.251.0/24
2a00:bdc0:e004::/48
# Networks announced by AS34500
# AS-Name (ORG): CTSPI (FGUP CTSPI MGA Russia)
80.73.16.0/24
80.73.16.0/20
80.73.16.0/21
80.73.16.0/24
# Networks announced by AS34500
# AS-Name (ORG): CTSPI (FGUP CTSPI MGA Russia)
80.73.16.0/24
80.73.16.0/20
80.73.16.0/21
80.73.16.0/24
# Networks announced by AS43038
# AS-Name (ORG): TVK-AS (MTS PJSC)
178.17.176.0/23
178.17.178.0/23
193.33.230.0/23
213.176.232.0/23
178.17.182.0/23
178.17.184.0/22
213.176.234.0/23
178.17.188.0/22
178.17.180.0/23
91.208.20.0/24
81.195.151.0/24
79.143.232.0/24
195.226.203.0/24
178.17.178.0/23
178.17.188.0/22
178.17.176.0/23
178.17.184.0/22
79.143.229.0/24
79.143.230.0/24
193.33.230.0/23
81.195.151.0/24
195.226.203.0/24
178.17.180.0/23
79.143.232.0/24
213.176.232.0/23
213.176.234.0/23
# Networks announced by AS43038
# AS-Name (ORG): TVK-AS (MTS PJSC)
178.17.176.0/23
178.17.178.0/23
193.33.230.0/23
213.176.232.0/23
178.17.182.0/23
178.17.184.0/22
213.176.234.0/23
178.17.188.0/22
178.17.180.0/23
91.208.20.0/24
81.195.151.0/24
79.143.232.0/24
195.226.203.0/24
178.17.178.0/23
178.17.188.0/22
178.17.176.0/23
178.17.184.0/22
79.143.229.0/24
79.143.230.0/24
193.33.230.0/23
81.195.151.0/24
195.226.203.0/24
178.17.180.0/23
79.143.232.0/24
213.176.232.0/23
213.176.234.0/23
# Networks announced by AS43720
# AS-Name (ORG): TVK-AS (MTS OJSC)
91.135.220.0/24
81.195.164.0/24
91.195.136.0/23
91.135.212.0/22
91.135.216.0/21
91.135.221.0/24
91.195.136.0/23
91.135.216.0/21
91.135.212.0/22
81.195.164.0/24
91.135.220.0/24
# Networks announced by AS43720
# AS-Name (ORG): TVK-AS (MTS OJSC)
91.135.220.0/24
81.195.164.0/24
91.195.136.0/23
91.135.212.0/22
91.135.216.0/21
91.135.221.0/24
91.195.136.0/23
91.135.216.0/21
91.135.212.0/22
81.195.164.0/24
91.135.220.0/24
# Networks announced by AS47541
# AS-Name (ORG): VKONTAKTE-SPB-AS (LLC VK)
2a00:bdc4::/30
79.137.183.0/24
87.240.128.0/18
79.137.139.0/24
91.231.132.0/24
93.186.224.0/21
2a00:bdc1::/32
185.131.68.0/23
217.69.132.0/24
2a00:bdc0:8000::/34
185.131.68.0/23
2a00:bdc0:c000::/35
87.240.128.0/18
95.213.0.0/17
185.32.248.0/22
95.142.192.0/21
79.137.183.0/24
95.142.192.0/20
79.137.180.0/24
95.142.192.0/21
185.32.248.0/22
91.231.133.0/24
2a00:bdc0::/33
87.240.167.0/24
95.213.0.0/17
95.213.0.0/18
2a00:bdc0:c000::/35
91.231.134.0/24
93.186.224.0/21
2a00:bdc2::/31
2a14:25c5::/32
87.240.166.0/24
2a14:25c7::/32
95.213.44.0/24
95.213.45.0/24
2a00:bdc0:8000::/34
87.240.167.0/24
2a14:25c7::/32
2a00:bdc0::/33
2a00:bdc4::/30
2a14:25c5::/32
91.231.133.0/24
93.186.232.0/21
87.240.166.0/24
95.213.44.0/24
2a00:bdc2::/31
91.231.134.0/24
91.231.132.0/24
79.137.164.0/24
95.213.0.0/18
# Networks announced by AS47541
# AS-Name (ORG): VKONTAKTE-SPB-AS (LLC VK)
2a00:bdc4::/30
79.137.183.0/24
87.240.128.0/18
79.137.139.0/24
91.231.132.0/24
93.186.224.0/21
2a00:bdc1::/32
185.131.68.0/23
217.69.132.0/24
2a00:bdc0:8000::/34
185.131.68.0/23
2a00:bdc0:c000::/35
87.240.128.0/18
95.213.0.0/17
185.32.248.0/22
95.142.192.0/21
79.137.183.0/24
95.142.192.0/20
79.137.180.0/24
95.142.192.0/21
185.32.248.0/22
91.231.133.0/24
2a00:bdc0::/33
95.213.45.0/24
2a00:bdc0:8000::/34
87.240.167.0/24
95.213.0.0/17
95.213.0.0/18
2a00:bdc0:c000::/35
91.231.134.0/24
93.186.224.0/21
2a00:bdc2::/31
2a14:25c5::/32
87.240.166.0/24
2a14:25c7::/32
95.213.44.0/24
95.213.45.0/24
2a00:bdc0::/33
2a00:bdc4::/30
2a14:25c5::/32
91.231.133.0/24
93.186.232.0/21
87.240.166.0/24
95.213.44.0/24
2a00:bdc2::/31
91.231.134.0/24
91.231.132.0/24
79.137.164.0/24
95.213.0.0/18
# Networks announced by AS47542
# AS-Name (ORG): VKONTAKTE-MSK-CDN-AS (LLC VK)
87.240.166.0/24
95.142.204.0/23
2a00:bdc0:f000::/36
95.142.207.0/24
128.140.173.0/24
95.213.44.0/24
95.213.45.0/24
87.240.167.0/24
87.240.166.0/24
128.140.173.0/24
95.142.207.0/24
2a00:bdc0:f000::/36
95.213.44.0/24
# Networks announced by AS47542
# AS-Name (ORG): VKONTAKTE-MSK-CDN-AS (LLC VK)
87.240.166.0/24
95.142.204.0/23
2a00:bdc0:f000::/36
95.142.207.0/24
128.140.173.0/24
95.213.44.0/24
95.213.45.0/24
87.240.167.0/24
87.240.166.0/24
128.140.173.0/24
95.142.207.0/24
2a00:bdc0:f000::/36
95.213.44.0/24
# Networks announced by AS47764
# AS-Name (ORG): VK-AS (LLC VK)
185.180.200.0/22
89.221.228.0/22
212.233.72.0/21
5.181.60.0/22
79.137.240.0/21
2a00:46e0:2::/48
83.166.248.0/21
83.222.28.0/22
83.217.216.0/22
5.181.61.0/24
79.137.174.0/23
89.208.228.0/22
2a00:1148::/29
90.156.148.0/22
90.156.151.0/24
45.136.20.0/22
5.61.232.0/21
91.231.133.0/24
217.174.188.0/22
5.188.140.0/22
188.93.56.0/21
146.185.208.0/22
185.131.68.0/22
95.163.208.0/21
217.16.16.0/20
185.187.63.0/24
87.242.112.0/22
195.218.190.0/23
84.23.52.0/22
89.221.236.0/22
146.185.240.0/22
185.16.247.0/24
128.140.168.0/21
2a14:25c0::/32
94.139.244.0/24
62.217.160.0/20
185.16.244.0/23
212.233.96.0/22
109.120.180.0/22
94.139.244.0/22
31.177.104.0/22
95.163.180.0/22
91.231.132.0/22
89.221.235.0/24
155.212.192.0/20
89.221.232.0/22
217.69.128.0/20
185.5.136.0/22
2a00:1148::/32
212.111.84.0/22
79.137.157.0/24
212.233.88.0/21
95.163.133.0/24
89.208.216.0/23
37.139.40.0/22
95.163.32.0/19
95.163.216.0/22
109.120.188.0/22
89.208.218.0/23
37.139.32.0/22
45.84.128.0/22
95.163.248.0/21
89.208.84.0/22
217.20.144.0/20
185.130.112.0/22
90.156.216.0/22
94.100.176.0/20
185.86.144.0/22
5.101.40.0/22
185.16.148.0/22
193.203.40.0/22
92.38.217.0/24
91.219.224.0/22
212.233.120.0/22
89.208.228.0/22
62.217.160.0/20
213.219.212.0/22
89.221.235.0/24
5.188.140.0/22
194.186.63.0/24
188.93.56.0/21
128.140.168.0/21
2a00:1148::/29
212.233.96.0/22
90.156.151.0/24
185.16.244.0/22
2a00:46e0::/32
2a00:b4c0::/32
90.156.212.0/22
178.22.88.0/21
91.231.133.0/24
217.20.144.0/20
89.221.232.0/22
185.131.68.0/22
155.212.192.0/20
83.222.28.0/22
185.16.246.0/24
91.231.134.0/24
130.49.224.0/19
89.208.208.0/22
83.166.232.0/21
89.208.196.0/22
87.239.104.0/21
89.208.220.0/22
178.237.16.0/20
195.211.20.0/22
176.112.168.0/21
31.177.104.0/22
5.101.40.0/22
2a00:b4c0::/32
89.221.228.0/22
185.16.244.0/23
109.120.188.0/22
217.69.128.0/20
79.137.240.0/21
217.16.16.0/20
83.217.216.0/22
45.136.20.0/22
95.163.208.0/21
185.226.52.0/22
178.237.16.0/20
89.208.220.0/22
83.166.248.0/21
185.180.200.0/22
5.181.60.0/22
195.218.190.0/23
185.130.112.0/22
5.61.232.0/21
5.61.16.0/21
90.156.232.0/21
85.192.32.0/22
2a14:25c6::/32
213.219.212.0/22
185.241.192.0/22
212.233.120.0/22
95.163.133.0/24
146.185.240.0/22
195.211.20.0/22
87.242.112.0/22
185.16.148.0/22
185.100.104.0/22
90.156.212.0/22
89.208.84.0/22
185.187.63.0/24
94.139.244.0/24
2a00:46e0:2::/48
85.192.32.0/22
94.100.176.0/20
89.208.208.0/22
87.239.104.0/21
95.163.32.0/19
130.49.224.0/19
2a14:25c0::/32
89.208.196.0/22
109.120.180.0/22
90.156.148.0/22
193.203.40.0/22
95.163.248.0/21
91.231.132.0/22
94.139.244.0/22
89.208.216.0/23
185.241.192.0/22
212.233.72.0/21
2a14:25c6::/32
185.86.144.0/22
89.221.236.0/22
90.156.216.0/22
37.139.32.0/22
2a00:1148::/32
212.111.84.0/22
79.137.174.0/23
91.219.224.0/22
89.208.218.0/23
45.84.128.0/22
91.231.134.0/24
84.23.52.0/22
2a00:46e0::/32
92.38.217.0/24
5.181.61.0/24
185.5.136.0/22
217.174.188.0/22
178.22.88.0/21
95.163.180.0/22
146.185.208.0/22
83.166.232.0/21
79.137.157.0/24
176.112.168.0/21
185.16.247.0/24
212.233.88.0/21
161.104.104.0/21
# Networks announced by AS47764
# AS-Name (ORG): VK-AS (LLC VK)
185.180.200.0/22
89.221.228.0/22
212.233.72.0/21
5.181.60.0/22
79.137.240.0/21
2a00:46e0:2::/48
83.166.248.0/21
83.222.28.0/22
83.217.216.0/22
5.181.61.0/24
79.137.174.0/23
89.208.228.0/22
2a00:1148::/29
90.156.148.0/22
90.156.151.0/24
45.136.20.0/22
5.61.232.0/21
91.231.133.0/24
217.174.188.0/22
5.188.140.0/22
188.93.56.0/21
146.185.208.0/22
185.131.68.0/22
95.163.208.0/21
217.16.16.0/20
185.187.63.0/24
87.242.112.0/22
195.218.190.0/23
84.23.52.0/22
89.221.236.0/22
146.185.240.0/22
185.16.247.0/24
128.140.168.0/21
2a14:25c0::/32
94.139.244.0/24
62.217.160.0/20
185.16.244.0/23
212.233.96.0/22
109.120.180.0/22
94.139.244.0/22
31.177.104.0/22
95.163.180.0/22
91.231.132.0/22
89.221.235.0/24
155.212.192.0/20
89.221.232.0/22
217.69.128.0/20
185.5.136.0/22
2a00:1148::/32
212.111.84.0/22
79.137.157.0/24
212.233.88.0/21
95.163.133.0/24
89.208.216.0/23
37.139.40.0/22
95.163.32.0/19
95.163.216.0/22
109.120.188.0/22
89.208.218.0/23
37.139.32.0/22
45.84.128.0/22
95.163.248.0/21
89.208.84.0/22
217.20.144.0/20
185.130.112.0/22
90.156.216.0/22
94.100.176.0/20
185.86.144.0/22
5.101.40.0/22
185.16.148.0/22
193.203.40.0/22
92.38.217.0/24
91.219.224.0/22
212.233.120.0/22
89.208.228.0/22
62.217.160.0/20
213.219.212.0/22
89.221.235.0/24
5.188.140.0/22
194.186.63.0/24
188.93.56.0/21
128.140.168.0/21
2a00:1148::/29
212.233.96.0/22
90.156.151.0/24
185.16.244.0/22
2a00:46e0::/32
2a00:b4c0::/32
90.156.212.0/22
178.22.88.0/21
91.231.133.0/24
217.20.144.0/20
89.221.232.0/22
185.131.68.0/22
155.212.192.0/20
83.222.28.0/22
185.16.246.0/24
91.231.134.0/24
130.49.224.0/19
89.208.208.0/22
83.166.232.0/21
89.208.196.0/22
87.239.104.0/21
89.208.220.0/22
178.237.16.0/20
195.211.20.0/22
176.112.168.0/21
31.177.104.0/22
5.101.40.0/22
2a00:b4c0::/32
89.221.228.0/22
185.16.244.0/23
109.120.188.0/22
217.69.128.0/20
79.137.240.0/21
217.16.16.0/20
83.217.216.0/22
45.136.20.0/22
95.163.208.0/21
185.226.52.0/22
178.237.16.0/20
89.208.220.0/22
83.166.248.0/21
185.180.200.0/22
5.181.60.0/22
195.218.190.0/23
185.130.112.0/22
5.61.232.0/21
5.61.16.0/21
90.156.232.0/21
85.192.32.0/22
2a14:25c6::/32
213.219.212.0/22
185.241.192.0/22
212.233.120.0/22
95.163.133.0/24
146.185.240.0/22
195.211.20.0/22
87.242.112.0/22
185.16.148.0/22
185.100.104.0/22
90.156.212.0/22
89.208.84.0/22
185.187.63.0/24
94.139.244.0/24
2a00:46e0:2::/48
85.192.32.0/22
94.100.176.0/20
89.208.208.0/22
87.239.104.0/21
95.163.32.0/19
130.49.224.0/19
2a14:25c0::/32
89.208.196.0/22
109.120.180.0/22
90.156.148.0/22
193.203.40.0/22
95.163.248.0/21
91.231.132.0/22
94.139.244.0/22
89.208.216.0/23
185.241.192.0/22
212.233.72.0/21
2a14:25c6::/32
185.86.144.0/22
89.221.236.0/22
90.156.216.0/22
37.139.32.0/22
2a00:1148::/32
212.111.84.0/22
79.137.174.0/23
91.219.224.0/22
89.208.218.0/23
45.84.128.0/22
91.231.134.0/24
84.23.52.0/22
2a00:46e0::/32
92.38.217.0/24
5.181.61.0/24
185.5.136.0/22
217.174.188.0/22
178.22.88.0/21
95.163.180.0/22
146.185.208.0/22
83.166.232.0/21
79.137.157.0/24
176.112.168.0/21
185.16.247.0/24
212.233.88.0/21
161.104.104.0/21
# Networks announced by AS49281
# AS-Name (ORG): M100 (M100 LLC)
@@ -394,24 +394,24 @@
79.137.142.0/24
# Networks announced by AS49988
# AS-Name (ORG): odkl-as (LLC VK)
79.137.140.0/24
85.198.107.0/24
79.137.140.0/24
85.142.251.0/24
# Networks announced by AS49988
# AS-Name (ORG): odkl-as (LLC VK)
79.137.140.0/24
85.198.107.0/24
79.137.140.0/24
85.142.251.0/24
# Networks announced by AS51932
# AS-Name (ORG): ORVD-AS (FGUP Goskorporatsiya po OrVD)
91.221.140.0/23
91.221.141.0/24
91.221.140.0/24
91.221.140.0/23
# Networks announced by AS51932
# AS-Name (ORG): ORVD-AS (FGUP Goskorporatsiya po OrVD)
91.221.140.0/23
91.221.141.0/24
91.221.140.0/24
91.221.140.0/23
# Network name: Roskomnadzor-net
46.228.0.232/29
87.226.213.0/24

View File

@@ -1,6 +1,6 @@
# IPSet blacklist configuration (IPv4 only)
# Auto-generated from blacklist-v4.txt
# Last updated: 2026-04-06 07:21:14 UTC
# Last updated: 2026-04-06 15:59:46 UTC
#
# Usage:
# 1. Load the ipset:

View File

@@ -1,6 +1,6 @@
# IPSet blacklist configuration (IPv6 only)
# Auto-generated from blacklist-v6.txt
# Last updated: 2026-04-06 07:21:14 UTC
# Last updated: 2026-04-06 15:59:46 UTC
#
# Usage:
# 1. Load the ipset:

View File

@@ -1,6 +1,6 @@
# IPSet blacklist configuration (VK names, IPv4 only)
# Auto-generated from blacklist-vk-v4.txt
# Last updated: 2026-04-06 07:21:14 UTC
# Last updated: 2026-04-06 15:59:46 UTC
#
# Usage:
# 1. Load the ipset:
@@ -15,13 +15,9 @@
# ipset destroy blacklist-vk-v4
#
create blacklist-vk-v4 hash:net family inet hashsize 1024 maxelem 538
create blacklist-vk-v4 hash:net family inet hashsize 1024 maxelem 402
add blacklist-vk-v4 109.120.180.0/22
add blacklist-vk-v4 109.120.180.0/23
add blacklist-vk-v4 109.120.182.0/23
add blacklist-vk-v4 109.120.188.0/22
add blacklist-vk-v4 109.120.188.0/23
add blacklist-vk-v4 109.120.190.0/23
add blacklist-vk-v4 128.140.168.0/21
add blacklist-vk-v4 128.140.168.0/23
add blacklist-vk-v4 128.140.170.0/24
@@ -29,15 +25,9 @@ add blacklist-vk-v4 128.140.171.0/24
add blacklist-vk-v4 128.140.172.0/22
add blacklist-vk-v4 130.49.224.0/19
add blacklist-vk-v4 146.185.208.0/22
add blacklist-vk-v4 146.185.208.0/23
add blacklist-vk-v4 146.185.210.0/23
add blacklist-vk-v4 146.185.240.0/22
add blacklist-vk-v4 146.185.240.0/23
add blacklist-vk-v4 146.185.242.0/23
add blacklist-vk-v4 155.212.192.0/20
add blacklist-vk-v4 161.104.104.0/21
add blacklist-vk-v4 161.104.104.0/22
add blacklist-vk-v4 161.104.108.0/22
add blacklist-vk-v4 176.112.168.0/21
add blacklist-vk-v4 178.22.88.0/21
add blacklist-vk-v4 178.22.89.64/26
@@ -50,8 +40,6 @@ add blacklist-vk-v4 185.100.104.0/22
add blacklist-vk-v4 185.100.104.0/23
add blacklist-vk-v4 185.100.106.0/23
add blacklist-vk-v4 185.130.112.0/22
add blacklist-vk-v4 185.130.112.0/23
add blacklist-vk-v4 185.130.114.0/23
add blacklist-vk-v4 185.131.68.0/22
add blacklist-vk-v4 185.16.148.0/22
add blacklist-vk-v4 185.16.148.0/23
@@ -67,8 +55,6 @@ add blacklist-vk-v4 185.226.52.0/22
add blacklist-vk-v4 185.226.52.0/23
add blacklist-vk-v4 185.226.54.0/23
add blacklist-vk-v4 185.241.192.0/22
add blacklist-vk-v4 185.241.192.0/23
add blacklist-vk-v4 185.241.194.0/23
add blacklist-vk-v4 185.29.128.0/22
add blacklist-vk-v4 185.29.130.0/24
add blacklist-vk-v4 185.32.248.0/22
@@ -81,8 +67,6 @@ add blacklist-vk-v4 185.6.244.0/22
add blacklist-vk-v4 185.6.244.0/23
add blacklist-vk-v4 185.6.246.0/23
add blacklist-vk-v4 185.86.144.0/22
add blacklist-vk-v4 185.86.144.0/23
add blacklist-vk-v4 185.86.146.0/23
add blacklist-vk-v4 188.93.56.0/21
add blacklist-vk-v4 188.93.56.0/24
add blacklist-vk-v4 188.93.57.0/24
@@ -95,17 +79,8 @@ add blacklist-vk-v4 194.84.16.12/30
add blacklist-vk-v4 195.211.20.0/22
add blacklist-vk-v4 195.211.22.0/24
add blacklist-vk-v4 195.211.23.0/24
add blacklist-vk-v4 212.111.84.0/22
add blacklist-vk-v4 212.233.120.0/22
add blacklist-vk-v4 212.233.72.0/21
add blacklist-vk-v4 212.233.88.0/21
add blacklist-vk-v4 212.233.96.0/22
add blacklist-vk-v4 195.239.247.0/24
add blacklist-vk-v4 213.219.212.0/22
add blacklist-vk-v4 213.219.212.0/23
add blacklist-vk-v4 213.219.214.0/23
add blacklist-vk-v4 217.16.16.0/20
add blacklist-vk-v4 217.16.16.0/21
add blacklist-vk-v4 217.16.24.0/21
add blacklist-vk-v4 217.174.188.0/23
add blacklist-vk-v4 217.20.144.0/20
add blacklist-vk-v4 217.20.144.0/22
@@ -120,11 +95,7 @@ add blacklist-vk-v4 217.69.128.0/20
add blacklist-vk-v4 217.69.128.0/21
add blacklist-vk-v4 217.69.136.0/21
add blacklist-vk-v4 37.139.32.0/22
add blacklist-vk-v4 37.139.32.0/23
add blacklist-vk-v4 37.139.34.0/23
add blacklist-vk-v4 37.139.40.0/22
add blacklist-vk-v4 37.139.40.0/23
add blacklist-vk-v4 37.139.42.0/23
add blacklist-vk-v4 45.136.20.0/22
add blacklist-vk-v4 45.136.20.0/23
add blacklist-vk-v4 45.136.22.0/23
@@ -139,8 +110,6 @@ add blacklist-vk-v4 5.181.60.0/24
add blacklist-vk-v4 5.181.61.0/24
add blacklist-vk-v4 5.181.62.0/23
add blacklist-vk-v4 5.188.140.0/22
add blacklist-vk-v4 5.188.140.0/23
add blacklist-vk-v4 5.188.142.0/23
add blacklist-vk-v4 5.61.16.0/21
add blacklist-vk-v4 5.61.16.0/22
add blacklist-vk-v4 5.61.20.0/22
@@ -171,69 +140,40 @@ add blacklist-vk-v4 79.137.167.0/24
add blacklist-vk-v4 79.137.167.0/25
add blacklist-vk-v4 79.137.167.128/25
add blacklist-vk-v4 79.137.174.0/23
add blacklist-vk-v4 79.137.174.0/24
add blacklist-vk-v4 79.137.175.0/24
add blacklist-vk-v4 79.137.180.0/24
add blacklist-vk-v4 79.137.180.0/25
add blacklist-vk-v4 79.137.180.128/25
add blacklist-vk-v4 79.137.240.0/21
add blacklist-vk-v4 79.137.240.0/22
add blacklist-vk-v4 79.137.244.0/22
add blacklist-vk-v4 81.177.12.0/24
add blacklist-vk-v4 81.177.31.64/26
add blacklist-vk-v4 83.166.232.0/21
add blacklist-vk-v4 83.166.232.0/22
add blacklist-vk-v4 83.166.236.0/22
add blacklist-vk-v4 83.166.248.0/21
add blacklist-vk-v4 83.166.248.0/22
add blacklist-vk-v4 83.166.252.0/22
add blacklist-vk-v4 83.217.216.0/22
add blacklist-vk-v4 83.217.216.0/23
add blacklist-vk-v4 83.217.218.0/23
add blacklist-vk-v4 83.222.28.0/22
add blacklist-vk-v4 84.23.52.0/22
add blacklist-vk-v4 84.23.52.0/23
add blacklist-vk-v4 84.23.54.0/23
add blacklist-vk-v4 85.114.31.108/30
add blacklist-vk-v4 85.192.32.0/22
add blacklist-vk-v4 85.192.32.0/23
add blacklist-vk-v4 85.192.34.0/23
add blacklist-vk-v4 85.198.106.0/24
add blacklist-vk-v4 85.198.107.0/24
add blacklist-vk-v4 87.239.104.0/21
add blacklist-vk-v4 87.239.104.0/22
add blacklist-vk-v4 87.239.108.0/22
add blacklist-vk-v4 87.240.128.0/18
add blacklist-vk-v4 87.240.128.0/19
add blacklist-vk-v4 87.240.160.0/19
add blacklist-vk-v4 87.242.112.0/22
add blacklist-vk-v4 89.208.196.0/22
add blacklist-vk-v4 89.208.196.0/23
add blacklist-vk-v4 89.208.198.0/23
add blacklist-vk-v4 89.208.208.0/22
add blacklist-vk-v4 89.208.208.0/23
add blacklist-vk-v4 89.208.210.0/23
add blacklist-vk-v4 89.208.216.0/21
add blacklist-vk-v4 89.208.216.0/23
add blacklist-vk-v4 89.208.218.0/23
add blacklist-vk-v4 89.208.220.0/22
add blacklist-vk-v4 89.208.228.0/22
add blacklist-vk-v4 89.208.228.0/23
add blacklist-vk-v4 89.208.230.0/23
add blacklist-vk-v4 89.208.84.0/22
add blacklist-vk-v4 89.208.84.0/23
add blacklist-vk-v4 89.208.86.0/23
add blacklist-vk-v4 89.221.228.0/22
add blacklist-vk-v4 89.221.232.0/21
add blacklist-vk-v4 90.156.148.0/22
add blacklist-vk-v4 90.156.148.0/23
add blacklist-vk-v4 90.156.150.0/23
add blacklist-vk-v4 90.156.212.0/22
add blacklist-vk-v4 90.156.212.0/23
add blacklist-vk-v4 90.156.214.0/23
add blacklist-vk-v4 90.156.216.0/22
add blacklist-vk-v4 90.156.216.0/23
add blacklist-vk-v4 90.156.218.0/23
add blacklist-vk-v4 90.156.232.0/21
add blacklist-vk-v4 91.219.224.0/22
add blacklist-vk-v4 90.156.248.0/22
add blacklist-vk-v4 91.231.132.0/22
add blacklist-vk-v4 91.237.76.0/24
add blacklist-vk-v4 93.153.255.84/30
@@ -244,23 +184,15 @@ add blacklist-vk-v4 94.100.176.0/20
add blacklist-vk-v4 94.100.176.0/21
add blacklist-vk-v4 94.100.184.0/21
add blacklist-vk-v4 94.139.244.0/22
add blacklist-vk-v4 94.139.244.0/23
add blacklist-vk-v4 94.139.246.0/23
add blacklist-vk-v4 95.142.192.0/20
add blacklist-vk-v4 95.142.192.0/21
add blacklist-vk-v4 95.142.200.0/21
add blacklist-vk-v4 95.163.180.0/22
add blacklist-vk-v4 95.163.180.0/23
add blacklist-vk-v4 95.163.182.0/23
add blacklist-vk-v4 95.163.208.0/21
add blacklist-vk-v4 95.163.208.0/23
add blacklist-vk-v4 95.163.210.0/23
add blacklist-vk-v4 95.163.212.0/22
add blacklist-vk-v4 95.163.216.0/22
add blacklist-vk-v4 95.163.216.0/23
add blacklist-vk-v4 95.163.218.0/23
add blacklist-vk-v4 95.163.248.0/21
add blacklist-vk-v4 95.163.248.0/22
add blacklist-vk-v4 95.163.252.0/23
add blacklist-vk-v4 95.163.254.0/23
add blacklist-vk-v4 95.163.32.0/19

View File

@@ -1,6 +1,6 @@
# IPSet blacklist configuration (VK names, IPv6 only)
# Auto-generated from blacklist-vk-v6.txt
# Last updated: 2026-04-06 07:21:14 UTC
# Last updated: 2026-04-06 15:59:46 UTC
#
# Usage:
# 1. Load the ipset:
@@ -15,5 +15,7 @@
# ipset destroy blacklist-vk-v6
#
create blacklist-vk-v6 hash:net family inet6 hashsize 1024 maxelem 2
create blacklist-vk-v6 hash:net family inet6 hashsize 1024 maxelem 6
add blacklist-vk-v6 2a00:1148::/29
add blacklist-vk-v6 2a00:b4c0::/29
add blacklist-vk-v6 2a00:bdc0::/29

View File

@@ -1,5 +1,5 @@
# Autogenerated nftables blacklist
# Generated: 2026-04-06T07:21:15.099543Z
# Generated: 2026-04-06T15:59:46.837478Z
# Source: /tmp/blacklist-v4.txt
# IPv4: 803, IPv6: 0
#

View File

@@ -1,5 +1,5 @@
# Autogenerated nftables blacklist
# Generated: 2026-04-06T07:21:15.132185Z
# Generated: 2026-04-06T15:59:46.868034Z
# Source: /tmp/blacklist-v6.txt
# IPv4: 0, IPv6: 17
#

View File

@@ -1,7 +1,7 @@
# Autogenerated nftables blacklist
# Generated: 2026-04-06T07:21:15.192998Z
# Generated: 2026-04-06T15:59:46.923598Z
# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist-vk-v4.txt
# IPv4: 93, IPv6: 0
# IPv4: 90, IPv6: 0
#
# Usage:
# sudo nft -f <this-file>
@@ -34,6 +34,8 @@ table inet filter {
79.137.174.0/23,
79.137.180.0/24,
79.137.240.0/21,
81.177.12.0/24,
81.177.31.64/26,
83.166.232.0/21,
83.166.248.0/21,
83.217.216.0/22,
@@ -56,7 +58,7 @@ table inet filter {
90.156.212.0/22,
90.156.216.0/22,
90.156.232.0/21,
91.219.224.0/22,
90.156.248.0/22,
91.231.132.0/22,
91.237.76.0/24,
93.153.255.84/30,
@@ -99,13 +101,8 @@ table inet filter {
193.203.40.0/22,
194.84.16.12/30,
195.211.20.0/22,
212.111.84.0/22,
212.233.72.0/21,
212.233.88.0/21,
212.233.96.0/22,
212.233.120.0/22,
195.239.247.0/24,
213.219.212.0/22,
217.16.16.0/20,
217.20.144.0/20,
217.69.128.0/20,
217.174.188.0/23

View File

@@ -1,7 +1,7 @@
# Autogenerated nftables blacklist
# Generated: 2026-04-06T07:21:15.219896Z
# Generated: 2026-04-06T15:59:46.948666Z
# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist-vk-v6.txt
# IPv4: 0, IPv6: 1
# IPv4: 0, IPv6: 3
#
# Usage:
# sudo nft -f <this-file>
@@ -21,6 +21,8 @@ table inet filter {
type ipv6_addr
flags interval
elements = {
2a00:1148::/29,
2a00:b4c0::/29,
2a00:bdc0::/29
}
}

View File

@@ -1,7 +1,7 @@
# Autogenerated nftables blacklist
# Generated: 2026-04-06T07:21:15.162734Z
# Generated: 2026-04-06T15:59:46.895696Z
# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist-vk.txt
# IPv4: 93, IPv6: 1
# IPv4: 90, IPv6: 3
#
# Usage:
# sudo nft -f <this-file>
@@ -34,6 +34,8 @@ table inet filter {
79.137.174.0/23,
79.137.180.0/24,
79.137.240.0/21,
81.177.12.0/24,
81.177.31.64/26,
83.166.232.0/21,
83.166.248.0/21,
83.217.216.0/22,
@@ -56,7 +58,7 @@ table inet filter {
90.156.212.0/22,
90.156.216.0/22,
90.156.232.0/21,
91.219.224.0/22,
90.156.248.0/22,
91.231.132.0/22,
91.237.76.0/24,
93.153.255.84/30,
@@ -99,13 +101,8 @@ table inet filter {
193.203.40.0/22,
194.84.16.12/30,
195.211.20.0/22,
212.111.84.0/22,
212.233.72.0/21,
212.233.88.0/21,
212.233.96.0/22,
212.233.120.0/22,
195.239.247.0/24,
213.219.212.0/22,
217.16.16.0/20,
217.20.144.0/20,
217.69.128.0/20,
217.174.188.0/23
@@ -116,6 +113,8 @@ table inet filter {
type ipv6_addr
flags interval
elements = {
2a00:1148::/29,
2a00:b4c0::/29,
2a00:bdc0::/29
}
}

View File

@@ -1,5 +1,5 @@
# Autogenerated nftables blacklist
# Generated: 2026-04-06T07:21:15.047794Z
# Generated: 2026-04-06T15:59:46.793270Z
# Source: /home/runner/work/AS_Network_List/AS_Network_List/blacklists/blacklist.txt
# IPv4: 803, IPv6: 17
#

View File

@@ -1,6 +1,6 @@
# Nginx blacklist configuration (IPv4 only)
# Auto-generated from blacklist-v4.txt
# Last updated: 2026-04-06 07:21:14 UTC
# Last updated: 2026-04-06 15:59:45 UTC
#
# Usage: Include this file in your nginx server or location block:
# include /path/to/blacklist-v4.conf;

View File

@@ -1,6 +1,6 @@
# Nginx blacklist configuration (IPv6 only)
# Auto-generated from blacklist-v6.txt
# Last updated: 2026-04-06 07:21:14 UTC
# Last updated: 2026-04-06 15:59:45 UTC
#
# Usage: Include this file in your nginx server or location block:
# include /path/to/blacklist-v6.conf;

View File

@@ -1,6 +1,6 @@
# Nginx blacklist configuration (mixed IPv4/IPv6)
# Auto-generated from blacklist.txt
# Last updated: 2026-04-06 07:21:14 UTC
# Last updated: 2026-04-06 15:59:45 UTC
#
# Usage: Include this file in your nginx server or location block:
# include /path/to/blacklist.conf;

View File

@@ -1,17 +1,13 @@
# Linux routes for VK networks (IPv4)
# Auto-generated by blacklists_updater_routes.sh
# Last updated: 2026-04-06 07:21:15 UTC
# Last updated: 2026-04-06 15:59:47 UTC
#
# Apply:
# sudo sh blacklist-vk-v4.routes
#
ip route replace 109.120.180.0/22 via 127.0.0.1 dev lo onlink
ip route replace 109.120.180.0/23 via 127.0.0.1 dev lo onlink
ip route replace 109.120.182.0/23 via 127.0.0.1 dev lo onlink
ip route replace 109.120.188.0/22 via 127.0.0.1 dev lo onlink
ip route replace 109.120.188.0/23 via 127.0.0.1 dev lo onlink
ip route replace 109.120.190.0/23 via 127.0.0.1 dev lo onlink
ip route replace 128.140.168.0/21 via 127.0.0.1 dev lo onlink
ip route replace 128.140.168.0/23 via 127.0.0.1 dev lo onlink
ip route replace 128.140.170.0/24 via 127.0.0.1 dev lo onlink
@@ -19,15 +15,9 @@ ip route replace 128.140.171.0/24 via 127.0.0.1 dev lo onlink
ip route replace 128.140.172.0/22 via 127.0.0.1 dev lo onlink
ip route replace 130.49.224.0/19 via 127.0.0.1 dev lo onlink
ip route replace 146.185.208.0/22 via 127.0.0.1 dev lo onlink
ip route replace 146.185.208.0/23 via 127.0.0.1 dev lo onlink
ip route replace 146.185.210.0/23 via 127.0.0.1 dev lo onlink
ip route replace 146.185.240.0/22 via 127.0.0.1 dev lo onlink
ip route replace 146.185.240.0/23 via 127.0.0.1 dev lo onlink
ip route replace 146.185.242.0/23 via 127.0.0.1 dev lo onlink
ip route replace 155.212.192.0/20 via 127.0.0.1 dev lo onlink
ip route replace 161.104.104.0/21 via 127.0.0.1 dev lo onlink
ip route replace 161.104.104.0/22 via 127.0.0.1 dev lo onlink
ip route replace 161.104.108.0/22 via 127.0.0.1 dev lo onlink
ip route replace 176.112.168.0/21 via 127.0.0.1 dev lo onlink
ip route replace 178.22.88.0/21 via 127.0.0.1 dev lo onlink
ip route replace 178.22.89.64/26 via 127.0.0.1 dev lo onlink
@@ -40,8 +30,6 @@ ip route replace 185.100.104.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.100.104.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.100.106.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.130.112.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.130.112.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.130.114.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.131.68.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.16.148.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.16.148.0/23 via 127.0.0.1 dev lo onlink
@@ -57,8 +45,6 @@ ip route replace 185.226.52.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.226.52.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.226.54.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.241.192.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.241.192.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.241.194.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.29.128.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.29.130.0/24 via 127.0.0.1 dev lo onlink
ip route replace 185.32.248.0/22 via 127.0.0.1 dev lo onlink
@@ -71,8 +57,6 @@ ip route replace 185.6.244.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.6.244.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.6.246.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.86.144.0/22 via 127.0.0.1 dev lo onlink
ip route replace 185.86.144.0/23 via 127.0.0.1 dev lo onlink
ip route replace 185.86.146.0/23 via 127.0.0.1 dev lo onlink
ip route replace 188.93.56.0/21 via 127.0.0.1 dev lo onlink
ip route replace 188.93.56.0/24 via 127.0.0.1 dev lo onlink
ip route replace 188.93.57.0/24 via 127.0.0.1 dev lo onlink
@@ -85,17 +69,8 @@ ip route replace 194.84.16.12/30 via 127.0.0.1 dev lo onlink
ip route replace 195.211.20.0/22 via 127.0.0.1 dev lo onlink
ip route replace 195.211.22.0/24 via 127.0.0.1 dev lo onlink
ip route replace 195.211.23.0/24 via 127.0.0.1 dev lo onlink
ip route replace 212.111.84.0/22 via 127.0.0.1 dev lo onlink
ip route replace 212.233.120.0/22 via 127.0.0.1 dev lo onlink
ip route replace 212.233.72.0/21 via 127.0.0.1 dev lo onlink
ip route replace 212.233.88.0/21 via 127.0.0.1 dev lo onlink
ip route replace 212.233.96.0/22 via 127.0.0.1 dev lo onlink
ip route replace 195.239.247.0/24 via 127.0.0.1 dev lo onlink
ip route replace 213.219.212.0/22 via 127.0.0.1 dev lo onlink
ip route replace 213.219.212.0/23 via 127.0.0.1 dev lo onlink
ip route replace 213.219.214.0/23 via 127.0.0.1 dev lo onlink
ip route replace 217.16.16.0/20 via 127.0.0.1 dev lo onlink
ip route replace 217.16.16.0/21 via 127.0.0.1 dev lo onlink
ip route replace 217.16.24.0/21 via 127.0.0.1 dev lo onlink
ip route replace 217.174.188.0/23 via 127.0.0.1 dev lo onlink
ip route replace 217.20.144.0/20 via 127.0.0.1 dev lo onlink
ip route replace 217.20.144.0/22 via 127.0.0.1 dev lo onlink
@@ -110,11 +85,7 @@ ip route replace 217.69.128.0/20 via 127.0.0.1 dev lo onlink
ip route replace 217.69.128.0/21 via 127.0.0.1 dev lo onlink
ip route replace 217.69.136.0/21 via 127.0.0.1 dev lo onlink
ip route replace 37.139.32.0/22 via 127.0.0.1 dev lo onlink
ip route replace 37.139.32.0/23 via 127.0.0.1 dev lo onlink
ip route replace 37.139.34.0/23 via 127.0.0.1 dev lo onlink
ip route replace 37.139.40.0/22 via 127.0.0.1 dev lo onlink
ip route replace 37.139.40.0/23 via 127.0.0.1 dev lo onlink
ip route replace 37.139.42.0/23 via 127.0.0.1 dev lo onlink
ip route replace 45.136.20.0/22 via 127.0.0.1 dev lo onlink
ip route replace 45.136.20.0/23 via 127.0.0.1 dev lo onlink
ip route replace 45.136.22.0/23 via 127.0.0.1 dev lo onlink
@@ -129,8 +100,6 @@ ip route replace 5.181.60.0/24 via 127.0.0.1 dev lo onlink
ip route replace 5.181.61.0/24 via 127.0.0.1 dev lo onlink
ip route replace 5.181.62.0/23 via 127.0.0.1 dev lo onlink
ip route replace 5.188.140.0/22 via 127.0.0.1 dev lo onlink
ip route replace 5.188.140.0/23 via 127.0.0.1 dev lo onlink
ip route replace 5.188.142.0/23 via 127.0.0.1 dev lo onlink
ip route replace 5.61.16.0/21 via 127.0.0.1 dev lo onlink
ip route replace 5.61.16.0/22 via 127.0.0.1 dev lo onlink
ip route replace 5.61.20.0/22 via 127.0.0.1 dev lo onlink
@@ -161,69 +130,40 @@ ip route replace 79.137.167.0/24 via 127.0.0.1 dev lo onlink
ip route replace 79.137.167.0/25 via 127.0.0.1 dev lo onlink
ip route replace 79.137.167.128/25 via 127.0.0.1 dev lo onlink
ip route replace 79.137.174.0/23 via 127.0.0.1 dev lo onlink
ip route replace 79.137.174.0/24 via 127.0.0.1 dev lo onlink
ip route replace 79.137.175.0/24 via 127.0.0.1 dev lo onlink
ip route replace 79.137.180.0/24 via 127.0.0.1 dev lo onlink
ip route replace 79.137.180.0/25 via 127.0.0.1 dev lo onlink
ip route replace 79.137.180.128/25 via 127.0.0.1 dev lo onlink
ip route replace 79.137.240.0/21 via 127.0.0.1 dev lo onlink
ip route replace 79.137.240.0/22 via 127.0.0.1 dev lo onlink
ip route replace 79.137.244.0/22 via 127.0.0.1 dev lo onlink
ip route replace 81.177.12.0/24 via 127.0.0.1 dev lo onlink
ip route replace 81.177.31.64/26 via 127.0.0.1 dev lo onlink
ip route replace 83.166.232.0/21 via 127.0.0.1 dev lo onlink
ip route replace 83.166.232.0/22 via 127.0.0.1 dev lo onlink
ip route replace 83.166.236.0/22 via 127.0.0.1 dev lo onlink
ip route replace 83.166.248.0/21 via 127.0.0.1 dev lo onlink
ip route replace 83.166.248.0/22 via 127.0.0.1 dev lo onlink
ip route replace 83.166.252.0/22 via 127.0.0.1 dev lo onlink
ip route replace 83.217.216.0/22 via 127.0.0.1 dev lo onlink
ip route replace 83.217.216.0/23 via 127.0.0.1 dev lo onlink
ip route replace 83.217.218.0/23 via 127.0.0.1 dev lo onlink
ip route replace 83.222.28.0/22 via 127.0.0.1 dev lo onlink
ip route replace 84.23.52.0/22 via 127.0.0.1 dev lo onlink
ip route replace 84.23.52.0/23 via 127.0.0.1 dev lo onlink
ip route replace 84.23.54.0/23 via 127.0.0.1 dev lo onlink
ip route replace 85.114.31.108/30 via 127.0.0.1 dev lo onlink
ip route replace 85.192.32.0/22 via 127.0.0.1 dev lo onlink
ip route replace 85.192.32.0/23 via 127.0.0.1 dev lo onlink
ip route replace 85.192.34.0/23 via 127.0.0.1 dev lo onlink
ip route replace 85.198.106.0/24 via 127.0.0.1 dev lo onlink
ip route replace 85.198.107.0/24 via 127.0.0.1 dev lo onlink
ip route replace 87.239.104.0/21 via 127.0.0.1 dev lo onlink
ip route replace 87.239.104.0/22 via 127.0.0.1 dev lo onlink
ip route replace 87.239.108.0/22 via 127.0.0.1 dev lo onlink
ip route replace 87.240.128.0/18 via 127.0.0.1 dev lo onlink
ip route replace 87.240.128.0/19 via 127.0.0.1 dev lo onlink
ip route replace 87.240.160.0/19 via 127.0.0.1 dev lo onlink
ip route replace 87.242.112.0/22 via 127.0.0.1 dev lo onlink
ip route replace 89.208.196.0/22 via 127.0.0.1 dev lo onlink
ip route replace 89.208.196.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.198.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.208.0/22 via 127.0.0.1 dev lo onlink
ip route replace 89.208.208.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.210.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.216.0/21 via 127.0.0.1 dev lo onlink
ip route replace 89.208.216.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.218.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.220.0/22 via 127.0.0.1 dev lo onlink
ip route replace 89.208.228.0/22 via 127.0.0.1 dev lo onlink
ip route replace 89.208.228.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.230.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.84.0/22 via 127.0.0.1 dev lo onlink
ip route replace 89.208.84.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.208.86.0/23 via 127.0.0.1 dev lo onlink
ip route replace 89.221.228.0/22 via 127.0.0.1 dev lo onlink
ip route replace 89.221.232.0/21 via 127.0.0.1 dev lo onlink
ip route replace 90.156.148.0/22 via 127.0.0.1 dev lo onlink
ip route replace 90.156.148.0/23 via 127.0.0.1 dev lo onlink
ip route replace 90.156.150.0/23 via 127.0.0.1 dev lo onlink
ip route replace 90.156.212.0/22 via 127.0.0.1 dev lo onlink
ip route replace 90.156.212.0/23 via 127.0.0.1 dev lo onlink
ip route replace 90.156.214.0/23 via 127.0.0.1 dev lo onlink
ip route replace 90.156.216.0/22 via 127.0.0.1 dev lo onlink
ip route replace 90.156.216.0/23 via 127.0.0.1 dev lo onlink
ip route replace 90.156.218.0/23 via 127.0.0.1 dev lo onlink
ip route replace 90.156.232.0/21 via 127.0.0.1 dev lo onlink
ip route replace 91.219.224.0/22 via 127.0.0.1 dev lo onlink
ip route replace 90.156.248.0/22 via 127.0.0.1 dev lo onlink
ip route replace 91.231.132.0/22 via 127.0.0.1 dev lo onlink
ip route replace 91.237.76.0/24 via 127.0.0.1 dev lo onlink
ip route replace 93.153.255.84/30 via 127.0.0.1 dev lo onlink
@@ -234,23 +174,15 @@ ip route replace 94.100.176.0/20 via 127.0.0.1 dev lo onlink
ip route replace 94.100.176.0/21 via 127.0.0.1 dev lo onlink
ip route replace 94.100.184.0/21 via 127.0.0.1 dev lo onlink
ip route replace 94.139.244.0/22 via 127.0.0.1 dev lo onlink
ip route replace 94.139.244.0/23 via 127.0.0.1 dev lo onlink
ip route replace 94.139.246.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.142.192.0/20 via 127.0.0.1 dev lo onlink
ip route replace 95.142.192.0/21 via 127.0.0.1 dev lo onlink
ip route replace 95.142.200.0/21 via 127.0.0.1 dev lo onlink
ip route replace 95.163.180.0/22 via 127.0.0.1 dev lo onlink
ip route replace 95.163.180.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.182.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.208.0/21 via 127.0.0.1 dev lo onlink
ip route replace 95.163.208.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.210.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.212.0/22 via 127.0.0.1 dev lo onlink
ip route replace 95.163.216.0/22 via 127.0.0.1 dev lo onlink
ip route replace 95.163.216.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.218.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.248.0/21 via 127.0.0.1 dev lo onlink
ip route replace 95.163.248.0/22 via 127.0.0.1 dev lo onlink
ip route replace 95.163.252.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.254.0/23 via 127.0.0.1 dev lo onlink
ip route replace 95.163.32.0/19 via 127.0.0.1 dev lo onlink

View File

@@ -1,9 +1,11 @@
# Linux routes for VK networks (IPv6)
# Auto-generated by blacklists_updater_routes.sh
# Last updated: 2026-04-06 07:21:15 UTC
# Last updated: 2026-04-06 15:59:47 UTC
#
# Apply:
# sudo sh blacklist-vk-v6.routes
#
ip -6 route replace 2a00:1148::/29 via ::1 dev lo
ip -6 route replace 2a00:b4c0::/29 via ::1 dev lo
ip -6 route replace 2a00:bdc0::/29 via ::1 dev lo

View File

@@ -0,0 +1,56 @@
#!/bin/sh
# Shared config for blacklists_updater_*.sh scripts.
# Scripts are expected to define SCRIPT_DIR before sourcing this file.
: "${SCRIPT_DIR:?SCRIPT_DIR must be set before sourcing blacklists_updater_common.subr}"
BLACKLISTS_DIR="${SCRIPT_DIR}/blacklists"
AUTO_DIR="${SCRIPT_DIR}/auto"
BLACKLIST_FILE="${BLACKLISTS_DIR}/blacklist.txt"
BLACKLIST_WITH_COMMENTS_FILE="${BLACKLISTS_DIR}/blacklist_with_comments.txt"
BLACKLIST_V4_FILE="${BLACKLISTS_DIR}/blacklist-v4.txt"
BLACKLIST_V6_FILE="${BLACKLISTS_DIR}/blacklist-v6.txt"
BLACKLIST_VK_FILE="${BLACKLISTS_DIR}/blacklist-vk.txt"
BLACKLIST_VK_V4_FILE="${BLACKLISTS_DIR}/blacklist-vk-v4.txt"
BLACKLIST_VK_V6_FILE="${BLACKLISTS_DIR}/blacklist-vk-v6.txt"
AUTO_ALL_ASN_FILE="${AUTO_DIR}/all-ru-asn.txt"
AUTO_ALL_V4_FILE="${AUTO_DIR}/all-ru-ipv4.txt"
AUTO_ALL_V6_FILE="${AUTO_DIR}/all-ru-ipv6.txt"
AUTO_RIPE_V4_FILE="${AUTO_DIR}/ripe-ru-ipv4.txt"
AUTO_BLACK_ASS_FILE="${AUTO_DIR}/black_ass.txt"
NETWORK_LIST_FROM_AS="${SCRIPT_DIR}/network_list_from_as.py"
NETWORK_LIST_FROM_NETNAME="${SCRIPT_DIR}/network_list_from_netname.py"
RU_GOV_NETNAMES_FILE="${SCRIPT_DIR}/lists/ru-gov-netnames.txt"
BLACK_NAMES='uvd|umvd|fgup|grchc|roskomnad|federalnaya sluzhba|ufsb|zonatelecom|llc vk|vkontakte|ODNOKLASSNIKI|VKCOMPANY|mail.ru|mail-ru|mail_ru|VK-AS|M100'
WHITE_NAMES='ruvds'
#VK_NAME_PATTERN='ru-netbridge-(19911202|20061117)|ru-odnoklassniki-(20100830|20120307|20120626)|odnoklassniki-front'
#VK_NAME_PATTERN='ru-netbridge-(19911202|20061117)|odnoklassniki'
VK_NAME_PATTERN='ru-netbridge-(19911202|20061117)|odnoklassniki|vkcompany|vkontakte|llc vk'
VK_NAME_EXCLUDE_PATTERN='VK Cloud Solutions VK Hosting'
ensure_blacklist_base_dirs() {
mkdir -p "${BLACKLISTS_DIR}" "${AUTO_DIR}"
}
build_vk_name_blacklists() {
ensure_blacklist_base_dirs
tmp_vk_file="$(mktemp "${BLACKLISTS_DIR}/.blacklist-vk.XXXXXX")" || return 1
for source_file in "${AUTO_ALL_V4_FILE}" "${AUTO_ALL_V6_FILE}" "${AUTO_RIPE_V4_FILE}"; do
[ -f "${source_file}" ] || continue
awk -v pattern="${VK_NAME_PATTERN}" 'tolower($0) ~ pattern { print }' "${source_file}" \
| grep -viF "${VK_NAME_EXCLUDE_PATTERN}" \
| awk '{ print $1 }' >> "${tmp_vk_file}"
done
sort -u "${tmp_vk_file}" > "${BLACKLIST_VK_FILE}"
grep ':' "${BLACKLIST_VK_FILE}" | sort -u > "${BLACKLIST_VK_V6_FILE}" || true
grep -v ':' "${BLACKLIST_VK_FILE}" | sort -u > "${BLACKLIST_VK_V4_FILE}" || true
rm -f "${tmp_vk_file}"
}

View File

@@ -1,22 +1,7 @@
#!/bin/sh
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
# Input files (generated by blacklists_updater_txt.sh)
blacklist_file="${SCRIPT_DIR}/blacklists/blacklist.txt"
blacklist_v4_file="${SCRIPT_DIR}/blacklists/blacklist-v4.txt"
blacklist_v6_file="${SCRIPT_DIR}/blacklists/blacklist-v6.txt"
# Source files for name-based VK filtering
auto_all_v4_file="${SCRIPT_DIR}/auto/all-ru-ipv4.txt"
auto_all_v6_file="${SCRIPT_DIR}/auto/all-ru-ipv6.txt"
auto_ripe_v4_file="${SCRIPT_DIR}/auto/ripe-ru-ipv4.txt"
vk_name_pattern='vk[[:space:]-]*cloud|vkcompany|vkontakte'
# Additional VK-only text blacklists
blacklist_vk_file="${SCRIPT_DIR}/blacklists/blacklist-vk.txt"
blacklist_vk_v4_file="${SCRIPT_DIR}/blacklists/blacklist-vk-v4.txt"
blacklist_vk_v6_file="${SCRIPT_DIR}/blacklists/blacklist-vk-v6.txt"
. "${SCRIPT_DIR}/blacklists_updater_common.subr"
# Output directory and files
iptables_output_dir="${SCRIPT_DIR}/blacklists_iptables"
@@ -26,18 +11,8 @@ iptables_vk_v4_output_file="${iptables_output_dir}/blacklist-vk-v4.ipset"
iptables_vk_v6_output_file="${iptables_output_dir}/blacklist-vk-v6.ipset"
# Create required directories if they don't exist
mkdir -p "${iptables_output_dir}" "${SCRIPT_DIR}/blacklists"
# Build additional VK-only blacklist from network names in auto/*.txt files
tmp_vk_file="$(mktemp "${SCRIPT_DIR}/blacklists/.blacklist-vk.XXXXXX")"
for source_file in "${auto_all_v4_file}" "${auto_all_v6_file}" "${auto_ripe_v4_file}"; do
[ -f "${source_file}" ] || continue
awk -v pattern="${vk_name_pattern}" 'tolower($0) ~ pattern { print $1 }' "${source_file}" >> "${tmp_vk_file}"
done
sort -u "${tmp_vk_file}" > "${blacklist_vk_file}"
grep ':' "${blacklist_vk_file}" | sort -u > "${blacklist_vk_v6_file}" || true
grep -v ':' "${blacklist_vk_file}" | sort -u > "${blacklist_vk_v4_file}" || true
rm -f "${tmp_vk_file}"
mkdir -p "${iptables_output_dir}" "${BLACKLISTS_DIR}"
build_vk_name_blacklists
# Function to generate ipset config from input file
generate_ipset_config() {
@@ -99,10 +74,10 @@ EOF
}
# Generate ipset configurations from blacklist files
generate_ipset_config "${blacklist_v4_file}" "${iptables_v4_output_file}" "(IPv4 only)" "blacklist-v4" "inet"
generate_ipset_config "${blacklist_v6_file}" "${iptables_v6_output_file}" "(IPv6 only)" "blacklist-v6" "inet6"
generate_ipset_config "${blacklist_vk_v4_file}" "${iptables_vk_v4_output_file}" "(VK names, IPv4 only)" "blacklist-vk-v4" "inet"
generate_ipset_config "${blacklist_vk_v6_file}" "${iptables_vk_v6_output_file}" "(VK names, IPv6 only)" "blacklist-vk-v6" "inet6"
generate_ipset_config "${BLACKLIST_V4_FILE}" "${iptables_v4_output_file}" "(IPv4 only)" "blacklist-v4" "inet"
generate_ipset_config "${BLACKLIST_V6_FILE}" "${iptables_v6_output_file}" "(IPv6 only)" "blacklist-v6" "inet6"
generate_ipset_config "${BLACKLIST_VK_V4_FILE}" "${iptables_vk_v4_output_file}" "(VK names, IPv4 only)" "blacklist-vk-v4" "inet"
generate_ipset_config "${BLACKLIST_VK_V6_FILE}" "${iptables_vk_v6_output_file}" "(VK names, IPv6 only)" "blacklist-vk-v6" "inet6"
echo ""
echo "VK outgoing block examples (iptables/ipset):"

View File

@@ -4,35 +4,16 @@
set -e
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
INPUT_FILE="$SCRIPT_DIR/blacklists/blacklist.txt"
. "${SCRIPT_DIR}/blacklists_updater_common.subr"
INPUT_FILE="${BLACKLIST_FILE}"
OUTPUT_DIR="$SCRIPT_DIR/blacklists_nftables"
# Source files for name-based VK filtering
AUTO_ALL_V4_FILE="$SCRIPT_DIR/auto/all-ru-ipv4.txt"
AUTO_ALL_V6_FILE="$SCRIPT_DIR/auto/all-ru-ipv6.txt"
AUTO_RIPE_V4_FILE="$SCRIPT_DIR/auto/ripe-ru-ipv4.txt"
VK_NAME_PATTERN='vk[[:space:]-]*cloud|vkcompany|vkontakte'
# Additional VK-only text blacklists
VK_INPUT_FILE="$SCRIPT_DIR/blacklists/blacklist-vk.txt"
VK_INPUT_V4_FILE="$SCRIPT_DIR/blacklists/blacklist-vk-v4.txt"
VK_INPUT_V6_FILE="$SCRIPT_DIR/blacklists/blacklist-vk-v6.txt"
# Create required directories if they don't exist
mkdir -p "$OUTPUT_DIR" "$SCRIPT_DIR/blacklists"
mkdir -p "$OUTPUT_DIR" "${BLACKLISTS_DIR}"
echo "Generating nftables blacklists..."
# Build additional VK-only blacklist from network names in auto/*.txt files
TMP_VK_FILE="$(mktemp "$SCRIPT_DIR/blacklists/.blacklist-vk.XXXXXX")"
for source_file in "$AUTO_ALL_V4_FILE" "$AUTO_ALL_V6_FILE" "$AUTO_RIPE_V4_FILE"; do
[[ -f "$source_file" ]] || continue
awk -v pattern="$VK_NAME_PATTERN" 'tolower($0) ~ pattern { print $1 }' "$source_file" >> "$TMP_VK_FILE"
done
sort -u "$TMP_VK_FILE" > "$VK_INPUT_FILE"
grep ':' "$VK_INPUT_FILE" | sort -u > "$VK_INPUT_V6_FILE" || true
grep -v ':' "$VK_INPUT_FILE" | sort -u > "$VK_INPUT_V4_FILE" || true
rm -f "$TMP_VK_FILE"
build_vk_name_blacklists
# Generate mixed IPv4/IPv6 blacklist (recommended single-file load)
python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
@@ -53,15 +34,15 @@ python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
"$TMP_V6_FILE" \
"$OUTPUT_DIR/blacklist-v6.nft"
# Generate VK-only blacklists (network names: VK Cloud / VKCOMPANY / VKONTAKTE)
# Generate VK-only blacklists from the narrowed MAX/VK service name filter
python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
"$VK_INPUT_FILE" \
"${BLACKLIST_VK_FILE}" \
"$OUTPUT_DIR/blacklist-vk.nft"
python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
"$VK_INPUT_V4_FILE" \
"${BLACKLIST_VK_V4_FILE}" \
"$OUTPUT_DIR/blacklist-vk-v4.nft"
python3 "$SCRIPT_DIR/generate_nft_blacklist.py" \
"$VK_INPUT_V6_FILE" \
"${BLACKLIST_VK_V6_FILE}" \
"$OUTPUT_DIR/blacklist-vk-v6.nft"
# Clean up temp files

View File

@@ -1,18 +1,16 @@
#!/bin/sh
# Input files (generated by blacklists_updater_txt.sh)
blacklist_file="blacklists/blacklist.txt"
blacklist_v4_file="blacklists/blacklist-v4.txt"
blacklist_v6_file="blacklists/blacklist-v6.txt"
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
. "${SCRIPT_DIR}/blacklists_updater_common.subr"
# Output directory and files
nginx_output_dir="blacklists_nginx"
nginx_output_dir="${SCRIPT_DIR}/blacklists_nginx"
nginx_output_file="${nginx_output_dir}/blacklist.conf"
nginx_v4_output_file="${nginx_output_dir}/blacklist-v4.conf"
nginx_v6_output_file="${nginx_output_dir}/blacklist-v6.conf"
# Create required directories if they don't exist
mkdir -p "${nginx_output_dir}" "blacklists"
mkdir -p "${nginx_output_dir}" "${BLACKLISTS_DIR}"
# Function to generate nginx config from input file
generate_nginx_config() {
@@ -47,6 +45,6 @@ EOF
}
# Generate nginx configurations from blacklist files
generate_nginx_config "${blacklist_file}" "${nginx_output_file}" "(mixed IPv4/IPv6)"
generate_nginx_config "${blacklist_v4_file}" "${nginx_v4_output_file}" "(IPv4 only)"
generate_nginx_config "${blacklist_v6_file}" "${nginx_v6_output_file}" "(IPv6 only)"
generate_nginx_config "${BLACKLIST_FILE}" "${nginx_output_file}" "(mixed IPv4/IPv6)"
generate_nginx_config "${BLACKLIST_V4_FILE}" "${nginx_v4_output_file}" "(IPv4 only)"
generate_nginx_config "${BLACKLIST_V6_FILE}" "${nginx_v6_output_file}" "(IPv6 only)"

View File

@@ -3,38 +3,18 @@
set -e
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
# Source files for name-based VK filtering
AUTO_ALL_V4_FILE="${SCRIPT_DIR}/auto/all-ru-ipv4.txt"
AUTO_ALL_V6_FILE="${SCRIPT_DIR}/auto/all-ru-ipv6.txt"
AUTO_RIPE_V4_FILE="${SCRIPT_DIR}/auto/ripe-ru-ipv4.txt"
VK_NAME_PATTERN='vk[[:space:]-]*cloud|vkcompany|vkontakte'
# Additional VK-only text blacklists
VK_INPUT_FILE="${SCRIPT_DIR}/blacklists/blacklist-vk.txt"
VK_INPUT_V4_FILE="${SCRIPT_DIR}/blacklists/blacklist-vk-v4.txt"
VK_INPUT_V6_FILE="${SCRIPT_DIR}/blacklists/blacklist-vk-v6.txt"
. "${SCRIPT_DIR}/blacklists_updater_common.subr"
# Output directory and files
ROUTES_OUTPUT_DIR="${SCRIPT_DIR}/blacklists_route"
ROUTES_V4_FILE="${ROUTES_OUTPUT_DIR}/blacklist-vk-v4.routes"
ROUTES_V6_FILE="${ROUTES_OUTPUT_DIR}/blacklist-vk-v6.routes"
mkdir -p "${ROUTES_OUTPUT_DIR}" "${SCRIPT_DIR}/blacklists"
mkdir -p "${ROUTES_OUTPUT_DIR}" "${BLACKLISTS_DIR}"
echo "Generating VK route blacklists..."
# Build additional VK-only blacklist from network names in auto/*.txt files
TMP_VK_FILE="$(mktemp "${SCRIPT_DIR}/blacklists/.blacklist-vk.XXXXXX")"
for source_file in "${AUTO_ALL_V4_FILE}" "${AUTO_ALL_V6_FILE}" "${AUTO_RIPE_V4_FILE}"; do
[ -f "${source_file}" ] || continue
awk -v pattern="${VK_NAME_PATTERN}" 'tolower($0) ~ pattern { print $1 }' "${source_file}" >> "${TMP_VK_FILE}"
done
sort -u "${TMP_VK_FILE}" > "${VK_INPUT_FILE}"
grep ':' "${VK_INPUT_FILE}" | sort -u > "${VK_INPUT_V6_FILE}" || true
grep -v ':' "${VK_INPUT_FILE}" | sort -u > "${VK_INPUT_V4_FILE}" || true
rm -f "${TMP_VK_FILE}"
build_vk_name_blacklists
# Generate IPv4 routes file (route VK prefixes to loopback via 127.0.0.1)
cat > "${ROUTES_V4_FILE}" << EOF
@@ -51,7 +31,7 @@ EOF
while IFS= read -r network; do
[ -n "${network}" ] || continue
printf 'ip route replace %s via 127.0.0.1 dev lo onlink\n' "${network}" >> "${ROUTES_V4_FILE}"
done < "${VK_INPUT_V4_FILE}"
done < "${BLACKLIST_VK_V4_FILE}"
# Generate IPv6 routes file (route VK prefixes to loopback via ::1)
cat > "${ROUTES_V6_FILE}" << EOF
@@ -68,10 +48,10 @@ EOF
while IFS= read -r network; do
[ -n "${network}" ] || continue
printf 'ip -6 route replace %s via ::1 dev lo\n' "${network}" >> "${ROUTES_V6_FILE}"
done < "${VK_INPUT_V6_FILE}"
done < "${BLACKLIST_VK_V6_FILE}"
echo "✓ Generated: ${ROUTES_V4_FILE} (entries: $(wc -l < "${VK_INPUT_V4_FILE}" | tr -d ' '))"
echo "✓ Generated: ${ROUTES_V6_FILE} (entries: $(wc -l < "${VK_INPUT_V6_FILE}" | tr -d ' '))"
echo "✓ Generated: ${ROUTES_V4_FILE} (entries: $(wc -l < "${BLACKLIST_VK_V4_FILE}" | tr -d ' '))"
echo "✓ Generated: ${ROUTES_V6_FILE} (entries: $(wc -l < "${BLACKLIST_VK_V6_FILE}" | tr -d ' '))"
echo ""
echo "Examples:"
echo " sudo sh ${ROUTES_V4_FILE}"

View File

@@ -1,32 +1,24 @@
#!/bin/sh
outfile_wo_comments="blacklists/blacklist.txt"
outfile_w_comments="blacklists/blacklist_with_comments.txt"
blacklist_v4_file="blacklists/blacklist-v4.txt"
blacklist_v6_file="blacklists/blacklist-v6.txt"
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
. "${SCRIPT_DIR}/blacklists_updater_common.subr"
auto_black_ass="auto/black_ass.txt"
ensure_blacklist_base_dirs
black_names="uvd|umvd|fgup|grchc|roskomnad|federalnaya sluzhba|ufsb|zonatelecom|llc vk|vkontakte|ODNOKLASSNIKI|VKCOMPANY|mail.ru|mail-ru|mail_ru|VK-AS|M100"
# M100 - mail.ru
white_names="ruvds"
mkdir -p blacklists auto
grep -iE "${black_names}" auto/all-ru-asn.txt | grep -viE "${white_names}" | awk '{ print "# AS-Name: " $0 "\n" $1}' > ${auto_black_ass}
./network_list_from_as.py ${auto_black_ass} > ${outfile_w_comments}
./network_list_from_netname.py lists/ru-gov-netnames.txt >> ${outfile_w_comments}
grep -iE "${black_names}" auto/all-ru-ipv4.txt | grep -viE "${white_names}" | awk '{ print "# NET-Name: " $0 "\n" $1}' >> ${outfile_w_comments}
grep -iE "${black_names}" auto/ripe-ru-ipv4.txt | grep -viE "${white_names}" | awk '{ print "# NET-Name: " $0 "\n" $1}' >> ${outfile_w_comments}
grep -iE "${BLACK_NAMES}" "${AUTO_ALL_ASN_FILE}" | grep -viE "${WHITE_NAMES}" | awk '{ print "# AS-Name: " $0 "\n" $1}' > "${AUTO_BLACK_ASS_FILE}"
"${NETWORK_LIST_FROM_AS}" "${AUTO_BLACK_ASS_FILE}" > "${BLACKLIST_WITH_COMMENTS_FILE}"
"${NETWORK_LIST_FROM_NETNAME}" "${RU_GOV_NETNAMES_FILE}" >> "${BLACKLIST_WITH_COMMENTS_FILE}"
grep -iE "${BLACK_NAMES}" "${AUTO_ALL_V4_FILE}" | grep -viE "${WHITE_NAMES}" | awk '{ print "# NET-Name: " $0 "\n" $1}' >> "${BLACKLIST_WITH_COMMENTS_FILE}"
grep -iE "${BLACK_NAMES}" "${AUTO_RIPE_V4_FILE}" | grep -viE "${WHITE_NAMES}" | awk '{ print "# NET-Name: " $0 "\n" $1}' >> "${BLACKLIST_WITH_COMMENTS_FILE}"
# Remove comments by sed to avoid flooding WHOIS servers
grep -v "#" ${outfile_w_comments} | sort | uniq > ${outfile_wo_comments}
grep -v "#" "${BLACKLIST_WITH_COMMENTS_FILE}" | sort | uniq > "${BLACKLIST_FILE}"
# Split blacklist into IPv4 and IPv6
grep ':' "${outfile_wo_comments}" | sort | uniq > "${blacklist_v6_file}"
grep -v ':' "${outfile_wo_comments}" | sort | uniq > "${blacklist_v4_file}"
grep ':' "${BLACKLIST_FILE}" | sort | uniq > "${BLACKLIST_V6_FILE}"
grep -v ':' "${BLACKLIST_FILE}" | sort | uniq > "${BLACKLIST_V4_FILE}"
echo "✓ Generated blacklist files"
echo " Mixed (IPv4/IPv6): ${outfile_wo_comments} ($(wc -l < "${outfile_wo_comments}" | tr -d ' ') entries)"
echo " IPv4 only: ${blacklist_v4_file} ($(wc -l < "${blacklist_v4_file}" | tr -d ' ') entries)"
echo " IPv6 only: ${blacklist_v6_file} ($(wc -l < "${blacklist_v6_file}" | tr -d ' ') entries)"
echo " Mixed (IPv4/IPv6): ${BLACKLIST_FILE} ($(wc -l < "${BLACKLIST_FILE}" | tr -d ' ') entries)"
echo " IPv4 only: ${BLACKLIST_V4_FILE} ($(wc -l < "${BLACKLIST_V4_FILE}" | tr -d ' ') entries)"
echo " IPv6 only: ${BLACKLIST_V6_FILE} ($(wc -l < "${BLACKLIST_V6_FILE}" | tr -d ' ') entries)"