PHP Classes

File: vault/ipv6.dat

Recommend this page to a friend!
  Classes of Caleb   CIDRAM   vault/ipv6.dat   Download  
File: vault/ipv6.dat
Role: Auxiliary data
Content type: text/plain
Description: Auxiliary data
Class: CIDRAM
Check if an IP address is a bad source of traffic
Author: By
Last change: Signatures update.
Signatures update.
Signatures update.
Signatures update.
Date: 4 years ago
Size: 161,777 bytes
 

Contents

Class file image Download
# IPv6 signatures file (unwanted cloud services and non-human endpoints). # Canonical link to the online version of this file: https://github.com/CIDRAM/CIDRAM/blob/master/vault/ipv6.dat # Version: 2019.260.254 # Last modified: 2019.09.18 # --- # ASN 46844 ("Sharktech"). # Source of forum spam and malware. # %Listed, Google Malware Dashboard: 0.29%. # Stop Forum Spam (SFS) listings: 4,196. # Updated: 2019.04.09 / Checked: 2019.08.22 2a00:c2c0:ffff::/48 Deny Cloud Origin: NL 2a0c:c181::/32 Deny Cloud Origin: RU 2610:150::/32 Deny Cloud Origin: US Tag: Sharktech # ASN 35916 ("MULTACOM CORPORATION"). # %Listed, Google Malware Dashboard: 1.49%. # Stop Forum Spam (SFS) listings: 1,344. # Updated: 2019.03.13 / Checked: 2019.07.18 2a09:dc04::/30 Deny Cloud Origin: NL 2a04:9d00::/29 Deny Cloud 2a07:dec0::/30 Deny Cloud 2a07:f000::/29 Deny Cloud 2a0c:980::/29 Deny Cloud 2a0c:16c0::/29 Deny Cloud 2a0c:7980::/29 Deny Cloud 2a0c:81c0::/29 Deny Cloud 2a0c:b840::/29 Deny Cloud 2a0d:5980::/29 Deny Cloud 2a0d:6900::/29 Deny Cloud 2a0d:9480::/29 Deny Cloud 2a0d:ab00::/29 Deny Cloud 2a0d:af00::/29 Deny Cloud 2a0d:d480::/29 Deny Cloud Origin: RU 2607:9a00::/32 Deny Cloud 2607:f130::/32 Deny Cloud Origin: US Tag: Multacom Corp # ASN 58879 ("ShangHai AnchNet Tec"). # %Listed, Google Malware Dashboard: 2.10%. # Stop Forum Spam (SFS) listings: 37. # Updated: 2019.04.07 / Checked: 2019.08.22 2404:de80::/39 Deny Cloud Origin: HK Tag: ShangHai AnchNet Tec # ASN 7497 ("Computer Network Information Center"). # %Listed, Google Malware Dashboard: 0.43%. # Stop Forum Spam (SFS) listings: 7. # Updated: 2018.03.28 / Checked: 2019.06.20 2001:cc0::/32 Deny Cloud 2400:dd00::/28 Deny Cloud 2401:de00::/32 Deny Cloud Origin: CN Tag: CST-NET # ASN 46573 ("Global Frag Networks"). # %Listed, Google Malware Dashboard: 1.55%. # Stop Forum Spam (SFS) listings: 162. # Updated: 2019.02.09 / Checked: 2019.06.10 2604:d180::/32 Deny Cloud Origin: US Tag: Global Frag Networks # ASN 54600 ("PEG TECH INC"). # %Listed, Google Malware Dashboard: 0.91%. # Stop Forum Spam (SFS) listings: 3,056. # Updated: 2019.04.23 / Checked: 2019.09.10 2605:7280::/40 Deny Cloud Origin: US Tag: PEG TECH INC # ASNs 133731, 134176 ("Xinyuan Interconnect (HK) Limited", formerly "Royal Network Technology", and "Rainbow network # limited"). Ranges change frequently / Should update often. # %Listed, Google Malware Dashboard: 2.79% (AS133731). # Stop Forum Spam (SFS) listings: 74 (AS133731), 1 (AS134176). # Updated: 2019.05.21 2403:3a40::/32 Deny Cloud 2403:3b40::/32 Deny Cloud 2403:3bc0::/32 Deny Cloud 2404:3bc0::/32 Deny Cloud 2404:3c40::/32 Deny Cloud Origin: CN 2a0c:f480::/29 Deny Cloud Origin: CZ 2a0b:4340:80::/47 Deny Cloud 2a0d:2480::/29 Deny Cloud Origin: DE 2404:8c80::/32 Deny Cloud Origin: HK 2404:b8c0::/32 Deny Cloud Origin: JP Tag: Royal Rainbow # ASN 26347 ("New Dream Network, LLC"). # %Listed, Google Malware Dashboard: 0.29%. # Stop Forum Spam (SFS) listings: 175. # Updated: 2019.01.16 / Checked: 2019.05.25 2607:f298:4::/47 Deny Cloud 2607:f298:6::/48 Deny Cloud 2607:f298:a::/47 Deny Cloud 2607:f298:6050::/44 Deny Cloud Origin: US Tag: New Dream Network # ASN 33182 ("HostDime.com, Inc"). # %Listed, Google Malware Dashboard: 0.26%. # Stop Forum Spam (SFS) listings: 645. # Updated: 2019.08.22 2804:9c4::/32 Deny Cloud Origin: BR 2803:c40::/32 Deny Cloud Origin: CO 2a04:840::/44 Deny Cloud Origin: GB 2404:a700::/32 Deny Cloud Origin: IN 2806:213::/32 Deny Cloud Origin: MX 2605:2080::/33 Deny Cloud 2607:fcd8::/43 Deny Cloud 2607:fcd8:20::/44 Deny Cloud Origin: US Tag: HostDime.com, Inc # ASN 47583 ("Hostinger International Limited"). # %Listed, Google Malware Dashboard: 0.38%. # Stop Forum Spam (SFS) listings: 217. # Updated: 2018.09.06 / Checked: 2019.07.07 2a02:4780::/46 Deny Cloud 2a02:4780:4::/47 Deny Cloud 2a02:4780:8::/47 Deny Cloud Origin: LT Tag: Hostinger Int # ASN 12824 ("home.pl"). # %Listed, Google Malware Dashboard: 0.45%. # Stop Forum Spam (SFS) listings: 45. # Updated: 2019.01.06 / Checked: 2019.05.21 2a02:25a8::/29 Deny Cloud Origin: PL Tag: home.pl # ASN 25532 ("Masterhost"). # %Listed, Google Malware Dashboard: 0.15%. # Stop Forum Spam (SFS) listings: 2. # Updated: 2016.04.18 / Checked: 2019.09.06 2a00:15f8::/32 Deny Cloud Origin: RU Tag: Masterhost # ASN 26496 ("GoDaddy.com, LLC"). # %Listed, Google Malware Dashboard: 0.40%. # Stop Forum Spam (SFS) listings: 3,752. # Updated: 2019.08.11 2a00:1168::/32 Deny Cloud Origin: DE 2407:1c00::/32 Deny Cloud Origin: SG 2603:4::/44 Deny Cloud 2603:4:10::/45 Deny Cloud 2603:5:2100::/40 Deny Cloud 2603:5:2200::/40 Deny Cloud 2607:f208:209::/48 Deny Cloud 2607:f208:305::/48 Deny Cloud 2607:f208:400::/42 Deny Cloud 2607:f208:440::/43 Deny Cloud 2607:f208:500::/44 Deny Cloud 2607:f208:530::/44 Deny Cloud 2607:f208:560::/44 Deny Cloud 2607:f208:580::/44 Deny Cloud 2607:f208:1020::/44 Deny Cloud 2607:f208:1160::/44 Deny Cloud 2607:f208:4000::/40 Deny Cloud 2607:f208:4f02::/48 Deny Cloud 2607:f208:5000::/40 Deny Cloud 2607:f208:5f01::/48 Deny Cloud 2607:f208:5f02::/48 Deny Cloud 2607:f208:a010::/48 Deny Cloud 2607:f208:a110::/48 Deny Cloud 2607:f208:af00::/47 Deny Cloud Origin: US Tag: GoDaddy.com, LLC # ASN 8560 ("1&1 Internet SE"). # %Listed, Google Malware Dashboard: 0.15%. # Stop Forum Spam (SFS) listings: 3,800. # Updated: 2018.04.10 / Checked: 2019.07.06 2001:8d8::/32 Deny Cloud 2a0d:7f00::/29 Deny Cloud Origin: DE 2001:ba0::/32 Deny Cloud Origin: ES 2a00:da00::/32 Deny Cloud Origin: GB 2607:f1c0::/32 Deny Cloud Origin: US Tag: 1&1 Internet SE # ASNs 16276, 35540 ("OVH Systems"). # Caught attempting to hack honeypots. # %Listed, Google Malware Dashboard: 0.22% (AS16276). # Stop Forum Spam (SFS) listings: 252,644 (AS16276), 10 (AS35540). # Updated: 2017.05.06 / Checked: 2019.07.18 2607:5300::/32 Deny Cloud Origin: CA 2001:41d0::/32 Deny Cloud Origin: FR 2402:1f00::/32 Deny Cloud Origin: HK 2604:2dc0::/32 Deny Cloud Origin: US Tag: OVH Systems # ASN 27823 ("Dattatec.com"). # %Listed, Google Malware Dashboard: 0.16%. # Stop Forum Spam (SFS) listings: 115. # Updated: 2016.04.18 / Checked: 2019.09.15 2800:6c0::/32 Deny Cloud Origin: AR Tag: Dattatec.com # ASNs 7203, 16265, 19148, 28753, 30633, 38930, 59253, 60626, 60781, 133752, 136988, 205544, 394380, 395954, 396190, # 396362 ("Leaseweb Network"). Updated: 2019.06.20 2a03:f85:2::/48 Deny Cloud Origin: AT 2401:d040::/32 Deny Cloud Origin: AU 2602:fe6a:f::/48 Deny Cloud Origin: CA 2a06:1180::/29 Deny Cloud Origin: CY 2a00:c98::/32 Deny Cloud 2a01:198:ff00::/40 Deny Cloud 2a03:ce40::/47 Deny Cloud Origin: DE 2a03:7480::/44 Deny Cloud Origin: ES 2a02:2ca0:3a::/48 Deny Cloud Origin: EU 2a01:9260::/32 Deny Cloud 2a0d:3000::/29 Deny Cloud Origin: GB 2a07:3b80:3::/48 Deny Cloud Origin: GI 2402:9e80:2402::/48 Deny Cloud Origin: HK 2001:1af8::/32 Deny Cloud 2402:20c0:1::/48 Deny Cloud 2a00:ec8::/32 Deny Cloud 2a00:5020::/48 Deny Cloud 2a00:9d20:1::/48 Deny Cloud 2a00:9d20:2::/47 Deny Cloud 2a00:9d20:4::/48 Deny Cloud 2a00:9d20:7::/48 Deny Cloud 2a00:9d20:31::/48 Deny Cloud 2a00:9d20:34::/48 Deny Cloud 2a00:9d20:49::/48 Deny Cloud 2a00:9d20:53::/48 Deny Cloud 2a00:9d20:65::/48 Deny Cloud 2a00:9d20:101::/48 Deny Cloud 2a00:9d20:102::/48 Deny Cloud 2a00:9d20:5353::/48 Deny Cloud 2a00:c6c0:1::/48 Deny Cloud 2a00:fc80::/48 Deny Cloud 2a01:b2e0::/29 Deny Cloud 2a02:bc0::/32 Deny Cloud 2a02:cc8::/32 Deny Cloud 2a02:2870:8000::/33 Deny Cloud 2a02:2968::/29 Deny Cloud 2a02:40c0::/36 Deny Cloud 2a03:38a0::/32 Deny Cloud 2a03:e280::/32 Deny Cloud 2a05:3f40::/30 Deny Cloud 2a06:ab00::/32 Deny Cloud 2a06:b5c0::/29 Deny Cloud 2a07:95c0::/29 Deny Cloud 2a0a:1400::/29 Deny Cloud 2a0a:2340::/29 Deny Cloud 2a0a:2d00::/29 Deny Cloud 2a0a:3200::/29 Deny Cloud 2a0c:9e40:1::/48 Deny Cloud 2a0c:9e40:2::/48 Deny Cloud 2a0d:3bc0::/29 Deny Cloud 2a0e:1a80::/29 Deny Cloud Origin: NL 2a06:cd40:300::/48 Deny Cloud Origin: RO 2a04:88c0::/36 Deny Cloud 2a05:b300::/29 Deny Cloud 2a06:a5c0::/29 Deny Cloud 2a07:a300::/29 Deny Cloud Origin: SC 2001:df1:800::/47 Deny Cloud 2400:9780::/48 Deny Cloud 2402:5980::/40 Deny Cloud 2402:a7c0::/31 Deny Cloud Origin: SG 2604:9a00::/32 Deny Cloud 2605:fe80::/32 Deny Cloud 2606:9880::/32 Deny Cloud 2607:f5b0::/32 Deny Cloud 2607:f5b2::/31 Deny Cloud 2607:f5b4::/32 Deny Cloud 2607:f5b5::/47 Deny Cloud 2607:f5b7::/32 Deny Cloud Origin: US Tag: Leaseweb # ASN 43146 ("Agava Ltd"). # %Listed, Google Malware Dashboard: 0.10%. # Stop Forum Spam (SFS) listings: 8. # Updated: 2019.03.01 / Checked: 2019.07.02 2a03:4900::/47 Deny Cloud 2a03:4900:2::/48 Deny Cloud 2a03:4900:5::/48 Deny Cloud 2a03:4900:6::/48 Deny Cloud 2a03:4900:a0::/47 Deny Cloud 2a03:4900:fffb::/48 Deny Cloud 2a03:4900:fffc::/47 Deny Cloud 2a03:4900:ffff::/48 Deny Cloud Origin: RU Tag: Agava Ltd # ASN 36351 ("SoftLayer Technologies"). # Careful when updating; Signatures reflect varying block reasons, split across multiple files. # %Listed, Google Malware Dashboard: 0.06%. # Stop Forum Spam (SFS) listings: 7,776. # SoftLayer cloud services, webhosting providers, etc. # This section all as "Run rules_softlayer.php". # Excludes: Anything citing "TEFINCOM", "Packet Flip", "VPN", "proxy", "Privat Kommunikation", "Secure Internet" (VPNs # and proxies; covered elsewhere). # ^(.*(TEFINCOM|Packet Flip|VPN|Proxy|Privat Kommunikation|Secure Internet).*)$ # Excludes: Anything citing "Telecom", "AT&T", "American Heart Association" (not cloud services; shouldn't be blocked). # ^(.*(Telecom|AT&T|American Heart Association).*)$ # Excludes: Anything citing "Starry" (not cloud services; blocked as generic via spammy ISPs). # ^(.*(Starry).*)$ # Excludes: Anything citing "Vonex" (clean; don't need to block). # ^(.*(Vonex).*)$ # Includes: Everything else. # Updated: 2019.04.23 / Checked: 2019.08.13 2402:2f80::/48 Run rules_softlayer.php 2403:1480:1000::/36 Run rules_softlayer.php 2403:5680::/48 Run rules_softlayer.php Origin: AU 2803:3240:1::/48 Run rules_softlayer.php Origin: BZ 2402:f740::/36 Run rules_softlayer.php Origin: CN 2a01:6f0:fffe::/48 Run rules_softlayer.php Origin: DE 2a04:f400:3000::/48 Run rules_softlayer.php Origin: EU 2a02:2498:3::/48 Run rules_softlayer.php Origin: GB 2402:9e80::/47 Run rules_softlayer.php 2403:a280:8000::/36 Run rules_softlayer.php Origin: HK 2001:df3:8800::/48 Run rules_softlayer.php 2001:df4:f000::/48 Run rules_softlayer.php 2001:df5:9000::/48 Run rules_softlayer.php Origin: IN 2a03:8180:1000::/38 Run rules_softlayer.php 2a03:8180:1400::/39 Run rules_softlayer.php 2a03:8180:1600::/40 Run rules_softlayer.php 2a03:8180:1800::/39 Run rules_softlayer.php 2a03:8180:1c00::/39 Run rules_softlayer.php 2a03:8180:1f00::/40 Run rules_softlayer.php Origin: NL 2401:c900:1000::/38 Run rules_softlayer.php 2401:c900:1400::/39 Run rules_softlayer.php 2401:c900:1600::/40 Run rules_softlayer.php 2401:c900:1800::/40 Run rules_softlayer.php 2401:c900:1f00::/40 Run rules_softlayer.php 2401:c900:2000::/39 Run rules_softlayer.php 2402:b180:1::/48 Run rules_softlayer.php Origin: SG 2402:e380::/48 Run rules_softlayer.php 2602:ff1c:1::/48 Run rules_softlayer.php 2602:ff84:e::/48 Run rules_softlayer.php 2602:ff84:13::/48 Run rules_softlayer.php 2606:2e00:8004::/47 Run rules_softlayer.php 2606:2e00:8006::/48 Run rules_softlayer.php 2606:2e00:8008::/45 Run rules_softlayer.php 2606:2e00:8010::/45 Run rules_softlayer.php 2606:2e00:8018::/48 Run rules_softlayer.php 2606:2e00:8020::/64 Run rules_softlayer.php 2606:2e00:8021::/64 Run rules_softlayer.php 2606:2e00:8022::/64 Run rules_softlayer.php 2606:2e00:8023::/64 Run rules_softlayer.php 2606:2e00:8024::/48 Run rules_softlayer.php 2607:6980:e000::/44 Run rules_softlayer.php 2607:f0d0::/32 Run rules_softlayer.php 2620:11b:3002::/48 Run rules_softlayer.php 2620:121:5000::/47 Run rules_softlayer.php 2620:121:5002::/48 Run rules_softlayer.php Origin: US 2803:2f40:ffff::/48 Run rules_softlayer.php Origin: UY Tag: SoftLayer # ASN 42244 ("Hosting Operator eServer.ru Ltd"). # Stop Forum Spam (SFS) listings: 2. # Updated: 2018.08.25 / Checked: 2019.09.01 2a0a:2540::/29 Deny Cloud Origin: RU 2a04:b540:1000::/36 Deny Cloud 2a04:b540:2000::/36 Deny Cloud Origin: SK Tag: eServer.ru # ASN 42244 ("Hosting Operator eServer.ru Ltd"). # Stop Forum Spam (SFS) listings: 1. # Updated: 2019.03.19 / Checked: 2019.08.01 2a0a:2540::/29 Deny Cloud Origin: RU 2a04:b540:1000::/36 Deny Cloud 2a04:b540:2000::/36 Deny Cloud Origin: SK Tag: eServer.ru # ASNs 6870, 12722 ("RECONN. Operator svyazy Ltd"). # %Listed, Google Malware Dashboard: 0.27% (AS12722). # Stop Forum Spam (SFS) listings: 1,560 (AS6870), 131 (AS12722). # Updated: 2019.02.28 / Checked: 2019.06.28 2a02:c6c0::/32 Deny Cloud Origin: GB 2001:67c:2824::/48 Deny Cloud 2a00:1f70::/32 Deny Cloud 2a05:4800::/29 Deny Cloud Origin: RU Tag: svyazy # ASN 35415 ("Webzilla B.V"). # %Listed, Google Malware Dashboard: 0.19%. # Stop Forum Spam (SFS) listings: 140. # Updated: 2018.08.22 / Checked: 2019.06.28 2a00:1178::/32 Deny Cloud Origin: NL 2a06:7740::/48 Deny Cloud 2a06:78c0::/48 Deny Cloud Origin: RU Tag: Webzilla B.V # ASN 53225 ("IPGLOBE DATACENTER"). # Updated: 2016.05.15 / Checked: 2019.05.06 2804:644::/32 Deny Cloud Origin: BR Tag: IPGLOBE DATACENTER # ASNs 28271, 52550 ("DataCorpore Servios e Representaes"). # %Listed, Google Malware Dashboard: 1.40% (AS28271). # Stop Forum Spam (SFS) listings: 71 (AS28271). # Updated: 2018.09.16 / Checked: 2019.07.24 2804:4c4::/32 Deny Cloud 2804:cc0::/32 Deny Cloud Origin: BR Tag: DataCorpore Servios # ASN 53850 ("GorillaServers, Inc"). # %Listed, Google Malware Dashboard: 1.35%. # Stop Forum Spam (SFS) listings: 20,603. # Updated: 2016.09.15 / Checked: 2019.08.27 2606:c700::/32 Deny Cloud Origin: US Tag: GorillaServers, Inc # Announcing as: "Data Center", "Data Centre" (w/ + w/o space). # Various ASNs; Sourced from HE. # Updated: 2019.08.01 2a03:3180:f::/48 Deny Cloud Origin: AT 2400:9c00::/32 Deny Cloud 2404:3d00:400::/40 Deny Cloud Origin: AU 2a02:1760::/32 Deny Cloud 2a04:6480::/29 Deny Cloud Origin: BE 2804:160::/32 Deny Cloud 2804:4c0:ffff:fd70::/64 Deny Cloud 2804:6e8::/32 Deny Cloud 2804:888::/32 Deny Cloud 2804:938::/32 Deny Cloud 2804:1208::/32 Deny Cloud 2804:122c::/32 Deny Cloud 2804:1d40::/32 Deny Cloud 2804:2460::/32 Deny Cloud 2804:3cb8::/32 Deny Cloud 2804:3fe4::/32 Deny Cloud 2804:4bbc::/32 Deny Cloud 2804:4c30::/32 Deny Cloud Origin: BR 2607:8880::/32 Deny Cloud Origin: CA 2001:67c:33c::/48 Deny Cloud 2a00:7580:10::/48 Deny Cloud Origin: CH 2801:190::/44 Deny Cloud Origin: CO 2a04:cac3::/32 Deny Cloud 2a06:9500:1001::/48 Deny Cloud 2a06:9500:1002::/47 Deny Cloud 2a06:9500:1004::/48 Deny Cloud 2a0b:3180::/29 Deny Cloud 2a0b:76c0::/29 Deny Cloud Origin: DE 2a01:b5c0::/32 Deny Cloud 2a03:7480::/43 Deny Cloud Origin: ES 2a00:f5c0::/32 Deny Cloud 2a04:d500::/32 Deny Cloud Origin: FI 2a03:ad40:120::/48 Deny Cloud 2a03:ad40:130::/48 Deny Cloud 2a03:ad40:140::/48 Deny Cloud 2a03:ad40:420::/48 Deny Cloud 2a03:ad40:430::/48 Deny Cloud Origin: FR 2001:920:184b::/48 Deny Cloud 2a04:a180::/32 Deny Cloud 2a05:dfc7:31::/48 Deny Cloud Origin: GB 2401:9f00::/32 Deny Cloud 2407:7200::/32 Deny Cloud Origin: HK 2a05:9580::/29 Deny Cloud Origin: HU 2401:8800::/40 Deny Cloud 2401:8800:200::/40 Deny Cloud 2401:8800:400::/40 Deny Cloud 2401:8800:600::/40 Deny Cloud 2401:8800:800::/40 Deny Cloud 2401:8800:a00::/40 Deny Cloud 2401:8800:c00::/40 Deny Cloud 2401:8800:e00::/40 Deny Cloud 2404:7e80:1000::/36 Deny Cloud 2404:7e80:2000::/36 Deny Cloud 2404:7e80:4000::/36 Deny Cloud 2404:a700::/32 Deny Cloud Origin: IN 2402:7a00::/32 Deny Cloud 2406:fe00::/32 Deny Cloud Origin: JP 2a0b:1d40::/32 Deny Cloud Origin: LT 2001:b20::/32 Deny Cloud Origin: LU 2401:fd40::/32 Deny Cloud Origin: MN 2806:303::/32 Deny Cloud Origin: MX 2401:200::/32 Deny Cloud 2403:bc00:1::/48 Deny Cloud 2403:bc00:7fff::/48 Deny Cloud 2403:bc00:8000::/47 Deny Cloud 2404:6300::/32 Deny Cloud Origin: MY 2a01:8d20::/32 Deny Cloud 2a01:9b40::/32 Deny Cloud 2a07:6d40::/29 Deny Cloud 2a0b:a180::/29 Deny Cloud Origin: NL 2a04:6540::/32 Deny Cloud Origin: NO 2401:9800::/32 Deny Cloud 2404:d8::/32 Deny Cloud Origin: PH 2a0b:d280::/32 Deny Cloud Origin: PL 2405:2500:5::/48 Deny Cloud Origin: TH 2a03:401::/32 Deny Cloud Origin: TR 2a03:7720::/48 Deny Cloud Origin: UA 2602:fe3f::/36 Deny Cloud 2602:fec4::/36 Deny Cloud 2602:fff8::/36 Deny Cloud 2604:2ec0::/48 Deny Cloud 2604:2ec0:63::/48 Deny Cloud 2604:5800::/32 Deny Cloud 2605:2640::/46 Deny Cloud 2605:3380::/32 Deny Cloud 2605:4400::/32 Deny Cloud 2605:9700::/32 Deny Cloud 2605:bc00::/32 Deny Cloud 2606:db00::/32 Deny Cloud 2607:fd60:c938::/48 Deny Cloud Origin: US Tag: Data Center # ASN 42807 ("Aerotek Bilisim Taahhut Sanayi ve Ticaret Limited Sirketi"). # %Listed, Google Malware Dashboard: 0.17%. # Stop Forum Spam (SFS) listings: 2. # Updated: 2017.07.25 / Checked: 2019.09.18 2a03:adc0::/48 Deny Cloud Origin: TR Tag: AS42807 # ASNs 34360, 41079, 43758, 48760, 198414 ("H88 S.A"). # Webhosting company based in Poland. # Updated: 2019.04.12 / Checked: 2019.08.25 2001:67c:2e0::/48 Deny Cloud 2a01:4660::/32 Deny Cloud 2a02:1778::/32 Deny Cloud 2a07:1cc0::/29 Deny Cloud Origin: PL Tag: H88 S.A # ASN 46475 ("Limestone Networks, Inc"). # %Listed, Google Malware Dashboard: 0.22%. # Stop Forum Spam (SFS) listings: 19. # Updated: 2019.03.19 / Checked: 2019.08.01 2602:fe6b::/36 Deny Cloud 2607:ff68::/32 Deny Cloud Origin: US Tag: Limestone Networks # ASN 13301 ("United Gameserver GmbH"). # Caught trying to DDoS SFS. # %Listed, Google Malware Dashboard: 0.17%. # Updated: 2016.05.13 / Checked: 2019.05.21 2a01:480::/32 Deny Cloud Origin: DE Tag: United Gameserver # ASN 24961 ("myLoc managed IT AG"). # Caught trying to DDoS SFS. # %Listed, Google Malware Dashboard: 0.13%. # Stop Forum Spam (SFS) listings: 23,453. # Updated: 2019.08.05 2001:678:248::/48 Deny Cloud 2001:67c:192c::/48 Deny Cloud 2001:4ba0::/31 Deny Cloud 2a07:4400::/29 Deny Cloud 2a0c:2500::/29 Deny Cloud 2a0e:4680::/32 Deny Cloud Origin: DE Tag: myLoc # ASNs 57043, 395839 ("HOSTKEY B.V"). # %Listed, Google Malware Dashboard: 0.05% (AS57043). # Stop Forum Spam (SFS) listings: 1,605 (AS57043), 159 (AS395839). # Updated: 2018.04.24 / Checked: 2019.07.24 2a05:b40::/29 Deny Cloud Origin: NL 2602:ffc5:cb0::/44 Deny Cloud 2604:5940::/32 Deny Cloud Origin: US Tag: HOSTKEY B.V # "Rackspace Hosting". # Careful when updating; Section contains one "Run" parameter. # Known ASNs: 10532, 12200, 15395, 19994, 22720, 27357, 33070, 39921, 44716, 45187, 54636, 58683. # Updated: 2019.05.04 2a0b:440::/32 Deny Cloud Origin: DE 2a00:1a48::/32 Deny Cloud Origin: GB 2401:1800::/31 Deny Cloud Origin: HK 2001:4800::/31 Deny Cloud 2001:4802::/32 Deny Cloud 2620:103::/47 Deny Cloud 2620:103:2::/48 Deny Cloud Origin: US Tag: Rackspace Hosting # ASN 35017 ("Swiftway Communications, Inc"). # When updating, "Secure Internet LLC" mark as proxy. # %Listed, Google Malware Dashboard: 0.14%. # Stop Forum Spam (SFS) listings: 1,701. # Updated: 2018.09.10 / Checked: 2019.07.21 2a02:748::/32 Deny Cloud Origin: PL Tag: Swiftway # ASN 6939 ("Hurricane Electric, Inc"). # %Listed, Google Malware Dashboard: 0.13%. # Stop Forum Spam (SFS) listings: 1,017. # Updated: 2019.09.03 # Note when updating: There are some CIDRs in BGP that shouldn't be included here as signatures. # - "2001::/32" (provides "Teredo" tunneling). # - "2002::/16" (provides "6to4" bridging connectivity). # - "AeroSurf" (human endpoints). # - "BLOOMINGDALE HOME TELEPHONE COMPANY, INC" (human endpoints). # - "Glasford Telephone Company" (human endpoints). # - "maHost Internet Services Inc" (a hoster, but RoA is invalid, and records seem clean). # - "Internet Assigned Numbers Authority" (bogons and unassigned or pending assignment). # - Anything labeled as "Broadband" or "Telecom" (can reasonably assume as human endpoints). # I.e., "^200(?:1\:\:\/32|2\:\:\/16).*$|.*invalid.*|^.*(?:AeroSurf|Tele(?:phone|com)|maHost|Broadband|Wicked).*$|^.*Authority$" 2a09:2580::/29 Run rules_as6939.php Origin: BE 2a09:3b80::/29 Run rules_as6939.php Origin: BG 2a09:3880::/29 Run rules_as6939.php Origin: CZ 2a09:e500::/29 Run rules_as6939.php Origin: GB 2001:df2:7900::/48 Run rules_as6939.php 2400:7a00::/32 Run rules_as6939.php Origin: HK 2a03:b2c0::/29 Run rules_as6939.php Origin: LT 2a06:1c80::/32 Run rules_as6939.php Origin: NL 2a09:2780::/29 Run rules_as6939.php 2a09:3d80::/29 Run rules_as6939.php 2a09:f480::/29 Run rules_as6939.php 2a09:fa80::/29 Run rules_as6939.php Origin: TR 2001:470::/32 Run rules_as6939.php 2001:49e8::/32 Run rules_as6939.php 2600:7000::/24 Run rules_as6939.php 2602:feca::/36 Run rules_as6939.php 2602:ff06:725::/48 Run rules_as6939.php 2604:a100:100::/48 Run rules_as6939.php 2604:c800:ffff::/48 Run rules_as6939.php 2620:0:50c0::/48 Run rules_as6939.php 2620:64:6000::/48 Run rules_as6939.php 2620:138:c001::/48 Run rules_as6939.php 2620:138:c002::/48 Run rules_as6939.php Origin: US Tag: Hurricane Electric # ASNs 49532, 62904 ("Eonix Corporation"). # "SSL Private Proxy" mark as proxy (not cloud). # %Listed, Google Malware Dashboard: 6.41% (AS62904). # Stop Forum Spam (SFS) listings: 8,831 (AS49532), 13,583 (AS62904). # Updated: 2019.04.21 / Checked: 2019.06.30 2a07:440::/31 Deny Cloud Origin: DE 2602:ffc5:10e::/48 Deny Cloud 2607:ff28::/32 Deny Cloud Origin: US Tag: Eonix Corporation # ASNs 32748, 46440 ("Steadfast Networks"). # %Listed, Google Malware Dashboard: 0.41% (AS32748). # Stop Forum Spam (SFS) listings: 230 (AS32748). # Updated: 2018.10.05 / Checked: 2019.08.13 2602:ffbb::/36 Deny Cloud 2607:6980:13f0::/44 Deny Cloud 2607:f128::/32 Deny Cloud Origin: US Tag: Steadfast Networks # ASN 51088 ("A2B IP B.V"). # %Listed, Google Malware Dashboard: 0.34%. # Stop Forum Spam (SFS) listings: 2. # Updated: 2019.09.15 2001:67c:1064::/48 Deny Cloud 2001:1be8:3f03:713::/64 Deny Cloud 2a00:d640::/32 Deny Cloud 2a01:77e0::/32 Deny Cloud 2a02:1668::/32 Deny Cloud 2a02:2738::/32 Deny Cloud 2a0b:1c0::/29 Deny Cloud Origin: NL Tag: A2B IP B.V # ASNs 20860, 21130, 25108 ("IOMart"). # Careful when updating; Also contains some proxies and VPNs (should be marked differently). # %Listed, Google Malware Dashboard: 0.16% (AS20860). # Stop Forum Spam (SFS) listings: 9,787 (AS20860). # Updated: 2019.04.23 / Checked: 2019.09.10 2607:bd00:100::/48 Deny Cloud Origin: CA 2001:1b40::/32 Deny Cloud 2a00:42a0::/32 Deny Cloud 2a00:5d80::/32 Deny Cloud 2a00:e120::/32 Deny Cloud 2a01:61c0::/40 Deny Cloud 2a01:b040::/32 Deny Cloud 2a02:8c8::/32 Deny Cloud 2a02:2658::/32 Deny Cloud 2a03:b200::/29 Deny Cloud 2a03:ca80::/31 Deny Cloud 2a03:f2c0::/32 Deny Cloud 2a04:de40::/42 Deny Cloud 2a0b:4580::/32 Deny Cloud 2a0b:9400:1000::/48 Deny Cloud 2a0d:9780::/32 Deny Cloud Origin: GB 2403:cc00:3000::/36 Deny Cloud Origin: SG 2a0c:4380::/40 Deny Cloud Origin: US Tag: IOMart # ASN 35425 ("Bytemark Limited"). # Stop Forum Spam (SFS) listings: 8. # Updated: 2016.01.20 / Checked: 2019.05.04 2001:41c8::/29 Deny Cloud 2a03:9ba0::/40 Deny Cloud Origin: GB Tag: Bytemark Limited # ASNs 14061, 39690, 46652 ("DigitalOcean, LLC", "Digital Ocean SRL", "ServerStack, Inc"). # Ranges change frequently / Should update often. # Remove unassigned prior to aggregating (e.g., 10.0.0.0/8). # Mirai detected on this network. # %Listed, Google Malware Dashboard: 0.22% (AS14061). # Stop Forum Spam (SFS) listings: 63,578 (AS14061). # Updated: 2019.03.30 / Checked: 2019.06.03 2a03:b0c0::/46 Deny Cloud Origin: NL 2400:6180::/48 Deny Cloud 2400:6180:100::/40 Deny Cloud Origin: SG 2604:a880::/46 Deny Cloud 2604:a880:400::/48 Deny Cloud 2604:a880:800::/47 Deny Cloud 2604:a880:cad::/48 Deny Cloud Origin: US Tag: Digital Ocean, Inc # ASN 5577 ("Root SA"). # Stop Forum Spam (SFS) listings: 1,581. # Updated: 2019.08.13 2001:67c:15a3::/48 Deny Cloud Origin: CZ 2a0e:2b04::/30 Deny Cloud Origin: LT 2a01:608::/32 Deny Cloud Origin: LU Tag: Root SA # ASN 11878 ("Tzulo Inc"). # %Listed, Google Malware Dashboard: 2.99%. # Stop Forum Spam (SFS) listings: 596. # Updated: 2019.04.07 / Checked: 2019.08.22 2620:15:6000::/48 Deny Cloud Origin: CA 2607:2780::/48 Deny Cloud 2607:9000::/32 Deny Cloud Origin: US Tag: Tzulo Inc # ASN 17139 ("Corporate Colocation Inc"). # %Listed, Google Malware Dashboard: 9.29%. # Stop Forum Spam (SFS) listings: 1. # Updated: 2018.05.04 / Checked: 2019.08.05 2401:f500:1::/48 Deny Cloud Origin: NZ 2607:fca8::/32 Deny Cloud Origin: US Tag: Corporate Colocation # ASN 32613 ("iWeb Technologies Inc"). # %Listed, Google Malware Dashboard: 0.15%. # Updated: 2016.01.20 / Checked: 2019.05.21 2606:5d80::/32 Deny Cloud 2607:f748::/32 Deny Cloud Origin: CA Tag: iWeb # ASNs 22781, 29713 ("Reliable Hosting Services", "Strong Technology, LLC"). # Stop Forum Spam (SFS) listings: 74 (AS22781). # Updated: 2019.08.27 2a0e:be00::/29 Deny Cloud Origin: LT 2604:4100::/36 Deny Cloud 2607:fb50::/32 Deny Cloud Origin: US Tag: Reliable Hosting # ASN 33597 ("InfoRelay Online Systems, Inc"). # No recent reports or bad activity detected. Possible candidate for future removal. # Updated: 2017.09.09 / Checked: 2019.09.10 2a03:b280:1000::/48 Deny Cloud Origin: CZ 2607:b080::/32 Deny Cloud 2607:f108::/32 Deny Cloud Origin: US Tag: InfoRelay Online # ASN 29854 ("WestHost, Inc"). # Mark "Packet Flip", "Secure Internet LLC", "VPN Consumer Network" CIDRs as proxies. # %Listed, Google Malware Dashboard: 0.31%. # Stop Forum Spam (SFS) listings: 66. # Updated: 2018.05.04 / Checked: 2019.05.20 2a0c:4180::/29 Deny Cloud Origin: RU 2606:2e00::/33 Deny Cloud 2607:fc98::/32 Deny Cloud 2a05:3b00::/31 Deny Cloud Origin: US Tag: WestHost, Inc # ASN 32097 ("WholeSale Internet, Inc"). # %Listed, Google Malware Dashboard: 2.73%. # Stop Forum Spam (SFS) listings: 1,259. # Updated: 2018.10.10 / Checked: 2019.04.07 2001:4858::/32 Deny Cloud Origin: US Tag: WholeSale Internet # ASN 33387 ("DataShack, LC"). # %Listed, Google Malware Dashboard: 0.35%. # Stop Forum Spam (SFS) listings: 882. # Updated: 2019.04.07 / Checked: 2019.08.22 2a0a:1f43::/32 Deny Cloud Origin: NL 2604:4300::/32 Deny Cloud Origin: US Tag: DataShack, LC # ASN 62710 ("Rack911"). # %Listed, Google Malware Dashboard: 0.62%. # Updated: 2019.02.27 / Checked: 2019.06.23 2602:ffdb::/41 Deny Cloud 2602:ffdb:100::/41 Deny Cloud 2602:ffdb:980::/41 Deny Cloud 2602:ffdb:f80::/41 Deny Cloud Origin: US Tag: Rack911 # ASN 63930 ("READY SERVER PTE LTD"). # %Listed, Google Malware Dashboard: 0.74%. # Stop Forum Spam (SFS) listings: 7. # Updated: 2019.08.04 2400:fb80::/32 Deny Cloud 2401:e780::/32 Deny Cloud Origin: SG Tag: Ready Server # ASN 42655 ("ON-LINE Ltd"). # %Listed, Google Malware Dashboard: 0.09%. # Stop Forum Spam (SFS) listings: 1,755. # Updated: 2016.01.21 / Checked: 2019.08.01 2001:67c:2224::/48 Deny Cloud Origin: UA Tag: ON-LINE Ltd # "Internap Network Services Corporation". Various ASNs. Updated: 2019.07.13 2406:3800::/32 Deny Cloud Origin: AU 2a02:b50::/33 Deny Cloud 2a02:b50:8000::/34 Deny Cloud Origin: GB 2400:f800::/32 Deny Cloud Origin: HK 2404:1200::/32 Deny Cloud 2405:d800::/32 Deny Cloud Origin: SG 2001:48c8::/32 Deny Cloud 2600:c00::/31 Deny Cloud 2600:c02::/32 Deny Cloud 2600:c04::/31 Deny Cloud 2600:c06::/32 Deny Cloud 2600:c07::/48 Deny Cloud 2600:c08::/31 Deny Cloud 2600:c0b::/32 Deny Cloud 2600:c0c::/30 Deny Cloud 2600:c10::/30 Deny Cloud 2600:c14::/32 Deny Cloud Origin: US Tag: Internap Network # ASNs 23033, 32875 ("Wowrack.com"). # %Listed, Google Malware Dashboard: 0.67% (AS23033). # Stop Forum Spam (SFS) listings: 5,520 (AS23033), 40 (AS32875). # Updated: 2019.02.07 / Checked: 2019.06.03 2a07:9944:1d::/48 Deny Cloud Origin: EU 2001:df6:6c00::/48 Deny Cloud Origin: IN 2602:febc::/36 Deny Cloud 2602:ffca::/36 Deny Cloud 2604:c00::/32 Deny Cloud 2605:fe00::/36 Deny Cloud 2607:f8f8::/32 Deny Cloud Origin: US Tag: Wowrack.com # ASN 11051 ("Cyberverse, Inc"). # Updated: 2019.05.27 2602:fe6b:1000::/36 Deny Cloud 2607:f820::/32 Deny Cloud 2620:13e:500a::/48 Deny Cloud Origin: US Tag: Cyberverse, Inc # ASN 54489 ("CoreSpace, Inc"). # (Can omit anything under 44../8; clean). # %Listed, Google Malware Dashboard: 0.03%. # Stop Forum Spam (SFS) listings: 373. # Updated: 2016.01.22 / Checked: 2019.07.07 2604:7780::/32 Deny Cloud Origin: US Tag: CoreSpace, Inc # ASN 32421 ("Black Lotus Communications"). # %Listed, Google Malware Dashboard: 0.10%. # Updated: 2018.04.30 / Checked: 2019.06.01 2001:67c:2f08::/48 Deny Cloud Origin: GB Tag: Black Lotus # ASNs 8100, 29761 ("QuadraNet, Inc"). # Ranges change frequently / Should update often. # Mark "Packet Flip" and "VPNSECURE" CIDRs as proxies. # %Listed, Google Malware Dashboard: 0.29% (AS8100). # Stop Forum Spam (SFS) listings: 43,944 (AS8100). # Updated: 2019.03.13 / Checked: 2019.05.20 2a07:1c44:1820::/48 Deny Cloud Origin: AT 2a06:1280:ce03::/48 Deny Cloud Origin: BY 2a06:e800::/29 Deny Cloud Origin: DK 2a07:9944:1a::/48 Deny Cloud Origin: EU 2400:30c0:1::/48 Deny Cloud 2400:30c0:2::/48 Deny Cloud 2a05:b0c6:300::/40 Deny Cloud Origin: GB 2404:bd80:c1::/48 Deny Cloud Origin: MM 2a05:4240::/29 Deny Cloud Origin: TR 2a04:6ac0::/29 Deny Cloud Origin: UA 2602:ff75::/36 Deny Cloud 2602:ff96:2::/48 Deny Cloud 2602:ff96:4::/48 Deny Cloud 2602:ff96:11::/48 Deny Cloud 2602:ff96:14::/48 Deny Cloud 2602:fff6:1::/48 Deny Cloud 2602:fff6:2::/47 Deny Cloud 2602:fff6:6::/48 Deny Cloud 2604:bc0::/47 Deny Cloud 2605:8900:3000::/36 Deny Cloud 2607:fcd0::/32 Deny Cloud 2607:ff48::/32 Deny Cloud 2620:134:8004::/47 Deny Cloud Origin: US Tag: QuadraNet, Inc # ASN 11282 ("SERVERYOU INC"). # %Listed, Google Malware Dashboard: 0.40%. # Updated: 2017.03.31 / Checked: 2019.09.05 2001:470:e3::/48 Deny Cloud Origin: US Tag: SERVERYOU INC # ASN 25577 ("Connexions4London Ltd"). # Seems to now announce as "IDE Group" since last update, and listings aren't # as bad as they once were. Might be able to eventually delist them, hopefully. # Stop Forum Spam (SFS) listings: 57. # Updated: 2019.04.07 / Checked: 2019.08.22 2803:8700:10::/48 Deny Cloud Origin: CR 2001:67c:1c0::/48 Deny Cloud 2001:9d8::/32 Deny Cloud 2a0d:5e00::/29 Deny Cloud Origin: GB Tag: Connexions4London # ASN 32475 ("SingleHop, Inc"). # %Listed, Google Malware Dashboard: 0.16%. # Stop Forum Spam (SFS) listings: 98. # Updated: 2019.08.11 2607:f978:5::/48 Deny Cloud 2607:f978:7::/48 Deny Cloud Origin: US Tag: SingleHop, Inc # ASN 29550 ("eUKhost LTD"). # %Listed, Google Malware Dashboard: 0.06%. # Stop Forum Spam (SFS) listings: 57. # Updated: 2017.03.19 / Checked: 2019.08.11 2a02:af8::/32 Deny Cloud Origin: GB Tag: eUKhost LTD # ASNs 12703, 24931, 32911, 38963, 57669 ("Pulsant (Scotland) Ltd"). # Updated: 2019.05.22 / Checked: 2019.08.21 2001:67c:580::/48 Deny Cloud 2a00:85a0::/32 Deny Cloud 2a01:5ae0::/32 Deny Cloud 2a01:6ca0::/32 Deny Cloud 2a01:ba20::/32 Deny Cloud 2a02:16e0::/32 Deny Cloud 2a02:16f8::/32 Deny Cloud 2a03:67c0::/32 Deny Cloud 2a04:4300::/48 Deny Cloud 2a0b:a380::/48 Deny Cloud Origin: GB Tag: Pulsant # ASN 51852 ("Private Layer INC"). # %Listed, Google Malware Dashboard: 0.19%. # Stop Forum Spam (SFS) listings: 17,734. # Updated: 2019.08.04 2a02:29b8::/32 Deny Cloud Origin: CH Tag: Private Layer INC # ASN 40676 ("Psychz Networks"). # Ranges change frequently / Should update often. # %Listed, Google Malware Dashboard: 0.55%. # Stop Forum Spam (SFS) listings: 10,319. # Updated: 2019.07.20 2a07:1c40:102a::/48 Deny Cloud Origin: AT 2001:df2:c600::/48 Deny Cloud Origin: AU 2a0c:b642:1a08::/48 Deny Cloud Origin: BE 2602:fed2:7103::/48 Deny Cloud Origin: CA 2a06:e881:6205::/48 Deny Cloud Origin: CH 2803:dc40:1::/48 Deny Cloud Origin: CL 2a0d:1180::/48 Deny Cloud Origin: ES 2a07:9944:1b::/48 Deny Cloud 2a07:9944:1c::/48 Deny Cloud Origin: EU 2a0a:6700::/45 Deny Cloud 2a0e:3840:2::/48 Deny Cloud Origin: GB 2a06:a006:c5::/48 Deny Cloud 2a06:a006:f1::/48 Deny Cloud Origin: IS 2a0d:df40::/29 Deny Cloud Origin: LT 2402:d0c0::/47 Deny Cloud Origin: SG 2602:fe90::/40 Deny Cloud 2602:fea6::/36 Deny Cloud 2602:ff96:5::/48 Deny Cloud 2602:ff96:9::/48 Deny Cloud 2602:ff96:12::/48 Deny Cloud 2602:ff96:15::/48 Deny Cloud 2602:ff96:16::/48 Deny Cloud 2602:ff96:1f::/48 Deny Cloud 2602:ff96:1fe::/48 Deny Cloud 2602:ffb0:11::/48 Deny Cloud 2602:ffc5:10b::/48 Deny Cloud 2602:ffc5:10c::/48 Deny Cloud 2602:ffc5:110::/44 Deny Cloud 2602:ffc5:120::/43 Deny Cloud 2604:980:1::/48 Deny Cloud 2604:6600::/32 Deny Cloud 2605:6c80:6::/47 Deny Cloud 2605:6c80:a::/48 Deny Cloud 2606:1780::/32 Deny Cloud 2606:6680:2::/48 Deny Cloud 2606:6680:4::/48 Deny Cloud 2606:6680:7::/48 Deny Cloud 2606:6680:10::/47 Deny Cloud 2606:6680:12::/48 Deny Cloud 2606:6680:15::/48 Deny Cloud 2606:6680:16::/47 Deny Cloud 2606:6680:18::/48 Deny Cloud 2a0b:ae40:1::/48 Deny Cloud 2a0b:ae40:2::/47 Deny Cloud 2a0b:ae40:4::/48 Deny Cloud Origin: US Tag: Psychz Networks # ASN 36114 ("Versaweb, LLC"). # %Listed, Google Malware Dashboard: 0.03%. # Stop Forum Spam (SFS) listings: 190. # Updated: 2016.01.23 / Checked: 2019.08.13 2605:6f80::/40 Deny Cloud Origin: US Tag: Versaweb, LLC # ASN 27176 ("DataWagon LLC"). # %Listed, Google Malware Dashboard: 5.88%. # Stop Forum Spam (SFS) listings: 255. # Updated: 2019.08.22 2a06:fe00::/29 Deny Cloud 2a09:9f80::/29 Deny Cloud 2a0d:6f80::/32 Deny Cloud 2a0d:6f82::/32 Deny Cloud 2a0d:6f84::/32 Deny Cloud 2a0d:6f86::/32 Deny Cloud Origin: LT 2a07:d9c0::/30 Deny Cloud 2a0b:2a87::/32 Deny Cloud 2a0c:a184::/31 Deny Cloud Origin: RU 2605:aa80::/32 Deny Cloud Origin: US Tag: DataWagon LLC # ASNs 20473, 46407 ("Choopa, LLC"). # Ranges change frequently / Should update often. # Mark "Packet Flip" and "Secure Internet LLC" CIDRs as proxies. # %Listed, Google Malware Dashboard: 0.14% (AS20473). # Stop Forum Spam (SFS) listings: 10,287 (AS20473). # Updated: 2019.05.20 2404:2ac0::/32 Deny Cloud Origin: AU 2a06:e881:5901::/48 Deny Cloud Origin: CH 2a03:13a1:4a8::/48 Deny Cloud 2a03:13a2:283f::/48 Deny Cloud 2a03:13a2:343e::/48 Deny Cloud 2a03:13a2:488b::/48 Deny Cloud 2a03:13a2:a78e::/48 Deny Cloud 2a03:13a3:660f::/48 Deny Cloud 2a03:13a3:c38a::/48 Deny Cloud 2a03:13a3:e2e5::/48 Deny Cloud 2a03:13a4:99::/48 Deny Cloud 2a03:13a4:7517::/48 Deny Cloud 2a03:13a4:784a::/48 Deny Cloud 2a03:13a4:b4eb::/48 Deny Cloud 2a03:13a4:e428::/48 Deny Cloud 2a03:13a5:b0d5::/48 Deny Cloud 2a03:13a5:c774::/48 Deny Cloud 2a03:13a5:d798::/48 Deny Cloud 2a03:13a6:7812::/48 Deny Cloud 2a03:13a6:f3d3::/48 Deny Cloud 2a03:13a7:90f::/48 Deny Cloud 2a03:13a7:2c6c::/48 Deny Cloud 2a03:13a7:ea77::/48 Deny Cloud 2a0c:da01::/48 Deny Cloud Origin: DE 2a04:6f01:8f00::/48 Deny Cloud 2a0c:36c3::/32 Deny Cloud Origin: EE 2001:678:90c::/48 Deny Cloud 2a05:f480:1000::/36 Deny Cloud 2a09:b440::/48 Deny Cloud Origin: FR 2402:9e80:14::/48 Deny Cloud Origin: HK 2001:678:214::/48 Deny Cloud Origin: HU 2401:c080:1000::/37 Deny Cloud 2401:c080:1800::/38 Deny Cloud Origin: JP 2a00:fd40:6::/48 Deny Cloud 2a06:2d40::/47 Deny Cloud 2a09:d680:1002::/48 Deny Cloud 2a0c:7e40:7bb1::/48 Deny Cloud 2a0c:7e40:b397::/48 Deny Cloud 2a0c:7e41:5357::/48 Deny Cloud 2a0c:7e41:8600::/48 Deny Cloud 2a0c:7e41:c22a::/48 Deny Cloud 2a0c:7e42:993c::/48 Deny Cloud 2a0c:7e42:db7c::/48 Deny Cloud 2a0c:7e42:f776::/48 Deny Cloud 2a0c:7e43:2e10::/48 Deny Cloud 2a0c:7e43:352e::/48 Deny Cloud 2a0c:7e43:43be::/48 Deny Cloud 2a0c:7e43:a525::/48 Deny Cloud 2a0c:7e43:e28c::/48 Deny Cloud 2a0c:7e44:da38::/48 Deny Cloud 2a0c:7e44:dda8::/48 Deny Cloud 2a0c:7e45:1f8e::/48 Deny Cloud 2a0c:7e45:c712::/48 Deny Cloud 2a0c:7e45:d430::/48 Deny Cloud 2a0c:7e46:8a7::/48 Deny Cloud 2a0c:7e46:4f08::/48 Deny Cloud 2a0c:7e47:111f::/48 Deny Cloud 2a0c:7e47:715c::/48 Deny Cloud 2a0c:7e47:c909::/48 Deny Cloud 2a0c:7e47:ec2e::/48 Deny Cloud 2a0d:2406:1800::/39 Deny Cloud Origin: NL 2a0d:1a40:666::/48 Deny Cloud Origin: SE 2403:a2c0::/32 Deny Cloud Origin: TW 2001:19f0::/38 Deny Cloud 2001:19f0:ccc::/47 Deny Cloud 2001:19f0:1000::/37 Deny Cloud 2001:19f0:4000::/37 Deny Cloud 2001:19f0:5000::/36 Deny Cloud 2001:19f0:6000::/36 Deny Cloud 2001:19f0:7000::/37 Deny Cloud 2001:19f0:7800::/38 Deny Cloud 2001:19f0:8000::/38 Deny Cloud 2001:19f0:8800::/38 Deny Cloud 2001:19f0:9000::/37 Deny Cloud 2001:19f0:a800::/37 Deny Cloud 2001:19f0:b000::/38 Deny Cloud 2602:fece:22::/48 Deny Cloud 2602:ff71:1337::/48 Deny Cloud 2602:ffb0:5::/48 Deny Cloud 2602:ffb0:7::/48 Deny Cloud 2602:ffb0:1b::/48 Deny Cloud 2602:ffb0:29::/48 Deny Cloud 2602:ffe5:800::/40 Deny Cloud 2602:fff6:4::/48 Deny Cloud 2605:9880::/39 Deny Cloud 2605:9880:400::/38 Deny Cloud 2607:6980:50b0::/44 Deny Cloud 2607:7180::/32 Deny Cloud 2607:7c80:53::/48 Deny Cloud Origin: US Tag: Choopa, LLC # ASN 7162 ("UOL DIVEO S.A"). # %Listed, Google Malware Dashboard: 0.22%. # Updated: 2019.07.24 2804:49c:13::/48 Deny Cloud 2804:49c:31::/48 Deny Cloud 2804:49c:3403::/48 Deny Cloud 2804:49c:4203::/48 Deny Cloud 2804:49c:4205::/48 Deny Cloud 2804:49c:4210::/48 Deny Cloud 2804:49c:7000::/39 Deny Cloud 2804:49c:c0f1::/48 Deny Cloud Origin: BR Tag: UOL DIVEO S.A # ASN 46562 ("Total Server Solutions L.L.C"). # %Listed, Google Malware Dashboard: 0.34%. # Stop Forum Spam (SFS) listings: 4,655. # Updated: 2019.09.05 2602:fff6:5::/48 Deny Cloud 2604:2880::/48 Deny Cloud 2604:4600:aa01::/48 Deny Cloud 2604:8180::/32 Deny Cloud 2607:f7a0:1::/48 Deny Cloud 2607:f7a0:2::/47 Deny Cloud 2607:f7a0:4::/46 Deny Cloud 2607:f7a0:8::/47 Deny Cloud 2607:f7a0:b::/48 Deny Cloud 2607:f7a0:c::/46 Deny Cloud 2607:f7a0:10::/45 Deny Cloud 2607:f7a0:18::/46 Deny Cloud Origin: US Tag: AS46562 # Announcing as: "RAM Host". # Had its own ASN in the past, but not anymore. CIDRs still relevant though. # Updated: 2019.05.21 2604:4600:aa01::/48 Deny Cloud 2605:8900:1000::/36 Deny Cloud 2605:8900:3000::/36 Deny Cloud 2605:8900:5000::/36 Deny Cloud Origin: US Tag: RAM Host # "Host Europe GmbH", "HEG Managed", "PlusServer GmbH" (all three combined due to heavy interlacing). # ASNs 5521, 6659, 8972, 15891, 20621, 20738, 20773, 25074, 31100, 34011, 34088, 35329, 50932, 61157, 200386. # Updated: 2019.08.27 2001:830::/32 Deny Cloud 2001:aa8::/32 Deny Cloud 2001:1520::/32 Deny Cloud 2a00:e10::/32 Deny Cloud 2a00:1158::/32 Deny Cloud 2a00:74c0::/32 Deny Cloud 2a01:488::/32 Deny Cloud 2a01:a740::/32 Deny Cloud 2a02:ad0::/29 Deny Cloud 2a02:cbf0::/30 Deny Cloud 2a02:cbf4::/31 Deny Cloud 2a02:cbf7::/47 Deny Cloud 2a02:cbf7:100::/48 Deny Cloud 2a02:e740::/29 Deny Cloud 2a04:2f80::/29 Deny Cloud 2a04:e0c0::/29 Deny Cloud 2a09:2040::/29 Deny Cloud 2a0c:de40::/29 Deny Cloud 2a0e:a680:1::/48 Deny Cloud Origin: DE 2a02:4e8::/32 Deny Cloud Origin: GB Tag: Host Europe GmbH # ASN 14576 ("K SERVERS LTD"). # %Listed, Google Malware Dashboard: 0.03%. # Stop Forum Spam (SFS) listings: 91. # Updated: 2018.08.22 / Checked: 2019.06.24 2a07:4dc0::/29 Deny Cloud 2a07:b400::/30 Deny Cloud Origin: NL 2606:5e00::/35 Deny Cloud 2606:5e00:f000::/36 Deny Cloud Origin: US Tag: K SERVERS LTD # ASN 18978 ("Enzu Inc"). # %Listed, Google Malware Dashboard: 1.98%. # Stop Forum Spam (SFS) listings: 11,998. # Updated: 2017.09.24 / Checked: 2019.07.06 2605:f700:10::/48 Deny Cloud 2605:f700:40::/44 Deny Cloud 2605:f700:80::/44 Deny Cloud 2605:f700:c0::/44 Deny Cloud 2605:f700:100::/44 Deny Cloud 2605:f700:140::/42 Deny Cloud 2605:f700:180::/42 Deny Cloud 2605:f700:400::/38 Deny Cloud Origin: US Tag: Enzu Inc # ASNs 18779, 54500 ("EGIHosting"). # %Listed, Google Malware Dashboard: 1.15% (AS18779). # Stop Forum Spam (SFS) listings: 319 (AS18779), 31 (AS54500). # Updated: 2019.07.12 2a0c:7dc0::/29 Deny Cloud 2a0c:89c0::/29 Deny Cloud Origin: BG 2a0c:47c0::/29 Deny Cloud Origin: CH 2a0c:9ac0::/29 Deny Cloud Origin: FI 2a07:23c0:1::/48 Deny Cloud 2a07:23c0:7::/48 Deny Cloud Origin: GB 2a03:4a80:a::/48 Deny Cloud Origin: NL 2a02:f240::/29 Deny Cloud Origin: NO 2a0c:7080::/29 Deny Cloud 2a0d:3900::/29 Deny Cloud Origin: RU 2604:bc0:3::/48 Deny Cloud 2604:4f00::/36 Deny Cloud 2607:f358::/32 Deny Cloud Origin: US Tag: EGIHosting # ASN 30083 ("HEG US Inc"). # %Listed, Google Malware Dashboard: 0.16%. # Stop Forum Spam (SFS) listings: 376. # Updated: 2017.01.25 / Checked: 2019.08.05 2605:de00::/32 Deny Cloud Origin: US Tag: HEG US Inc # ASN 174 ("Cogent Communications"). # Myself and others have seen and experienced a significant amount of unwanted traffic from their ASN in the past (hack # attempts, spamming, scraping, etc), and generally, this type of traffic should be blocked, but unfortunately, their # ASN encompasses and interlaces significantly with with a number of benign, innocent ISPs, human endpoint, backbone # architecture, etc that we don't want to block. Therefore, I'm splitting this up into multiple sections across # multiple signature files accordingly. # Wikipedia page about Cogent Communications: en.wikipedia.org/wiki/Cogent_Communications # Refer bgpmon.net/large-scale-bgp-hijack-out-of-india/ # Refer forums.spybot.info/showthread.php?23632-SPAM-frauds-fakes-and-other-MALWARE-deliveries/page37 # Refer dyn.com/blog/mitm-internet-hijacking/ # When updating: Remove invalids to reduce false positive risk. # Announces with "Hosting" or "Host" # Updated: 2019.02.27 / Checked: 2019.07.02 2602:ffb6::/36 Deny Cloud Origin: CA 2001:978:2309::/48 Deny Cloud 2001:978:3901::/48 Deny Cloud 2001:978:b600::/48 Deny Cloud Origin: DE 2a07:85c0::/48 Deny Cloud 2a07:85c1::/48 Deny Cloud Origin: NL Tag: Cogent Hosting # Announces with "Server" # Updated: 2019.07.02 2001:49f0::/47 Deny Cloud 2001:49f0:a::/48 Deny Cloud 2001:49f0:100d::/48 Deny Cloud 2001:49f0:1010::/48 Deny Cloud 2001:49f0:101d::/48 Deny Cloud 2001:49f0:101e::/48 Deny Cloud 2001:49f0:1023::/48 Deny Cloud 2001:49f0:1024::/47 Deny Cloud 2001:49f0:2001::/48 Deny Cloud 2001:49f0:2002::/47 Deny Cloud 2001:49f0:2004::/46 Deny Cloud 2001:49f0:2008::/45 Deny Cloud 2001:49f0:2010::/44 Deny Cloud 2001:49f0:2020::/46 Deny Cloud 2001:49f0:2024::/47 Deny Cloud 2001:49f0:2027::/48 Deny Cloud 2001:49f0:2028::/45 Deny Cloud 2001:49f0:2030::/45 Deny Cloud 2001:49f0:2039::/48 Deny Cloud 2001:49f0:203a::/47 Deny Cloud 2001:49f0:203c::/46 Deny Cloud 2001:49f0:2040::/44 Deny Cloud 2001:49f0:2920::/48 Deny Cloud 2001:49f0:3000::/45 Deny Cloud 2001:49f0:30a0::/48 Deny Cloud 2001:49f0:4000::/48 Deny Cloud 2001:49f0:4002::/48 Deny Cloud 2001:49f0:4021::/48 Deny Cloud 2001:49f0:5000::/48 Deny Cloud 2001:49f0:6000::/46 Deny Cloud 2001:49f0:6004::/47 Deny Cloud 2001:49f0:7000::/47 Deny Cloud 2001:49f0:7002::/48 Deny Cloud 2001:49f0:a000::/36 Deny Cloud 2001:49f0:d000::/44 Deny Cloud 2001:49f0:d010::/45 Deny Cloud 2001:49f0:d018::/48 Deny Cloud 2001:49f0:d01a::/47 Deny Cloud 2001:49f0:d01c::/46 Deny Cloud 2001:49f0:d020::/44 Deny Cloud 2001:49f0:d030::/46 Deny Cloud 2001:49f0:d034::/47 Deny Cloud 2001:49f0:d037::/48 Deny Cloud 2001:49f0:d038::/48 Deny Cloud 2001:49f0:d03d::/48 Deny Cloud 2001:49f0:d03e::/47 Deny Cloud 2001:49f0:d040::/44 Deny Cloud 2001:49f0:d050::/46 Deny Cloud 2001:49f0:d054::/47 Deny Cloud 2001:49f0:d057::/48 Deny Cloud 2001:49f0:d058::/45 Deny Cloud 2001:49f0:d060::/43 Deny Cloud 2001:49f0:d080::/45 Deny Cloud 2001:49f0:d089::/48 Deny Cloud 2001:49f0:d08a::/47 Deny Cloud 2001:49f0:d08c::/46 Deny Cloud 2001:49f0:d090::/45 Deny Cloud 2001:49f0:d098::/49 Deny Cloud 2001:49f0:d099::/49 Deny Cloud 2001:49f0:d09a::/48 Deny Cloud 2001:49f0:d09c::/47 Deny Cloud 2001:49f0:d09e::/48 Deny Cloud 2001:49f0:d0a0::/47 Deny Cloud 2001:49f0:d0a2::/48 Deny Cloud 2001:49f0:d0a5::/48 Deny Cloud 2001:49f0:d0a6::/47 Deny Cloud 2001:49f0:d0a8::/46 Deny Cloud 2001:49f0:d0ac::/47 Deny Cloud 2001:49f0:d0b9::/48 Deny Cloud 2001:49f0:d0bf::/48 Deny Cloud Origin: US Tag: Cogent Server # ASNs 59711, 61046, 201525, 202015 ("HZ Hosting Ltd"). # Updated: 2018.08.21 / Checked: 2019.06.28 2a01:8640::/46 Deny Cloud 2a01:8640:4::/47 Deny Cloud 2a01:8640:7::/48 Deny Cloud 2a01:8640:8::/48 Deny Cloud Origin: GB 2a0a:e2c4::/31 Deny Cloud Origin: UA Tag: HZ Hosting Ltd # ASNs 30279, 53889, 54334, 63008, 63262, 394021, 394056, 394143 ("Micfo, LLC"). # Ranges change frequently / Should update often. # Provides numerous cloud services / webhosting services / IoT / etc. Source of spam and other unwanted traffic. # Exclude: Anything citing "Telecom" (ISP), "Level3" (infrastructure) -- ^.*(Telecom|Level3).*$\n # Updated: 2019.06.14 2407:9780::/32 Deny Cloud 2605:3e80:200::/39 Deny Cloud 2605:3e80:400::/38 Deny Cloud 2605:3e80:800::/37 Deny Cloud 2605:3e80:1000::/38 Deny Cloud 2605:3e80:1400::/39 Deny Cloud 2605:3e80:1700::/40 Deny Cloud 2605:3e80:1800::/40 Deny Cloud 2605:3e80:1a00::/40 Deny Cloud 2605:3e80:1d00::/40 Deny Cloud 2605:3e80:1e00::/39 Deny Cloud 2605:3e80:2000::/38 Deny Cloud 2605:3e80:2400::/39 Deny Cloud 2605:3e80:2700::/40 Deny Cloud 2605:3e80:2900::/40 Deny Cloud 2605:3e80:2c00::/39 Deny Cloud 2605:3e80:2f00::/40 Deny Cloud 2605:3e80:3100::/40 Deny Cloud 2605:3e80:3200::/39 Deny Cloud 2605:3e80:3400::/38 Deny Cloud 2605:3e80:3800::/40 Deny Cloud 2605:3e80:3a00::/40 Deny Cloud 2605:3e80:7004::/48 Deny Cloud 2605:3e80:c000::/48 Deny Cloud Origin: US Tag: Micfo, LLC # ASN 53264 ("Continuum Data Centers, LLC"). # %Listed, Google Malware Dashboard: 0.41%. # Stop Forum Spam (SFS) listings: 50. # Updated: 2017.07.23 / Checked: 2019.04.07 2607:ff50::/32 Deny Cloud Origin: US Tag: Continuum # ASN 51167 ("Contabo GmbH"). # Caught spamming while pretending to be Google. # %Listed, Google Malware Dashboard: 0.21%. # Stop Forum Spam (SFS) listings: 12,292. # Updated: 2019.07.13 2a02:c200::/32 Deny Cloud 2a02:c205::/32 Deny Cloud 2a02:c207::/32 Deny Cloud Origin: DE 2a09:9442::/32 Deny Cloud Origin: RU Tag: Contabo GmbH # ASN 45815 ("ESDS Software Solution"). # %Listed, Google Malware Dashboard: 0.28%. # Stop Forum Spam (SFS) listings: 3. # Updated: 2017.01.25 / Checked: 2019.06.03 2400:5300::/47 Deny Cloud Origin: IN Tag: ESDS # ASN 51430 ("AltusHost B.V"). # %Listed, Google Malware Dashboard: 0.28%. # Stop Forum Spam (SFS) listings: 1,844. # Updated: 2019.07.21 2a00:7140::/32 Deny Cloud 2a00:7142::/31 Deny Cloud 2a00:7144::/32 Deny Cloud 2a00:7145::/48 Deny Cloud 2a00:7146::/48 Deny Cloud Origin: NL Tag: AltusHost B.V # "Akamai Technologies" (too many ASNs to list; excluding invalids). # Updated: 2019.08.05 2800:550:2a::/48 Deny Cloud Origin: CL 2a02:2370:1::/48 Deny Cloud 2a02:2370:2::/47 Deny Cloud 2a02:2370:4::/47 Deny Cloud 2a02:2370:6::/48 Deny Cloud 2a02:2370:101::/48 Deny Cloud 2a02:2370:102::/48 Deny Cloud 2a02:26f0::/32 Deny Cloud Origin: EU 2a01:348:317::/48 Deny Cloud Origin: GB 2404:c800:8203::/48 Deny Cloud Origin: HK 2001:218:3004::/48 Deny Cloud Origin: JP 2404:4e00:1::/48 Deny Cloud 2404:4e00:2::/47 Deny Cloud 2404:4e00:4::/46 Deny Cloud 2404:4e00:101::/48 Deny Cloud 2404:4e00:102::/48 Deny Cloud 2404:4e00:1003::/48 Deny Cloud 2404:4e00:1083::/48 Deny Cloud Origin: SG 2001:418:1401:4::/64 Deny Cloud 2001:418:1401:7::/64 Deny Cloud 2001:418:1401:9::/64 Deny Cloud 2001:418:1401:e::/63 Deny Cloud 2001:418:141f:100::/56 Deny Cloud 2001:418:141f:200::/56 Deny Cloud 2001:418:1420:200::/56 Deny Cloud 2001:418:142d:100::/56 Deny Cloud 2001:418:142e:100::/56 Deny Cloud 2001:418:142e:200::/55 Deny Cloud 2001:418:143a:100::/56 Deny Cloud 2001:418:143b:100::/56 Deny Cloud 2001:418:1456:a00::/56 Deny Cloud 2001:418:1456:1300::/56 Deny Cloud 2001:418:1456:1900::/56 Deny Cloud 2001:418:1c01:1::/64 Deny Cloud 2001:418:8001::/48 Deny Cloud 2001:418:8404:1::/64 Deny Cloud 2001:428:1802:9::/64 Deny Cloud 2001:438:fffd:13::/64 Deny Cloud 2001:590:1801::/48 Deny Cloud 2001:5a0:3a03::/48 Deny Cloud 2001:4878::/47 Deny Cloud 2001:4878:3::/48 Deny Cloud 2001:4878:6::/47 Deny Cloud 2001:4878:8::/48 Deny Cloud 2001:4878:10::/48 Deny Cloud 2001:4878:27::/48 Deny Cloud 2001:4878:31::/48 Deny Cloud 2001:4878:33::/48 Deny Cloud 2001:4878:34::/48 Deny Cloud 2001:4878:37::/48 Deny Cloud 2001:4878:38::/47 Deny Cloud 2001:4878:45::/48 Deny Cloud 2001:4878:52::/48 Deny Cloud 2001:4878:62::/47 Deny Cloud 2001:4878:101::/48 Deny Cloud 2001:4878:102::/47 Deny Cloud 2001:4878:136::/48 Deny Cloud 2001:4878:151::/48 Deny Cloud 2001:4878:153::/48 Deny Cloud 2001:4878:158::/48 Deny Cloud 2001:4878:164::/48 Deny Cloud 2001:4878:1e0::/44 Deny Cloud 2001:4878:204::/48 Deny Cloud 2001:4878:215::/48 Deny Cloud 2001:4878:216::/47 Deny Cloud 2001:4878:219::/48 Deny Cloud 2001:4878:220::/48 Deny Cloud 2001:4878:225::/48 Deny Cloud 2001:4878:228::/48 Deny Cloud 2001:4878:234::/48 Deny Cloud 2001:4878:242::/48 Deny Cloud 2001:4878:246::/48 Deny Cloud 2001:4878:259::/48 Deny Cloud 2001:4878:261::/48 Deny Cloud 2001:4878:321::/48 Deny Cloud 2001:4878:322::/47 Deny Cloud 2001:4878:324::/48 Deny Cloud 2001:4878:347::/48 Deny Cloud 2001:4878:356::/48 Deny Cloud 2001:4878:2000::/48 Deny Cloud 2001:4878:2007::/48 Deny Cloud 2001:4878:2008::/48 Deny Cloud 2001:4878:2010::/48 Deny Cloud 2001:4878:2027::/48 Deny Cloud 2001:4878:2031::/48 Deny Cloud 2001:4878:2033::/48 Deny Cloud 2001:4878:2034::/48 Deny Cloud 2001:4878:2037::/48 Deny Cloud 2001:4878:2038::/48 Deny Cloud 2001:4878:2045::/48 Deny Cloud 2001:4878:2052::/48 Deny Cloud 2001:4878:2062::/47 Deny Cloud 2001:4878:2101::/48 Deny Cloud 2001:4878:2102::/47 Deny Cloud 2001:4878:2136::/48 Deny Cloud 2001:4878:2151::/48 Deny Cloud 2001:4878:2153::/48 Deny Cloud 2001:4878:2158::/48 Deny Cloud 2001:4878:2164::/48 Deny Cloud 2001:4878:21e0::/44 Deny Cloud 2001:4878:2204::/48 Deny Cloud 2001:4878:2215::/48 Deny Cloud 2001:4878:2216::/47 Deny Cloud 2001:4878:2219::/48 Deny Cloud 2001:4878:2220::/48 Deny Cloud 2001:4878:2225::/48 Deny Cloud 2001:4878:2228::/48 Deny Cloud 2001:4878:2234::/48 Deny Cloud 2001:4878:2242::/48 Deny Cloud 2001:4878:2246::/48 Deny Cloud 2001:4878:2259::/48 Deny Cloud 2001:4878:2261::/48 Deny Cloud 2001:4878:2321::/48 Deny Cloud 2001:4878:2322::/47 Deny Cloud 2001:4878:2324::/48 Deny Cloud 2001:4878:2347::/48 Deny Cloud 2001:4878:2356::/48 Deny Cloud 2001:4878:4000::/48 Deny Cloud 2001:4878:4003::/48 Deny Cloud 2001:4878:4007::/48 Deny Cloud 2001:4878:4008::/48 Deny Cloud 2001:4878:4010::/48 Deny Cloud 2001:4878:4027::/48 Deny Cloud 2001:4878:4031::/48 Deny Cloud 2001:4878:4033::/48 Deny Cloud 2001:4878:4037::/48 Deny Cloud 2001:4878:4038::/48 Deny Cloud 2001:4878:4052::/48 Deny Cloud 2001:4878:4062::/47 Deny Cloud 2001:4878:4101::/48 Deny Cloud 2001:4878:4102::/47 Deny Cloud 2001:4878:4136::/48 Deny Cloud 2001:4878:4158::/48 Deny Cloud 2001:4878:4164::/48 Deny Cloud 2001:4878:41e0::/44 Deny Cloud 2001:4878:4204::/48 Deny Cloud 2001:4878:4215::/48 Deny Cloud 2001:4878:4216::/47 Deny Cloud 2001:4878:4219::/48 Deny Cloud 2001:4878:4220::/48 Deny Cloud 2001:4878:4225::/48 Deny Cloud 2001:4878:4234::/48 Deny Cloud 2001:4878:4242::/48 Deny Cloud 2001:4878:4246::/48 Deny Cloud 2001:4878:4259::/48 Deny Cloud 2001:4878:4321::/48 Deny Cloud 2001:4878:4322::/47 Deny Cloud 2001:4878:4324::/48 Deny Cloud 2001:4878:4347::/48 Deny Cloud 2001:4878:8000::/48 Deny Cloud 2001:4878:8006::/47 Deny Cloud 2001:4878:8008::/48 Deny Cloud 2001:4878:8010::/48 Deny Cloud 2001:4878:8027::/48 Deny Cloud 2001:4878:8031::/48 Deny Cloud 2001:4878:8033::/48 Deny Cloud 2001:4878:8034::/48 Deny Cloud 2001:4878:8037::/48 Deny Cloud 2001:4878:8038::/48 Deny Cloud 2001:4878:8045::/48 Deny Cloud 2001:4878:8052::/48 Deny Cloud 2001:4878:8062::/47 Deny Cloud 2001:4878:8101::/48 Deny Cloud 2001:4878:8102::/47 Deny Cloud 2001:4878:8136::/48 Deny Cloud 2001:4878:8151::/48 Deny Cloud 2001:4878:8153::/48 Deny Cloud 2001:4878:8158::/48 Deny Cloud 2001:4878:8164::/48 Deny Cloud 2001:4878:81e0::/44 Deny Cloud 2001:4878:8204::/48 Deny Cloud 2001:4878:8215::/48 Deny Cloud 2001:4878:8216::/47 Deny Cloud 2001:4878:8219::/48 Deny Cloud 2001:4878:8220::/48 Deny Cloud 2001:4878:8225::/48 Deny Cloud 2001:4878:8228::/48 Deny Cloud 2001:4878:8234::/48 Deny Cloud 2001:4878:8242::/48 Deny Cloud 2001:4878:8246::/48 Deny Cloud 2001:4878:8259::/48 Deny Cloud 2001:4878:8261::/48 Deny Cloud 2001:4878:8321::/48 Deny Cloud 2001:4878:8322::/47 Deny Cloud 2001:4878:8324::/48 Deny Cloud 2001:4878:8347::/48 Deny Cloud 2001:4878:8356::/48 Deny Cloud 2001:4878:a000::/48 Deny Cloud 2001:4878:a006::/47 Deny Cloud 2001:4878:a008::/48 Deny Cloud 2001:4878:a010::/48 Deny Cloud 2001:4878:a027::/48 Deny Cloud 2001:4878:a031::/48 Deny Cloud 2001:4878:a033::/48 Deny Cloud 2001:4878:a034::/48 Deny Cloud 2001:4878:a038::/48 Deny Cloud 2001:4878:a045::/48 Deny Cloud 2001:4878:a052::/48 Deny Cloud 2001:4878:a062::/48 Deny Cloud 2001:4878:a102::/48 Deny Cloud 2001:4878:a136::/48 Deny Cloud 2001:4878:a151::/48 Deny Cloud 2001:4878:a153::/48 Deny Cloud 2001:4878:a204::/48 Deny Cloud 2001:4878:a215::/48 Deny Cloud 2001:4878:a216::/48 Deny Cloud 2001:4878:a220::/48 Deny Cloud 2001:4878:a225::/48 Deny Cloud 2001:4878:a228::/48 Deny Cloud 2001:4878:a242::/48 Deny Cloud 2001:4878:a246::/48 Deny Cloud 2001:4878:a259::/48 Deny Cloud 2001:4878:a261::/48 Deny Cloud 2001:4878:a321::/48 Deny Cloud 2001:4878:a322::/47 Deny Cloud 2001:4878:a324::/48 Deny Cloud 2001:4878:a347::/48 Deny Cloud 2001:4878:a356::/48 Deny Cloud 2001:4878:b006::/47 Deny Cloud 2001:4878:b008::/48 Deny Cloud 2001:4878:b010::/48 Deny Cloud 2001:4878:b027::/48 Deny Cloud 2001:4878:b031::/48 Deny Cloud 2001:4878:b038::/48 Deny Cloud 2001:4878:b045::/48 Deny Cloud 2001:4878:b102::/48 Deny Cloud 2001:4878:b136::/48 Deny Cloud 2001:4878:b151::/48 Deny Cloud 2001:4878:b153::/48 Deny Cloud 2001:4878:b216::/48 Deny Cloud 2001:4878:b220::/48 Deny Cloud 2001:4878:b225::/48 Deny Cloud 2001:4878:b228::/48 Deny Cloud 2001:4878:b259::/48 Deny Cloud 2001:4878:b347::/48 Deny Cloud 2001:4878:c000::/48 Deny Cloud 2001:4878:c007::/48 Deny Cloud 2001:4878:c008::/48 Deny Cloud 2001:4878:c010::/48 Deny Cloud 2001:4878:c027::/48 Deny Cloud 2001:4878:c031::/48 Deny Cloud 2001:4878:c033::/48 Deny Cloud 2001:4878:c034::/48 Deny Cloud 2001:4878:c037::/48 Deny Cloud 2001:4878:c038::/48 Deny Cloud 2001:4878:c052::/48 Deny Cloud 2001:4878:c062::/47 Deny Cloud 2001:4878:c101::/48 Deny Cloud 2001:4878:c102::/47 Deny Cloud 2001:4878:c136::/48 Deny Cloud 2001:4878:c158::/48 Deny Cloud 2001:4878:c164::/48 Deny Cloud 2001:4878:c1e0::/44 Deny Cloud 2001:4878:c204::/48 Deny Cloud 2001:4878:c215::/48 Deny Cloud 2001:4878:c216::/47 Deny Cloud 2001:4878:c219::/48 Deny Cloud 2001:4878:c220::/48 Deny Cloud 2001:4878:c225::/48 Deny Cloud 2001:4878:c228::/48 Deny Cloud 2001:4878:c234::/48 Deny Cloud 2001:4878:c242::/48 Deny Cloud 2001:4878:c246::/48 Deny Cloud 2001:4878:c257::/48 Deny Cloud 2001:4878:c259::/48 Deny Cloud 2001:4878:c321::/48 Deny Cloud 2001:4878:c322::/47 Deny Cloud 2001:4878:c324::/48 Deny Cloud 2001:4878:c347::/48 Deny Cloud 2600:1400::/24 Deny Cloud 2602:ff99:0:6::/64 Deny Cloud 2606:6c00:2::/48 Deny Cloud 2606:6c00:4::/46 Deny Cloud 2606:6c00:8::/48 Deny Cloud 2606:6c00:100::/48 Deny Cloud 2606:6c00:102::/48 Deny Cloud 2606:6c00:120::/44 Deny Cloud 2606:6c00:2000::/48 Deny Cloud Origin: US Tag: Akamai Technologies # ASN 6428 ("Rose Hosting"). # %Listed, Google Malware Dashboard: 0.58%. # Stop Forum Spam (SFS) listings: 77. # Updated: 2017.10.30 / Checked: 2019.07.24 2606:9200::/32 Deny Cloud Origin: US Tag: Rose Hosting # ASN 5693 ("Latisys-Irvine, LLC"). # Stop Forum Spam (SFS) listings: 10. # Updated: 2016.04.03 / Checked: 2019.08.01 2001:1990::/32 Deny Cloud Origin: US Tag: Latisys-Irvine, LLC # ASN 46261 ("QuickPacket, LLC"). # Ranges change frequently / Should update often. # %Listed, Google Malware Dashboard: 0.37%. # Stop Forum Spam (SFS) listings: 2,726. # Updated: 2019.06.24 2606:f280::/33 Deny Cloud 2606:f280:8000::/34 Deny Cloud 2606:f280:c000::/35 Deny Cloud Origin: CA 2605:a880::/48 Deny Cloud 2605:a880:8000::/48 Deny Cloud 2607:3f00::/43 Deny Cloud 2607:3f00:20::/48 Deny Cloud 2607:3f00:2a::/48 Deny Cloud Origin: US Tag: QuickPacket, LLC # ASNs 10480, 29802, 54540 ("HIVELOCITY VENTURES CORP"). # (Can omit anything under 44../8; clean). # %Listed, Google Malware Dashboard: 0.19% (AS29802), 0.13% (AS54540). # Stop Forum Spam (SFS) listings: 670 (AS29802), 222 (AS54540). # Updated: 2019.06.12 2a0a:1f45::/32 Deny Cloud Origin: NL 2001:504:3c::/48 Deny Cloud 2600:c04:1022::/48 Deny Cloud 2602:ff16:1::/48 Deny Cloud 2602:ff16:2::/47 Deny Cloud 2602:ffd1::/46 Deny Cloud 2602:fff6:f::/48 Deny Cloud 2604:880:1::/48 Deny Cloud 2604:880:2::/47 Deny Cloud 2604:880:4::/47 Deny Cloud 2604:880:6::/48 Deny Cloud 2604:880:a::/48 Deny Cloud 2604:880:d::/48 Deny Cloud 2604:880:e::/48 Deny Cloud 2604:880:10::/46 Deny Cloud 2604:880:26::/47 Deny Cloud 2604:880:32::/48 Deny Cloud 2604:880:35::/48 Deny Cloud 2604:880:37::/48 Deny Cloud 2604:880:39::/48 Deny Cloud 2604:880:3a::/48 Deny Cloud 2604:880:3c::/48 Deny Cloud 2604:880:41::/48 Deny Cloud 2604:880:4c::/46 Deny Cloud 2604:880:50::/47 Deny Cloud 2604:880:54::/48 Deny Cloud 2604:880:56::/48 Deny Cloud 2604:880:58::/47 Deny Cloud 2604:880:5a::/48 Deny Cloud 2604:880:5c::/48 Deny Cloud 2604:880:5e::/48 Deny Cloud 2604:880:60::/48 Deny Cloud 2604:880:62::/47 Deny Cloud 2604:880:64::/47 Deny Cloud 2604:880:6e::/47 Deny Cloud 2604:880:72::/47 Deny Cloud 2604:880:74::/47 Deny Cloud 2604:880:76::/48 Deny Cloud 2604:880:78::/48 Deny Cloud 2604:880:200::/39 Deny Cloud 2604:880:3d00::/48 Deny Cloud 2604:4500::/45 Deny Cloud 2604:4500:8::/46 Deny Cloud 2604:4500:c::/48 Deny Cloud 2604:4500:100::/40 Deny Cloud 2604:4500:900::/40 Deny Cloud 2604:4500:c00::/40 Deny Cloud 2604:8380::/32 Deny Cloud 2606:cd80::/48 Deny Cloud 2620:1e8:2::/47 Deny Cloud 2620:1e8:4::/47 Deny Cloud Origin: US Tag: HIVELOCITY VENTURES # ASN 13739 ("Datacenter IP, LLC"). # Stop Forum Spam (SFS) listings: 311. # Updated: 2018.08.05 / Checked: 2019.06.01 2a0c:acc0::/29 Deny Cloud Origin: AT 2604:6080::/32 Deny Cloud Origin: US Tag: Datacenter IP, LLC # ASN 43578 ("MBA DATACENTERS S.L"). # Stop Forum Spam (SFS) listings: 12. # Updated: 2019.03.30 / Checked: 2019.08.11 2a04:b880::/48 Deny Cloud 2a04:b880:5::/48 Deny Cloud 2a05:4700:b::/48 Deny Cloud 2a05:4700:50::/48 Deny Cloud 2a05:4700:100::/47 Deny Cloud Origin: ES Tag: MBA DATACENTERS S.L # ASN 10439 ("CariNet, Inc"). # Caught attempting to hack honeypots. # Stop Forum Spam (SFS) listings: 1. # Updated: 2016.04.08 / Checked: 2019.09.15 2607:ff10::/32 Deny Cloud Origin: US Tag: CariNet, Inc # ASN 29141 ("Bradler & Krantz GmbH & Co. KG"). # %Listed, Google Malware Dashboard: 0.54%. # Stop Forum Spam (SFS) listings: 2. # Updated: 2016.04.10 / Checked: 2019.09.08 2a02:e00::/32 Deny Cloud Origin: DE Tag: Bradler & Krantz # ASN 34762 ("Combell NV"). # %Listed, Google Malware Dashboard: 0.13%. # Stop Forum Spam (SFS) listings: 1. # Updated: 2019.05.06 2a00:1c98::/32 Deny Cloud 2a00:7000::/32 Deny Cloud 2a02:d08::/32 Deny Cloud 2a03:a800::/32 Deny Cloud 2a06:efc0::/32 Deny Cloud 2a07:ca80::/29 Deny Cloud 2a0d:5040::/31 Deny Cloud Origin: BE 2a00:1bd8::/32 Deny Cloud 2a01:40e0::/32 Deny Cloud 2a02:2858::/40 Deny Cloud 2a02:2858:200::/39 Deny Cloud 2a02:2858:400::/40 Deny Cloud 2a03:5500::/31 Deny Cloud 2a0a:640::/32 Deny Cloud Origin: NL Tag: Combell NV # ASN 39020 ("Comvive Servidores S.L"). # %Listed, Google Malware Dashboard: 0.31%. # Stop Forum Spam (SFS) listings: 192. # Updated: 2016.04.10 / Checked: 2019.06.20 2a00:1d70::/32 Deny Cloud Origin: ES Tag: Comvive Servidores # ASN 34971 ("Prometeus di Daniela Agro"). # %Listed, Google Malware Dashboard: 0.19%. # Stop Forum Spam (SFS) listings: 23. # Updated: 2018.03.14 / Checked: 2019.05.20 2a00:dcc0::/32 Deny Cloud 2a00:dcc7:d000::/38 Deny Cloud Origin: IT 2a06:fdc0::/32 Deny Cloud Origin: RO Tag: Daniela Agro # ASNs 48496, 52173 ("Makonix SIA"). # %Listed, Google Malware Dashboard: 0.70% (AS48496), 0.21% (AS48496). # Stop Forum Spam (SFS) listings: 576 (AS48496), 2,127 (AS48496). # Updated: 2018.07.09 / Checked: 2019.05.20 2a02:7aa0::/34 Deny Cloud Origin: LV Tag: Makonix SIA # ASN 57169 ("EDIS GmbH"). # %Listed, Google Malware Dashboard: 0.11%. # Stop Forum Spam (SFS) listings: 903. # Updated: 2016.11.02 / Checked: 2019.06.20 2a03:f80:852::/48 Deny Cloud 2a03:f80:ad15::/48 Deny Cloud 2a03:f80:ed15::/48 Deny Cloud 2a03:f80:ed16::/47 Deny Cloud 2a03:f81::/32 Deny Cloud 2a03:f83::/32 Deny Cloud 2a03:f84::/32 Deny Cloud 2a03:f87:ffff::/48 Deny Cloud Origin: AT Tag: EDIS GmbH # ASNs 8272, 8426, 34948 ("ClaraNET LTD"). # %Listed, Google Malware Dashboard: 0.38% (AS8426). # Stop Forum Spam (SFS) listings: 21 (AS8426). # Updated: 2019.05.19 2a00:1798::/32 Deny Cloud Origin: DE 2a02:a0::/32 Deny Cloud Origin: ES 2001:a70::/32 Deny Cloud 2a02:1f8::/32 Deny Cloud 2a02:2328::/32 Deny Cloud 2a03:7300::/32 Deny Cloud Origin: FR 2001:67c:1088::/47 Deny Cloud 2001:67c:27dc::/48 Deny Cloud 2001:a88::/32 Deny Cloud 2a00:ed0::/32 Deny Cloud 2a01:7b8::/32 Deny Cloud Origin: GB 2a00:7740::/32 Deny Cloud 2a02:830::/32 Deny Cloud Origin: NL 2001:4cc0::/32 Deny Cloud 2a03:73c0::/48 Deny Cloud 2a03:8bc0:33::/48 Deny Cloud 2a03:9c80:4000::/34 Deny Cloud 2a07:4f40::/29 Deny Cloud 2a09:5640::/32 Deny Cloud 2a09:58c0::/32 Deny Cloud Origin: PT Tag: ClaraNET LTD # ASN 43289 ("Trabia-Network S.R.L"). # Stop Forum Spam (SFS) listings: 41,134. # Updated: 2019.05.06 2a03:f80:373::/48 Deny Cloud Origin: AT 2a02:e00:ffe8::/48 Deny Cloud Origin: DE 2a05:bc00::/29 Deny Cloud 2a06:80c0::/29 Deny Cloud 2a06:8e40::/29 Deny Cloud 2a06:8e80::/29 Deny Cloud 2a06:a240::/29 Deny Cloud 2a06:a2c0::/29 Deny Cloud 2a06:e800::/29 Deny Cloud 2a07:640::/29 Deny Cloud 2a07:c80::/29 Deny Cloud 2a07:17c0::/29 Deny Cloud 2a07:2680::/29 Deny Cloud 2a07:2880::/29 Deny Cloud 2a07:2f40::/29 Deny Cloud 2a07:3dc0::/29 Deny Cloud 2a07:41c0::/29 Deny Cloud 2a07:4240::/29 Deny Cloud 2a07:5200::/29 Deny Cloud 2a07:8000::/29 Deny Cloud 2a07:8240::/29 Deny Cloud 2a07:9d00::/29 Deny Cloud 2a0a:3400::/29 Deny Cloud 2a0a:cf80::/29 Deny Cloud 2a0b:200::/29 Deny Cloud 2a0b:7f40::/29 Deny Cloud 2a0c:2b00::/29 Deny Cloud Origin: DK 2403:280::/32 Deny Cloud Origin: HK 2a00:1dc0::/29 Deny Cloud Origin: MD 2a07:8800::/29 Deny Cloud Origin: UA Tag: Trabia-Network # ASN 29691 ("Nine Internet Solutions AG"). # %Listed, Google Malware Dashboard: 0.05%. # Stop Forum Spam (SFS) listings: 7,319. # Updated: 2018.08.21 / Checked: 2019.08.29 2a02:418::/29 Deny Cloud 2a05:9a80::/29 Deny Cloud Origin: CH Tag: Nine Internet # ASN 61102 ("Interhost Communication Solutions Ltd"). # %Listed, Google Malware Dashboard: 0.33%. # Stop Forum Spam (SFS) listings: 347. # Updated: 2016.04.10 / Checked: 2019.08.01 2a03:f80:972::/48 Deny Cloud Origin: AT 2a03:ff40::/32 Deny Cloud Origin: IL Tag: AS61102 # ASN 14442 ("Media-Hosts Inc"). # Stop Forum Spam (SFS) listings: 55. # Updated: 2016.04.10 / Checked: 2019.04.13 2605:2100::/36 Deny Cloud Origin: CA Tag: Media-Hosts Inc # ASN 53667 ("FranTech Solutions"). # %Listed, Google Malware Dashboard: 0.22%. # Stop Forum Spam (SFS) listings: 33,781. # Updated: 2017.12.18 / Checked: 2019.08.01 2605:6400:1::/48 Deny Cloud 2605:6400:2::/47 Deny Cloud 2605:6400:10::/48 Deny Cloud 2605:6400:20::/48 Deny Cloud 2605:6400:30::/48 Deny Cloud 2605:6400:100::/48 Deny Cloud Origin: US Tag: FranTech Solutions # ASN 35908 ("Krypt Technologies"). # %Listed, Google Malware Dashboard: 0.63%. # Stop Forum Spam (SFS) listings: 492. # Updated: 2019.03.27 / Checked: 2019.08.04 2607:f180::/31 Deny Cloud Origin: US Tag: Krypt Technologies # ASN 31815 ("Media Temple, Inc"). # %Listed, Google Malware Dashboard: 0.29%. # Updated: 2017.11.16 / Checked: 2019.09.15 2606:2300:8000::/48 Deny Cloud Origin: US Tag: Media Temple, Inc # ASNs 12586, 48039 ("GHOSTnet GmbH"). # %Listed, Google Malware Dashboard: 0.63% (AS12586). # Stop Forum Spam (SFS) listings: 941 (AS12586). # Updated: 2019.07.12 2001:67c:18e8::/48 Deny Cloud 2001:67c:2c58::/48 Deny Cloud 2001:67c:2f84::/48 Deny Cloud 2a00:12d8::/29 Deny Cloud 2a00:1890::/29 Deny Cloud 2a00:1910::/29 Deny Cloud 2a00:19d0::/29 Deny Cloud 2a00:cdc0::/32 Deny Cloud 2a01:bd40::/29 Deny Cloud 2a02:7a0::/32 Deny Cloud 2a02:2fc0::/29 Deny Cloud 2a0b:6c80::/32 Deny Cloud Origin: DE Tag: GHOSTnet GmbH # ASNs 21859, 62610 ("Zenlayer Inc"). # %Listed, Google Malware Dashboard: 0.72% (AS21859). # Stop Forum Spam (SFS) listings: 2,094 (AS21859). # Updated: 2019.09.15 2400:ba41:1::/48 Deny Cloud 2407:6a80::/32 Deny Cloud Origin: CN 2a0b:21c0:1000::/36 Deny Cloud 2a0b:21c0:2000::/35 Deny Cloud 2a0b:21c0:4000::/34 Deny Cloud 2a0b:21c0:8000::/35 Deny Cloud 2a0b:21c0:a000::/36 Deny Cloud Origin: DE 2602:ffe4::/37 Deny Cloud 2602:ffe4:800::/38 Deny Cloud 2602:ffe4:c00::/46 Deny Cloud 2602:ffe4:c05::/48 Deny Cloud 2602:ffe4:c0b::/48 Deny Cloud 2602:ffe4:c11::/48 Deny Cloud 2602:ffe4:c12::/48 Deny Cloud 2602:ffe4:c14::/47 Deny Cloud 2602:ffe4:c17::/48 Deny Cloud 2602:ffe4:c18::/47 Deny Cloud 2602:ffe4:c1a::/48 Deny Cloud 2602:ffe4:c20::/48 Deny Cloud 2604:980:1000::/36 Deny Cloud 2604:980:2000::/35 Deny Cloud 2604:980:4000::/35 Deny Cloud 2604:980:7000::/36 Deny Cloud 2604:980:8000::/35 Deny Cloud 2607:a400::/32 Deny Cloud Origin: US Tag: Zenlayer Inc # ASN 22923 ("Yesup Ecommerce Solutions Inc"). # %Listed, Google Malware Dashboard: 0.20%. # Stop Forum Spam (SFS) listings: 2,285. # Updated: 2019.09.15 2604:6880::/32 Deny Cloud Origin: CA 2a0a:9204:ab6d::/48 Deny Cloud Origin: DE Tag: Yesup Ecommerce # ASN 30475 ("Handy Networks, LLC"). # %Listed, Google Malware Dashboard: 0.13%. # Stop Forum Spam (SFS) listings: 478. # Updated: 2018.07.09 / Checked: 2019.09.06 2602:fff6:d::/48 Deny Cloud 2606:6680:6::/48 Deny Cloud 2607:fc88::/32 Deny Cloud Origin: US Tag: Handy Networks # ASN 31863 ("Centrilogic, Inc"). # (Can omit anything under 44../8; clean). # %Listed, Google Malware Dashboard: 0.49%. # Stop Forum Spam (SFS) listings: 816. # Updated: 2018.08.06 / Checked: 2019.06.03 2602:ff96:3::/48 Deny Cloud 2602:ff96:7::/48 Deny Cloud 2607:5600::/32 Deny Cloud 2607:6980:2730::/44 Deny Cloud Origin: US Tag: Centrilogic # ASNs 37958, 63541 ("Beijing Blue I.T Technologies Co.,Ltd"). # %Listed, Google Malware Dashboard: 0.08% (AS63541). # Stop Forum Spam (SFS) listings: 50 (AS63541). # Updated: 2018.12.11 / Checked: 2019.05.01 2400:e140:0:3000::/64 Deny Cloud 2400:e140:1000::/48 Deny Cloud 2400:e140:3000::/48 Deny Cloud Origin: CN Tag: Beijing Blue # ASN 53340 ("VegasNAP, LLC"). # %Listed, Google Malware Dashboard: 0.38%. # Stop Forum Spam (SFS) listings: 82. # Updated: 2017.07.27 / Checked: 2019.06.03 2604:2280::/40 Deny Cloud 2604:2280:4100::/40 Deny Cloud 2604:2280:ff00::/40 Deny Cloud 2605:6f80:ffff::/48 Deny Cloud 2606:6680:5::/48 Deny Cloud Origin: US Tag: VegasNAP, LLC # ASNs 34702, 34729 ("Aktsiaselts WaveCom"). # %Listed, Google Malware Dashboard: 0.14% (AS34702). # Stop Forum Spam (SFS) listings: 4,032 (AS34702). # Updated: 2018.12.19 / Checked: 2019.05.07 2a01:97a0::/32 Deny Cloud 2a0c:36c7::/32 Deny Cloud Origin: EE Tag: Aktsiaselts # ASN 54290 ("Hostwinds LLC"). # %Listed, Google Malware Dashboard: 0.31%. # Stop Forum Spam (SFS) listings: 166. # Updated: 2019.03.26 / Checked: 2019.08.04 2a06:4700::/29 Deny Cloud 2a0d:7c40::/29 Deny Cloud Origin: NL 2607:5500::/31 Deny Cloud Origin: US Tag: Hostwinds LLC # ASN 8342 ("OJSC RTComm.RU"). # %Listed, Google Malware Dashboard: 0.37%. # Stop Forum Spam (SFS) listings: 153. # Updated: 2016.04.23 / Checked: 2019.04.29 2001:1bb0::/32 Deny Cloud Origin: RU Tag: OJSC RTComm.RU # ASN 9123 ("OOO TimeWeb"). # Split to ISPs signature files: # - "residential ethernet networks". # - "trade center public wi-fi & campus connectivity". # - "bank campus network & e-commerce cluster". # - "corporate internet gate". # ^.*(residential|trade center|campus connectivity|bank campus|corporate internet gate).*$ # Everything else in the cloud services signature files. # %Listed, Google Malware Dashboard: 0.71%. # Stop Forum Spam (SFS) listings: 285. # Updated: 2018.11.21 / Checked: 2019.08.03 2a03:6f00:1::/48 Deny Cloud 2a03:6f00:2::/47 Deny Cloud 2a03:6f00:4::/46 Deny Cloud Origin: RU Tag: OOO TimeWeb # ASN 10098 ("Henderson Data Centre Limited"). # Some residual evidence of spamming via MegaRBL. # Updated: 2016.04.23 / Checked: 2019.09.05 2407:7200::/32 Deny Cloud Origin: HK Tag: Henderson # ASN 15967 ("Nazwa.pl Sp.z.o.o"). # %Listed, Google Malware Dashboard: 0.43%. # Stop Forum Spam (SFS) listings: 43. # Updated: 2016.04.23 / Checked: 2019.05.07 2a01:6100::/32 Deny Cloud Origin: PL Tag: Nazwa.pl # ASN 18450 ("WebNX, Inc"). # Contains proxy entries (careful when updating). # %Listed, Google Malware Dashboard: 0.20%. # Stop Forum Spam (SFS) listings: 51. # Updated: 2018.11.02 / Checked: 2019.04.13 2607:f2d8::/32 Deny Cloud Origin: US Tag: WebNX, Inc # ASN 198068 ("FASTVPS EESTI OU"). # %Listed, Google Malware Dashboard: 0.12%. # Stop Forum Spam (SFS) listings: 159. # Updated: 2017.06.28 / Checked: 2019.08.29 2a03:f480:1::/48 Deny Cloud 2a03:f480:2::/48 Deny Cloud Origin: EE Tag: FASTVPS EESTI OU # ASN 43513 ("Sia Nano IT"). # Stop Forum Spam (SFS) listings: 753. # Updated: 2019.09.05 2a00:c68::/32 Deny Cloud 2a02:7aa0:4000::/48 Deny Cloud 2a05:8700::/29 Deny Cloud Origin: LV Tag: Sia Nano IT # ASNs 7224, 14618, 16509, 38895, 62785 ("Amazon.com, Inc"). # ASNs 8987, 9059, 395343 ("Amazon Data Services"). # (Just those ASNs. Don't expand this section in the future). Remove when # updating due to false positive risk: 203.83.220.0/22 ("Amazon.com Tech Telecom"), # as well as anything marked as "invalid". Also check out the Amazon blocklist # provided by Macmathan (can be installed via the front-end). # Updated: 2019.08.01 2403:b300::/32 Run rules_specific.php Origin: AU 2804:800::/32 Run rules_specific.php Origin: BR 2a05:d000:2000::/40 Run rules_specific.php 2a05:d000:6000::/40 Run rules_specific.php 2a05:d000:c000::/40 Run rules_specific.php 2a05:d000:e000::/40 Run rules_specific.php 2a05:d012::/36 Run rules_specific.php 2a05:d014::/36 Run rules_specific.php 2a05:d016::/36 Run rules_specific.php 2a05:d018::/36 Run rules_specific.php 2a05:d01c::/36 Run rules_specific.php 2a05:d01e::/36 Run rules_specific.php 2a05:d050:2040::/44 Run rules_specific.php 2a05:d050:2080::/44 Run rules_specific.php 2a05:d050:20c0::/44 Run rules_specific.php 2a05:d050:4040::/44 Run rules_specific.php 2a05:d050:4080::/44 Run rules_specific.php 2a05:d050:40c0::/44 Run rules_specific.php 2a05:d050:6040::/44 Run rules_specific.php 2a05:d050:6080::/44 Run rules_specific.php 2a05:d050:60c0::/44 Run rules_specific.php 2a05:d050:8010::/44 Run rules_specific.php 2a05:d050:8020::/44 Run rules_specific.php 2a05:d050:8040::/43 Run rules_specific.php 2a05:d050:8060::/44 Run rules_specific.php 2a05:d050:8080::/43 Run rules_specific.php 2a05:d050:80a0::/44 Run rules_specific.php 2a05:d050:80c0::/44 Run rules_specific.php 2a05:d050:80e0::/44 Run rules_specific.php 2a05:d050:a040::/44 Run rules_specific.php 2a05:d050:a080::/44 Run rules_specific.php 2a05:d050:a0c0::/44 Run rules_specific.php 2a05:d050:c040::/44 Run rules_specific.php 2a05:d050:c080::/44 Run rules_specific.php 2a05:d050:c0c0::/44 Run rules_specific.php 2a05:d050:e040::/44 Run rules_specific.php 2a05:d050:e080::/44 Run rules_specific.php 2a05:d050:e0c0::/44 Run rules_specific.php Origin: IE 2400:6700::/32 Run rules_specific.php Origin: JP 2400:6500::/32 Run rules_specific.php Origin: SG 2406:da00:2000::/40 Run rules_specific.php 2406:da00:6000::/40 Run rules_specific.php 2406:da00:a000::/40 Run rules_specific.php 2406:da00:e000::/40 Run rules_specific.php 2406:da00:ff00::/48 Run rules_specific.php 2406:da12::/36 Run rules_specific.php 2406:da14::/36 Run rules_specific.php 2406:da16::/36 Run rules_specific.php 2406:da18::/36 Run rules_specific.php 2406:da1a::/36 Run rules_specific.php 2406:da1c::/36 Run rules_specific.php 2406:da1e::/36 Run rules_specific.php 2406:daa0:1080::/44 Run rules_specific.php 2406:daa0:10c0::/44 Run rules_specific.php 2406:daa0:2040::/44 Run rules_specific.php 2406:daa0:2080::/44 Run rules_specific.php 2406:daa0:20c0::/44 Run rules_specific.php 2406:daa0:4020::/44 Run rules_specific.php 2406:daa0:4040::/44 Run rules_specific.php 2406:daa0:4060::/44 Run rules_specific.php 2406:daa0:4080::/44 Run rules_specific.php 2406:daa0:6080::/44 Run rules_specific.php 2406:daa0:8020::/44 Run rules_specific.php 2406:daa0:8080::/44 Run rules_specific.php 2406:daa0:80c0::/44 Run rules_specific.php 2406:daa0:a040::/44 Run rules_specific.php 2406:daa0:a080::/44 Run rules_specific.php 2406:daa0:a0c0::/44 Run rules_specific.php 2406:daa0:c020::/44 Run rules_specific.php 2406:daa0:c040::/44 Run rules_specific.php 2406:daa0:c080::/44 Run rules_specific.php 2406:daa0:c0a0::/44 Run rules_specific.php 2406:daa0:c0c0::/44 Run rules_specific.php 2406:daa0:e040::/44 Run rules_specific.php 2406:daa0:e080::/44 Run rules_specific.php 2406:daa0:e0c0::/44 Run rules_specific.php 2600:1f00:1000::/40 Run rules_specific.php 2600:1f00:5000::/40 Run rules_specific.php 2600:1f00:6000::/40 Run rules_specific.php 2600:1f01:4800::/47 Run rules_specific.php 2600:1f01:4810::/47 Run rules_specific.php 2600:1f01:4820::/47 Run rules_specific.php 2600:1f01:4830::/47 Run rules_specific.php 2600:1f01:4840::/47 Run rules_specific.php 2600:1f01:4844::/47 Run rules_specific.php 2600:1f01:4850::/47 Run rules_specific.php 2600:1f01:4860::/47 Run rules_specific.php 2600:1f01:4870::/47 Run rules_specific.php 2600:1f01:4880::/47 Run rules_specific.php 2600:1f01:4890::/47 Run rules_specific.php 2600:1f01:48a0::/47 Run rules_specific.php 2600:1f01:48b0::/47 Run rules_specific.php 2600:1f01:48c0::/47 Run rules_specific.php 2600:1f01:48d0::/46 Run rules_specific.php 2600:1f01:48e0::/47 Run rules_specific.php 2600:1f11::/36 Run rules_specific.php 2600:1f12::/36 Run rules_specific.php 2600:1f14::/35 Run rules_specific.php 2600:1f15::/36 Run rules_specific.php 2600:1f16::/36 Run rules_specific.php 2600:1f18::/33 Run rules_specific.php 2600:1f1c::/36 Run rules_specific.php 2600:1f1e::/36 Run rules_specific.php 2600:1fa0:1040::/44 Run rules_specific.php 2600:1fa0:1080::/44 Run rules_specific.php 2600:1fa0:10c0::/44 Run rules_specific.php 2600:1fa0:2040::/44 Run rules_specific.php 2600:1fa0:2080::/44 Run rules_specific.php 2600:1fa0:20c0::/44 Run rules_specific.php 2600:1fa0:4020::/44 Run rules_specific.php 2600:1fa0:4040::/44 Run rules_specific.php 2600:1fa0:4060::/44 Run rules_specific.php 2600:1fa0:4080::/44 Run rules_specific.php 2600:1fa0:40a0::/44 Run rules_specific.php 2600:1fa0:40c0::/44 Run rules_specific.php 2600:1fa0:40e0::/44 Run rules_specific.php 2600:1fa0:5040::/44 Run rules_specific.php 2600:1fa0:5080::/44 Run rules_specific.php 2600:1fa0:50c0::/44 Run rules_specific.php 2600:1fa0:6040::/44 Run rules_specific.php 2600:1fa0:6080::/44 Run rules_specific.php 2600:1fa0:60c0::/44 Run rules_specific.php 2600:1fa0:8010::/44 Run rules_specific.php 2600:1fa0:8020::/44 Run rules_specific.php 2600:1fa0:8040::/43 Run rules_specific.php 2600:1fa0:8060::/44 Run rules_specific.php 2600:1fa0:8080::/43 Run rules_specific.php 2600:1fa0:80a0::/44 Run rules_specific.php 2600:1fa0:80c0::/44 Run rules_specific.php 2600:1fa0:80e0::/44 Run rules_specific.php 2600:1fa0:c020::/44 Run rules_specific.php 2600:1fa0:c040::/44 Run rules_specific.php 2600:1fa0:c0c0::/44 Run rules_specific.php 2600:1fa0:e020::/44 Run rules_specific.php 2600:1fa0:e040::/44 Run rules_specific.php 2600:1fa0:e080::/44 Run rules_specific.php 2600:1fa0:e0c0::/44 Run rules_specific.php 2600:9000:1001::/48 Run rules_specific.php 2600:9000:1002::/47 Run rules_specific.php 2600:9000:1004::/48 Run rules_specific.php 2600:9000:1006::/47 Run rules_specific.php 2600:9000:1008::/46 Run rules_specific.php 2600:9000:100c::/47 Run rules_specific.php 2600:9000:100f::/48 Run rules_specific.php 2600:9000:1010::/46 Run rules_specific.php 2600:9000:1015::/48 Run rules_specific.php 2600:9000:1016::/47 Run rules_specific.php 2600:9000:1018::/46 Run rules_specific.php 2600:9000:101c::/47 Run rules_specific.php 2600:9000:101f::/48 Run rules_specific.php 2600:9000:1020::/45 Run rules_specific.php 2600:9000:1028::/48 Run rules_specific.php 2600:9000:102a::/47 Run rules_specific.php 2600:9000:102d::/48 Run rules_specific.php 2600:9000:102f::/48 Run rules_specific.php 2600:9000:1030::/48 Run rules_specific.php 2600:9000:1035::/48 Run rules_specific.php 2600:9000:1036::/47 Run rules_specific.php 2600:9000:1038::/45 Run rules_specific.php 2600:9000:1040::/46 Run rules_specific.php 2600:9000:1044::/48 Run rules_specific.php 2600:9000:1046::/47 Run rules_specific.php 2600:9000:1048::/45 Run rules_specific.php 2600:9000:1077::/48 Run rules_specific.php 2600:9000:1078::/45 Run rules_specific.php 2600:9000:1080::/46 Run rules_specific.php 2600:9000:1084::/48 Run rules_specific.php 2600:9000:1086::/47 Run rules_specific.php 2600:9000:1089::/48 Run rules_specific.php 2600:9000:108a::/48 Run rules_specific.php 2600:9000:108c::/46 Run rules_specific.php 2600:9000:1090::/44 Run rules_specific.php 2600:9000:10a0::/43 Run rules_specific.php 2600:9000:10c1::/48 Run rules_specific.php 2600:9000:10c2::/47 Run rules_specific.php 2600:9000:10c4::/46 Run rules_specific.php 2600:9000:10c8::/48 Run rules_specific.php 2600:9000:10cb::/48 Run rules_specific.php 2600:9000:10cd::/48 Run rules_specific.php 2600:9000:10ce::/47 Run rules_specific.php 2600:9000:10d0::/46 Run rules_specific.php 2600:9000:10d4::/48 Run rules_specific.php 2600:9000:10d6::/47 Run rules_specific.php 2600:9000:10d8::/45 Run rules_specific.php 2600:9000:10e0::/48 Run rules_specific.php 2600:9000:10e2::/47 Run rules_specific.php 2600:9000:10e4::/48 Run rules_specific.php 2600:9000:10e8::/45 Run rules_specific.php 2600:9000:10f0::/47 Run rules_specific.php 2600:9000:10f2::/48 Run rules_specific.php 2600:9000:10f4::/48 Run rules_specific.php 2600:9000:10f6::/48 Run rules_specific.php 2600:9000:10f8::/46 Run rules_specific.php 2600:9000:10fc::/47 Run rules_specific.php 2600:9000:10ff::/48 Run rules_specific.php 2600:9000:1103::/48 Run rules_specific.php 2600:9000:1107::/48 Run rules_specific.php 2600:9000:1109::/48 Run rules_specific.php 2600:9000:110b::/48 Run rules_specific.php 2600:9000:110c::/48 Run rules_specific.php 2600:9000:1111::/48 Run rules_specific.php 2600:9000:1113::/48 Run rules_specific.php 2600:9000:1115::/48 Run rules_specific.php 2600:9000:1116::/47 Run rules_specific.php 2600:9000:1118::/47 Run rules_specific.php 2600:9000:111a::/48 Run rules_specific.php 2600:9000:111e::/47 Run rules_specific.php 2600:9000:1120::/48 Run rules_specific.php 2600:9000:1122::/47 Run rules_specific.php 2600:9000:1124::/48 Run rules_specific.php 2600:9000:1128::/47 Run rules_specific.php 2600:9000:112a::/48 Run rules_specific.php 2600:9000:112e::/47 Run rules_specific.php 2600:9000:1130::/47 Run rules_specific.php 2600:9000:113b::/48 Run rules_specific.php 2600:9000:2000::/46 Run rules_specific.php 2600:9000:2004::/47 Run rules_specific.php 2600:9000:2007::/48 Run rules_specific.php 2600:9000:2008::/46 Run rules_specific.php 2600:9000:200c::/47 Run rules_specific.php 2600:9000:200f::/48 Run rules_specific.php 2600:9000:2010::/46 Run rules_specific.php 2600:9000:2015::/48 Run rules_specific.php 2600:9000:2016::/48 Run rules_specific.php 2600:9000:2018::/46 Run rules_specific.php 2600:9000:201c::/47 Run rules_specific.php 2600:9000:201f::/48 Run rules_specific.php 2600:9000:2020::/45 Run rules_specific.php 2600:9000:202b::/48 Run rules_specific.php 2600:9000:202c::/47 Run rules_specific.php 2600:9000:202f::/48 Run rules_specific.php 2600:9000:2032::/48 Run rules_specific.php 2600:9000:2036::/48 Run rules_specific.php 2600:9000:2038::/47 Run rules_specific.php 2600:9000:203a::/48 Run rules_specific.php 2600:9000:203c::/46 Run rules_specific.php 2600:9000:2041::/48 Run rules_specific.php 2600:9000:2042::/47 Run rules_specific.php 2600:9000:2044::/48 Run rules_specific.php 2600:9000:2046::/47 Run rules_specific.php 2600:9000:2048::/48 Run rules_specific.php 2600:9000:204a::/47 Run rules_specific.php 2600:9000:204c::/48 Run rules_specific.php 2600:9000:204e::/47 Run rules_specific.php 2600:9000:2055::/48 Run rules_specific.php 2600:9000:2056::/47 Run rules_specific.php 2600:9000:205c::/48 Run rules_specific.php 2600:9000:205e::/47 Run rules_specific.php 2600:9000:2061::/48 Run rules_specific.php 2600:9000:2062::/47 Run rules_specific.php 2600:9000:2064::/47 Run rules_specific.php 2600:9000:2066::/48 Run rules_specific.php 2600:9000:206f::/48 Run rules_specific.php 2600:9000:2070::/45 Run rules_specific.php 2600:9000:2078::/47 Run rules_specific.php 2600:9000:207b::/48 Run rules_specific.php 2600:9000:207c::/47 Run rules_specific.php 2600:9000:207f::/48 Run rules_specific.php 2600:9000:2086::/48 Run rules_specific.php 2600:9000:208a::/47 Run rules_specific.php 2600:9000:208e::/48 Run rules_specific.php 2600:9000:2090::/46 Run rules_specific.php 2600:9000:2095::/48 Run rules_specific.php 2600:9000:2097::/48 Run rules_specific.php 2600:9000:2098::/46 Run rules_specific.php 2600:9000:209c::/48 Run rules_specific.php 2600:9000:209f::/48 Run rules_specific.php 2600:9000:20a3::/48 Run rules_specific.php 2600:9000:20a5::/48 Run rules_specific.php 2600:9000:20a9::/48 Run rules_specific.php 2600:9000:20aa::/47 Run rules_specific.php 2600:9000:20ac::/47 Run rules_specific.php 2600:9000:20b0::/48 Run rules_specific.php 2600:9000:20b5::/48 Run rules_specific.php 2600:9000:20b9::/48 Run rules_specific.php 2600:9000:20ba::/47 Run rules_specific.php 2600:9000:20bc::/47 Run rules_specific.php 2600:9000:20be::/48 Run rules_specific.php 2600:9000:20c0::/47 Run rules_specific.php 2600:9000:20c3::/48 Run rules_specific.php 2600:9000:20c5::/48 Run rules_specific.php 2600:9000:20c6::/47 Run rules_specific.php 2600:9000:20cb::/48 Run rules_specific.php 2600:9000:20cc::/47 Run rules_specific.php 2600:9000:20d0::/45 Run rules_specific.php 2600:9000:20d8::/47 Run rules_specific.php 2600:9000:20da::/48 Run rules_specific.php 2600:9000:20de::/48 Run rules_specific.php 2600:9000:20e0::/48 Run rules_specific.php 2600:9000:20e9::/48 Run rules_specific.php 2600:9000:20eb::/48 Run rules_specific.php 2600:9000:20ec::/47 Run rules_specific.php 2600:9000:20f2::/48 Run rules_specific.php 2600:9000:20f4::/48 Run rules_specific.php 2600:9000:20f7::/48 Run rules_specific.php 2600:9000:20f8::/46 Run rules_specific.php 2600:9000:20fc::/47 Run rules_specific.php 2600:9000:20fe::/48 Run rules_specific.php 2600:9000:2101::/48 Run rules_specific.php 2600:9000:2102::/47 Run rules_specific.php 2600:9000:2104::/46 Run rules_specific.php 2600:9000:2108::/46 Run rules_specific.php 2600:9000:210e::/48 Run rules_specific.php 2600:9000:2110::/48 Run rules_specific.php 2600:9000:2114::/47 Run rules_specific.php 2600:9000:2116::/48 Run rules_specific.php 2600:9000:2119::/48 Run rules_specific.php 2600:9000:211a::/47 Run rules_specific.php 2600:9000:211c::/46 Run rules_specific.php 2600:9000:2120::/45 Run rules_specific.php 2600:9000:2128::/48 Run rules_specific.php 2600:9000:212a::/48 Run rules_specific.php 2600:9000:212c::/46 Run rules_specific.php 2600:9000:2130::/45 Run rules_specific.php 2600:9000:2139::/48 Run rules_specific.php 2600:9000:213a::/48 Run rules_specific.php 2600:9000:213c::/46 Run rules_specific.php 2600:9000:2143::/48 Run rules_specific.php 2600:9000:2144::/47 Run rules_specific.php 2600:9000:2146::/48 Run rules_specific.php 2600:9000:214a::/48 Run rules_specific.php 2600:9000:214c::/47 Run rules_specific.php 2600:9000:2151::/48 Run rules_specific.php 2600:9000:2152::/47 Run rules_specific.php 2600:9000:2156::/48 Run rules_specific.php 2600:9000:2159::/48 Run rules_specific.php 2600:9000:215a::/47 Run rules_specific.php 2600:9000:215c::/48 Run rules_specific.php 2600:9000:215e::/47 Run rules_specific.php 2600:9000:2160::/47 Run rules_specific.php 2600:9000:2164::/46 Run rules_specific.php 2600:9000:2168::/45 Run rules_specific.php 2600:9000:2170::/48 Run rules_specific.php 2600:9000:2172::/47 Run rules_specific.php 2600:9000:2174::/47 Run rules_specific.php 2600:9000:2176::/48 Run rules_specific.php 2600:9000:217a::/48 Run rules_specific.php 2600:9000:217c::/48 Run rules_specific.php 2600:9000:217f::/48 Run rules_specific.php 2600:9000:2180::/46 Run rules_specific.php 2600:9000:2184::/47 Run rules_specific.php 2600:9000:2187::/48 Run rules_specific.php 2600:9000:2188::/45 Run rules_specific.php 2600:9000:2191::/48 Run rules_specific.php 2600:9000:2195::/48 Run rules_specific.php 2600:9000:2196::/48 Run rules_specific.php 2600:9000:2199::/48 Run rules_specific.php 2600:9000:219a::/47 Run rules_specific.php 2600:9000:219c::/46 Run rules_specific.php 2600:9000:21a0::/48 Run rules_specific.php 2600:9000:21a2::/47 Run rules_specific.php 2600:9000:21a4::/46 Run rules_specific.php 2600:9000:21a8::/48 Run rules_specific.php 2600:9000:21ab::/48 Run rules_specific.php 2600:9000:21ac::/46 Run rules_specific.php 2600:9000:21b0::/45 Run rules_specific.php 2600:9000:21b8::/48 Run rules_specific.php 2600:9000:21bc::/46 Run rules_specific.php 2600:9000:21c0::/48 Run rules_specific.php 2600:9000:21c6::/48 Run rules_specific.php 2600:9000:21d1::/48 Run rules_specific.php 2600:9000:21d2::/47 Run rules_specific.php 2600:9000:21d4::/47 Run rules_specific.php 2600:9000:21d8::/48 Run rules_specific.php 2600:9000:21da::/48 Run rules_specific.php 2600:9000:21dd::/48 Run rules_specific.php 2600:9000:21e0::/48 Run rules_specific.php 2600:9000:21ea::/47 Run rules_specific.php 2600:9000:21ec::/48 Run rules_specific.php 2600:9000:21f2::/47 Run rules_specific.php 2600:9000:21f8::/48 Run rules_specific.php 2600:9000:5300::/45 Run rules_specific.php 2600:9000:f110::/48 Run rules_specific.php 2600:9000:f140::/48 Run rules_specific.php 2600:9000:f150::/48 Run rules_specific.php 2600:9000:f211::/48 Run rules_specific.php 2600:9000:f213::/48 Run rules_specific.php 2600:9000:f530::/47 Run rules_specific.php 2620:107:300f::/48 Run rules_specific.php 2620:108:7000::/44 Run rules_specific.php 2620:108:d000::/44 Run rules_specific.php 2a01:578::/32 Run rules_specific.php Origin: US Tag: Amazon.com, Inc # ASN 62282 ("UAB Rakrejus"). # %Listed, Google Malware Dashboard: 0.24%. # Stop Forum Spam (SFS) listings: 17,042. # Updated: 2016.10.01 / Checked: 2019.06.20 2a01:41a0::/32 Deny Cloud 2a02:7b40::/32 Deny Cloud Origin: LT Tag: UAB Rakrejus # ASNs 22611, 54641 ("InMotion Hosting, Inc"). # %Listed, Google Malware Dashboard: 0.25% (AS22611), 0.18% (AS54641). # Stop Forum Spam (SFS) listings: 1 (AS22611). # Updated: 2017.11.29 / Checked: 2019.06.28 2605:f400:2::/47 Deny Cloud Origin: US Tag: InMotion Hosting, Inc # ASN 45638 ("SYNERGY WHOLESALE PTY LTD"). # %Listed, Google Malware Dashboard: 0.17%. # Updated: 2019.09.05 2400:8f80::/47 Deny Cloud 2400:b800::/46 Deny Cloud 2400:b800:4::/47 Deny Cloud 2400:b800:6::/48 Deny Cloud Origin: AU Tag: SYNERGY WHOLESALE # ASN 45538 ("Online data services"). # %Listed, Google Malware Dashboard: 0.06%. # Stop Forum Spam (SFS) listings: 356. # Updated: 2016.12.05 / Checked: 2019.04.18 2405:9d80::/32 Deny Cloud Origin: VN Tag: AS45538 # ASN 37963 ("Hangzhou Alibaba Advertising Co.,Ltd."). # %Listed, Google Malware Dashboard: 0.71%. # Stop Forum Spam (SFS) listings: 2,821. # Updated: 2018.10.14 / Checked: 2019.08.22 2400:3200::/32 Deny Cloud 2400:b200::/32 Deny Cloud 2401:2e00::/32 Deny Cloud 2401:b180::/32 Deny Cloud 2405:e000::/32 Deny Cloud 2407:bc00::/32 Deny Cloud 2408:4000::/22 Deny Cloud Origin: CN Tag: Alibaba Advertising # ASN 45090 ("Shenzhen Tencent Computer Systems Company Limited"). # %Listed, Google Malware Dashboard: 0.78%. # Stop Forum Spam (SFS) listings: 1,597. # Updated: 2016.11.25 / Checked: 2019.05.19 2402:4e00::/32 Deny Cloud Origin: CN Tag: Shenzhen Tencent # ASN 24413 ("ShenZhen Sunrise Technology Co.,Ltd"). # %Listed, Google Malware Dashboard: 4.17%. # Stop Forum Spam (SFS) listings: 1. # Updated: 2018.08.05 / Checked: 2019.08.01 2402:33c0::/32 Deny Cloud Origin: CN Tag: ShenZhen Sunrise # ASN 39572 ("DataWeb Global Group B.V"). # %Listed, Google Malware Dashboard: 0.07%. # Stop Forum Spam (SFS) listings: 508. # Updated: 2019.08.13 2a02:b48::/31 Deny Cloud 2a02:b4a::/32 Deny Cloud 2a02:b4b::/48 Deny Cloud Origin: NL Tag: DataWeb Global # ASN 44112 ("SpaceWeb Ltd"). # %Listed, Google Malware Dashboard: 0.16%. # Stop Forum Spam (SFS) listings: 2. # Updated: 2016.04.29 / Checked: 2019.09.06 2a02:408:7722::/48 Deny Cloud Origin: RU Tag: SpaceWeb Ltd # ASN 43391 ("Netdirekt A.S"). # %Listed, Google Malware Dashboard: 0.16%. # Stop Forum Spam (SFS) listings: 58. # Updated: 2016.04.29 / Checked: 2019.07.04 2a01:aac0::/32 Deny Cloud Origin: TR Tag: Netdirekt A.S # ASN 42730 ("EVANZO e-commerce GmbH"). # %Listed, Google Malware Dashboard: 0.63%. # Stop Forum Spam (SFS) listings: 171. # Updated: 2016.04.29 / Checked: 2019.09.15 2a00:6800::/32 Deny Cloud Origin: DE Tag: EVANZO GmbH # ASN 38478 ("SunnyVision Limited"). # %Listed, Google Malware Dashboard: 1.46%. # Stop Forum Spam (SFS) listings: 136. # Updated: 2016.05.01 / Checked: 2019.05.19 2400:f100::/47 Deny Cloud 2400:f100:2::/48 Deny Cloud Origin: HK Tag: SunnyVision Limited # ASN 37943 ("ZhengZhou GIANT Computer Network Technology Co., Ltd"). # %Listed, Google Malware Dashboard: 1.82%. # Stop Forum Spam (SFS) listings: 10. # Updated: 2016.05.01 / Checked: 2019.09.01 2400:a480::/32 Deny Cloud Origin: CN Tag: ZhengZhou GIANT # ASN 34233 ("Superior B.V"). # %Listed, Google Malware Dashboard: 0.30%. # Updated: 2016.12.10 / Checked: 2019.04.29 2a00:a0c0::/32 Deny Cloud 2a06:f700::/29 Deny Cloud Origin: NL Tag: Superior B.V # ASN 27715 ("Locaweb Servios de Internet S/A"). # %Listed, Google Malware Dashboard: 0.18%. # Stop Forum Spam (SFS) listings: 760. # Updated: 2016.05.01 / Checked: 2019.07.04 2804:218::/32 Deny Cloud Origin: BR Tag: Locaweb # ASN 24446 ("NetRegistry Pty Ltd"). # %Listed, Google Malware Dashboard: 0.28%. # Updated: 2016.05.01 / Checked: 2019.09.08 2403:1400::/32 Deny Cloud Origin: AU Tag: NetRegistry Pty Ltd # ASN 22552 ("eSited Solutions"). # %Listed, Google Malware Dashboard: 2.67%. # Stop Forum Spam (SFS) listings: 422. # Updated: 2017.08.25 / Checked: 2019.05.02 2604:4480::/32 Deny Cloud Origin: US Tag: eSited Solutions # ASN 21155 ("ProServe B.V"). # %Listed, Google Malware Dashboard: 0.07%. # Updated: 2019.05.22 2001:678:10c::/48 Deny Cloud 2001:67c:2d0::/48 Deny Cloud 2001:67c:2390::/48 Deny Cloud 2001:67c:23c4::/48 Deny Cloud 2001:828::/32 Deny Cloud 2a03:3b00::/32 Deny Cloud Origin: NL Tag: ProServe B.V # ASN 39326 ("HighSpeed Office Limited"). # Stop Forum Spam (SFS) listings: 249. # Updated: 2019.05.22 2a03:f80:33::/48 Deny Cloud 2a03:f80:441::/48 Deny Cloud Origin: AT 2001:a08::/32 Deny Cloud 2a01:348::/32 Deny Cloud 2a03:94c0::/40 Deny Cloud Origin: GB 2a03:f80:44::/48 Deny Cloud Origin: IM Tag: HighSpeed Office Ltd # ASN 47447 ("23Media GmbH"). # %Listed, Google Malware Dashboard: 0.33%. # Stop Forum Spam (SFS) listings: 2,385. # Updated: 2019.06.02 2a03:f80:49::/48 Deny Cloud Origin: AT 2a05:3c80::/29 Deny Cloud Origin: CZ 2a00:f48::/32 Deny Cloud 2a05:cc00::/29 Deny Cloud 2a06:8781::/48 Deny Cloud 2a09:4ec0::/48 Deny Cloud 2a0c:2040::/29 Deny Cloud 2a0d:6940::/29 Deny Cloud Origin: DE 2a02:2da0::/32 Deny Cloud 2a07:a347::/32 Deny Cloud Origin: GB 2a07:3b80:1::/48 Deny Cloud Origin: GI 2a0c:ef02::/32 Deny Cloud Origin: NL 2a0a:6c0::/29 Deny Cloud Origin: US Tag: 23Media GmbH # ASN 49544 ("i3d B.V"). # %Listed, Google Malware Dashboard: 0.08%. # Stop Forum Spam (SFS) listings: 284. # Updated: 2019.05.07 2403:1480:9000::/36 Deny Cloud Origin: AU 2a06:7a00::/48 Deny Cloud Origin: EU 2402:c080::/31 Deny Cloud Origin: JP 2a00:1630::/29 Deny Cloud 2a00:1708::/32 Deny Cloud 2a00:1d20::/32 Deny Cloud 2a03:3a60::/32 Deny Cloud 2a04:c600::/29 Deny Cloud 2a05:6440::/29 Deny Cloud 2a09:4f80:1::/48 Deny Cloud 2a0a:5980::/29 Deny Cloud 2a0b:1b00::/29 Deny Cloud 2a0b:d9c0:164::/47 Deny Cloud 2a0b:f380::/48 Deny Cloud 2a0b:f380:3e8::/48 Deny Cloud Origin: NL 2402:b180:9000::/36 Deny Cloud Origin: SG Tag: i3d B.V # ASN 50673 ("Serverius Holding B.V"). # %Listed, Google Malware Dashboard: 0.21%. # Stop Forum Spam (SFS) listings: 4,222. # Updated: 2019.08.01 2001:67c:b0::/48 Deny Cloud 2001:7f8:e::/48 Deny Cloud 2a00:1ca8::/32 Deny Cloud 2a00:8ee0::/31 Deny Cloud 2a00:dfa0::/32 Deny Cloud 2a01:74e0::/32 Deny Cloud 2a02:1680::/32 Deny Cloud 2a02:40c0:1000::/48 Deny Cloud 2a03:3f40::/32 Deny Cloud 2a05:e1c0::/29 Deny Cloud 2a06:8000::/29 Deny Cloud 2a09:e40::/32 Deny Cloud 2a09:aa80::/32 Deny Cloud 2a0a:3f40::/32 Deny Cloud 2a0a:6f80::/32 Deny Cloud 2a0a:aa40::/32 Deny Cloud 2a0c:a340::/29 Deny Cloud 2a0c:f200::/29 Deny Cloud Origin: NL 2a07:c800::/29 Deny Cloud Origin: UA Tag: Serverius Holding # ASN 20857 ("Transip B.V"). # %Listed, Google Malware Dashboard: 0.24%. # Stop Forum Spam (SFS) listings: 113. # Updated: 2017.11.12 / Checked: 2019.08.22 2a01:7c8::/32 Deny Cloud Origin: NL Tag: Transip B.V # ASN 207083 ("HostSlim BV"). # Stop Forum Spam (SFS) listings: 546. # Updated: 2019.03.13 / Checked: 2019.07.18 2a06:a006:f3::/48 Deny Cloud Origin: IS 2a06:4140::/29 Deny Cloud 2a06:5b80::/32 Deny Cloud 2a06:5b87::/32 Deny Cloud 2a09:3c00:1::/48 Deny Cloud 2a0d:7fc0::/29 Deny Cloud Origin: NL Tag: HostSlim BV # ASN 43350 ("NForce Entertainment B.V"). # Ranges change frequently / Should update often. # %Listed, Google Malware Dashboard: 0.31%. # Stop Forum Spam (SFS) listings: 265,456. # Updated: 2019.05.21 2a04:b040::/47 Deny Cloud 2a04:b040:2::/48 Deny Cloud 2a0b:8400::/47 Deny Cloud Origin: EE 2a02:2ca0::/32 Deny Cloud 2a07:9942:39d8::/48 Deny Cloud Origin: EU 2a0d:f802:2f2::/48 Deny Cloud Origin: GB 2a00:1768::/34 Deny Cloud 2a00:1768:4000::/35 Deny Cloud 2a00:1768:6000::/36 Deny Cloud 2a03:3740::/32 Deny Cloud 2a05:840::/48 Deny Cloud 2a05:f080::/29 Deny Cloud 2a07:bd80::/29 Deny Cloud 2a07:be80::/29 Deny Cloud 2a0d:ea80::/29 Deny Cloud Origin: NL 2a0e:2281::/32 Deny Cloud Origin: RU 2a06:e80::/36 Deny Cloud Origin: SC Tag: NForce Entertainment # ASN 55990 ("Huawei Cloud Service data center"). # %Listed, Google Malware Dashboard: 0.86%. # Stop Forum Spam (SFS) listings: 5. # Updated: 2018.12.06 / Checked: 2019.09.10 2407:c080::/36 Deny Cloud 2407:c080:1000::/37 Deny Cloud Origin: CN Tag: Huawei Cloud Service # ASN 38001 ("NewMedia Express Pte Ltd. Singapore Web Hosting Service Provider"). # Caught trying to DDoS SFS. # %Listed, Google Malware Dashboard: 0.31%. # Stop Forum Spam (SFS) listings: 370. # Updated: 2019.08.11 2402:2f80:1::/48 Deny Cloud 2402:2f80:8::/48 Deny Cloud Origin: AU 2401:df40:2::/48 Deny Cloud Origin: GI 2403:fa40:1::/48 Deny Cloud Origin: NL 2406:f400::/32 Deny Cloud 2407:2f00:103::/48 Deny Cloud Origin: SG Tag: NewMedia Express # ASN 3842 ("RamNode LLC"). # %Listed, Google Malware Dashboard: 0.24%. # Stop Forum Spam (SFS) listings: 82. # Updated: 2017.12.28 / Checked: 2019.05.04 2604:180::/46 Deny Cloud 2604:180:9::/48 Deny Cloud 2604:180:a::/47 Deny Cloud 2604:180:c::/48 Deny Cloud Origin: US Tag: RamNode LLC # ASN 198203 ("RouteLabel V.O.F"). # %Listed, Google Malware Dashboard: 0.88%. # Stop Forum Spam (SFS) listings: 269. # Updated: 2018.04.03 / Checked: 2019.06.03 2a00:d880::/32 Deny Cloud 2a02:50e0::/32 Deny Cloud 2a03:afe0::/29 Deny Cloud Origin: NL Tag: RouteLabel V.O.F # ASN 42632 ("MnogoByte LLC"). # %Listed, Google Malware Dashboard: 0.10%. # Stop Forum Spam (SFS) listings: 17. # Updated: 2018.08.05 / Checked: 2019.05.28 2001:67c:1688::/48 Deny Cloud 2a02:878:1::/48 Deny Cloud 2a02:878:2::/48 Deny Cloud 2a02:878:a::/48 Deny Cloud 2a02:878:10::/48 Deny Cloud 2a02:878:a801::/48 Deny Cloud 2a02:878:a80e::/48 Deny Cloud Origin: RU Tag: MnogoByte LLC # ASN 29014 ("ScaleUp Technologies GmbH & Co. KG"). # %Listed, Google Malware Dashboard: 0.38%. # Updated: 2019.07.13 2a00:12e8::/32 Deny Cloud 2a00:1c38::/47 Deny Cloud 2a00:1c39::/32 Deny Cloud 2a0b:2a40::/29 Deny Cloud 2a0b:f080::/32 Deny Cloud 2a0e:7b80::/32 Deny Cloud Origin: DE Tag: ScaleUp Technologies # ASN 13213 ("UK-2 Limited"). # %Listed, Google Malware Dashboard: 0.10%. # Stop Forum Spam (SFS) listings: 2,917. # Updated: 2018.01.08 / Checked: 2019.07.21 2a02:2498::/32 Deny Cloud Origin: GB 2a04:76c7:200::/48 Deny Cloud Origin: NL 2602:ff84::/48 Deny Cloud 2605:a80:1::/48 Deny Cloud 2a01:5a80::/32 Deny Cloud Origin: US Tag: UK-2 Limited # ASN 25525 ("Reasonnet IP Networks B.V"). # %Listed, Google Malware Dashboard: 0.29%. # Updated: 2016.05.30 / Checked: 2019.05.04 2001:67c:2b44::/48 Deny Cloud 2001:16f8::/32 Deny Cloud 2001:4198::/32 Deny Cloud Origin: NL Tag: Reasonnet IP # ASN 25820 ("IT7 Networks Inc"). # %Listed, Google Malware Dashboard: 0.77%. # Stop Forum Spam (SFS) listings: 593. # Updated: 2019.06.01 2607:8700:101::/48 Deny Cloud 2607:8700:102::/48 Deny Cloud 2607:8700:105::/48 Deny Cloud 2607:8700:106::/48 Deny Cloud 2607:8700:108::/47 Deny Cloud 2607:8700:110::/46 Deny Cloud 2607:8700:114::/48 Deny Cloud Origin: CA Tag: IT7 Networks Inc # ASN 27843 ("OPTICAL TECHNOLOGIES S.A.C"). # Stop Forum Spam (SFS) listings: 63. # Updated: 2017.12.24 / Checked: 2019.05.04 2800:120::/32 Deny Cloud 2803:1b40::/32 Deny Cloud 2803:3140::/32 Deny Cloud 2803:4220::/32 Deny Cloud 2803:8220::/32 Deny Cloud 2803:8e20::/32 Deny Cloud Origin: PE Tag: OPTICAL TECHNOLOGIES # ASNs 29302, 32780 ("Hosting Services Inc"). # %Listed, Google Malware Dashboard: 0.04% (AS32780). # Stop Forum Spam (SFS) listings: 96 (AS29302), 6,120 (AS32780). # Updated: 2017.09.22 / Checked: 2019.08.13 2607:5880::/48 Deny Cloud Origin: CA 2400:bb40:1100::/40 Deny Cloud Origin: PA 2606:2e00:8000::/48 Deny Cloud 2606:2e00:8002::/47 Deny Cloud Origin: US Tag: Hosting Services Inc # ASNs 48337, 63949 ("Linode, LLC"). # Stop Forum Spam (SFS) listings: 4,701 (AS63949). # Updated: 2019.04.21 / Checked: 2019.09.08 2a01:7e00::/31 Deny Cloud Origin: GB 2400:8901::/32 Deny Cloud Origin: SG 2400:8902::/31 Deny Cloud 2400:8904::/31 Deny Cloud 2400:8906::/32 Deny Cloud 2600:3c00::/30 Deny Cloud 2600:3c04::/32 Deny Cloud Origin: US Tag: Linode, LLC # ASN 22653 ("Cyber Wurx LLC"). # %Listed, Google Malware Dashboard: 0.15%. # Stop Forum Spam (SFS) listings: 251. # Updated: 2018.02.04 / Checked: 2019.05.19 2607:1a00::/32 Deny Cloud 2a0c:8600::/29 Deny Cloud Origin: US Tag: Cyber Wurx LLC # ASN 60117 ("Host Sailor Ltd"). # %Listed, Google Malware Dashboard: 0.55%. # Stop Forum Spam (SFS) listings: 198. # Updated: 2019.08.11 2a04:dd00::/31 Deny Cloud Origin: AE 2a03:660::/32 Deny Cloud 2a05:9340::/31 Deny Cloud 2a06:3d80::/29 Deny Cloud Origin: NL Tag: Host Sailor Ltd # ASNs 61317, 61440 ("Digital Energy Technologies"). # Ranges change frequently / Should update often. # %Listed, Google Malware Dashboard: 0.06% (AS61317), 0.23% (AS61440). # Stop Forum Spam (SFS) listings: 23,061 (AS61317), 5,040 (AS61440). # Updated: 2019.05.22 2803:80::/36 Deny Cloud 2803:80:1004::/48 Deny Cloud 2803:80:2000::/35 Deny Cloud 2803:80:4000::/34 Deny Cloud 2803:80:8000::/46 Deny Cloud Origin: CL 2a00:d1a0::/48 Deny Cloud 2a03:a960::/32 Deny Cloud 2a03:fbc0::/29 Deny Cloud 2a06:2b80::/29 Deny Cloud 2a0a:7a05::/32 Deny Cloud 2a0a:7e05::/32 Deny Cloud 2a0a:8606::/31 Deny Cloud 2a0a:9e00::/29 Deny Cloud 2a0a:a600::/48 Deny Cloud 2a0a:ae00::/29 Deny Cloud 2a0c:fa40::/29 Deny Cloud 2a0d:5c0::/29 Deny Cloud 2a0d:4b40::/29 Deny Cloud 2a0d:4c40::/29 Deny Cloud Origin: DE 2a09:4b40::/29 Deny Cloud Origin: GB 2a0e:1c04::/48 Deny Cloud Origin: LT 2602:ff62::/39 Deny Cloud 2602:ff62:200::/40 Deny Cloud 2602:ff62:ffc::/48 Deny Cloud 2602:ff62:fff::/48 Deny Cloud Origin: US 2c0f:ee78::/32 Deny Cloud 2c0f:f738:2000::/35 Deny Cloud Origin: ZA Tag: D.E.Tech # ASN 29873 ("The Endurance International Group, Inc"). # %Listed, Google Malware Dashboard: 0.19%. # Updated: 2016.06.17 / Checked: 2019.05.19 2605:f300:ffff::/48 Deny Cloud Origin: US Tag: Endurance Int # ASN 17819 ("Equinix Asia Pacific"). # Include "Upright Inc", "Equinix", and everything in HK. Ignore the rest. # ^(HK\t.*|.*Upright.*|.*Equinix.*)\x01$ # Stop Forum Spam (SFS) listings: 29. # Updated: 2019.04.23 / Checked: 2019.09.10 2404:4f00::/32 Deny Cloud Origin: AU 2404:6900::/32 Deny Cloud Origin: HK 2407:b000::/32 Deny Cloud Origin: JP Tag: Equinix Asia Pacific # ASN 16397 ("EQUINIX BRASIL SP"). # Exclude any RoA invalid entries; Include the rest. # %Listed, Google Malware Dashboard: 0.30%. # Stop Forum Spam (SFS) listings: 298. # Updated: 2019.05.02 / Checked: 2019.09.15 2001:12e8::/34 Deny Cloud Origin: BR 2001:504:0:7::/64 Deny Cloud Origin: US Tag: EQUINIX BRASIL SP # ASN 6364 ("Atlantic.net, Inc"). # %Listed, Google Malware Dashboard: 0.14%. # Stop Forum Spam (SFS) listings: 20. # Updated: 2016.07.02 / Checked: 2019.08.22 2607:f170::/32 Deny Cloud Origin: US Tag: Atlantic.net, Inc # ASN 43333 ("NEPHAX Spolka jawna Arkadiusz Kawalec Michal Podsiadly"). # %Listed, Google Malware Dashboard: 0.11%. # Stop Forum Spam (SFS) listings: 1. # Updated: 2016.07.10 / Checked: 2019.05.19 2a02:ee0::/32 Deny Cloud Origin: PL Tag: NEPHAX # ASN 52284 ("Panamaserver.com"). # Stop Forum Spam (SFS) listings: 16. # Updated: 2016.07.10 / Checked: 2019.05.17 2803:200::/32 Deny Cloud Origin: PA Tag: Panamaserver.com # ASN 19624 ("Data Room, Inc"). # Stop Forum Spam (SFS) listings: 1,226. # Updated: 2019.09.10 2a01:4ce0:61::/48 Deny Cloud 2a01:4ce0:161::/48 Deny Cloud Origin: RO 2607:f710:35::/48 Deny Cloud 2607:f710:47::/48 Deny Cloud 2607:f710:60::/48 Deny Cloud 2607:f710:85::/48 Deny Cloud Origin: US Tag: Data Room, Inc # ASN 7151 ("vXchnge Operating, LLC"). # Updated: 2016.07.20 / Checked: 2019.05.27 2607:fce0::/32 Deny Cloud Origin: US Tag: vXchnge # ASN 30870 ("Trans-IX B.V"). # %Listed, Google Malware Dashboard: 0.12%. # Updated: 2019.05.13 2001:16f8:15::/48 Deny Cloud 2001:16f8:666::/48 Deny Cloud 2a01:4d60::/32 Deny Cloud 2a06:4a80::/29 Deny Cloud Origin: NL Tag: Trans-IX B.V # ASN 31103 ("Keyweb AG"). # %Listed, Google Malware Dashboard: 0.09%. # Stop Forum Spam (SFS) listings: 10,585. # Updated: 2018.05.05 / Checked: 2019.08.05 2001:1b60::/29 Deny Cloud Origin: DE 2a0c:eb80::/29 Deny Cloud Origin: RU Tag: Keyweb AG # ASN 10929 ("Netelligent Hosting Services Inc"). # %Listed, Google Malware Dashboard: 0.05%. # Stop Forum Spam (SFS) listings: 3. # Updated: 2016.08.19 / Checked: 2019.05.10 2605:6f00:9000::/36 Deny Cloud 2605:9000::/32 Deny Cloud Origin: CA Tag: Netelligent Hosting # ASN 9925 ("Powerbase DataCenter Services (HK) Ltd"). # (Slowly improving, but still has a few residual reports at MegaRBL). # Updated: 2016.08.19 / Checked: 2019.09.15 2401:9f00::/32 Deny Cloud Origin: HK Tag: Powerbase DataCenter # ASNs 135511, 136565, 136566 ("CyberWorld Data Center"). # Updated: 2019.05.10 2405:2500:5::/48 Deny Cloud 2405:2500:11::/48 Deny Cloud 2405:2500:25::/48 Deny Cloud 2405:2500:26::/48 Deny Cloud 2405:2500:65::/48 Deny Cloud Origin: TH Tag: CyberWorld # ASN 12637 ("Seeweb S.r.l"). # (Can omit anything under 44../8; clean). # %Listed, Google Malware Dashboard: 0.10% (AS12637). # Stop Forum Spam (SFS) listings: 33 (AS12637). # Updated: 2019.05.28 2a0b:fd40::/29 Deny Cloud Origin: CH 2a05:b6c0::/31 Deny Cloud 2a09:dd80::/31 Deny Cloud 2a09:dd82::/32 Deny Cloud 2a0b:ee40::/32 Deny Cloud Origin: HR 2001:4b78::/29 Deny Cloud 2a04:2700::/29 Deny Cloud 2a05:be80::/29 Deny Cloud 2a07:50c0::/29 Deny Cloud 2a0d:b000::/29 Deny Cloud Origin: IT 2a02:e9::/32 Deny Cloud 2a02:ea::/31 Deny Cloud Origin: SI Tag: Seeweb S.r.l # ASN 50837 ("Cloud Sigma"). # Stop Forum Spam (SFS) listings: 1. # Updated: 2019.01.29 / Checked: 2019.05.27 2a01:9980:1::/48 Deny Cloud 2a01:9980:2::/47 Deny Cloud 2a01:9980:a::/47 Deny Cloud 2a01:9980:c::/48 Deny Cloud Origin: CH Tag: Cloud Sigma # ASN 30217 ("Desync Networks"). # No recent reports or bad activity detected. Possible candidate for future removal. # Updated: 2019.08.29 2607:f178::/48 Deny Cloud 2607:f178:4::/47 Deny Cloud 2607:f178:10::/48 Deny Cloud Origin: US Tag: Desync Networks # ASN 3064 ("Affinity Internet, Inc"). # %Listed, Google Malware Dashboard: 0.30%. # Stop Forum Spam (SFS) listings: 48. # Updated: 2017.10.23 / Checked: 2019.05.06 2407:2080::/32 Deny Cloud Origin: AU 2602:ff82::/48 Deny Cloud 2606:7e00:ff00::/40 Deny Cloud Origin: US Tag: Affinity Internet, Inc # ASNs 52048, 60567, 202920, 203557 ("DataClub S.A"). # Updated: 2019.05.22 2a02:4840::/47 Deny Cloud 2a02:4840:2::/48 Deny Cloud 2a02:4840:200::/47 Deny Cloud 2a02:4840:1000::/48 Deny Cloud Origin: LV Tag: DataClub S.A # ASN 30962 ("comtrance GmbH"). # %Listed, Google Malware Dashboard: 0.17%. # Stop Forum Spam (SFS) listings: 5. # Updated: 2019.06.30 2001:678:94c::/48 Deny Cloud 2001:67c:208::/48 Deny Cloud 2a00:f70::/32 Deny Cloud Origin: DE Tag: comtrance GmbH # ASN 6724 ("Strato AG"). # %Listed, Google Malware Dashboard: 0.13%. # Stop Forum Spam (SFS) listings: 180. # Updated: 2016.09.10 / Checked: 2019.04.18 2a01:238::/32 Deny Cloud Origin: DE Tag: Strato AG # ASN 8001 ("Net Access Corporation"). # %Listed, Google Malware Dashboard: 0.27%. # Stop Forum Spam (SFS) listings: 27. # Updated: 2016.09.10 / Checked: 2019.09.05 2001:518::/32 Deny Cloud 2620:4d:4002::/48 Deny Cloud Origin: US Tag: Net Access Corp # ASN 19318 ("Interserver, Inc"). # %Listed, Google Malware Dashboard: 0.29%. # Stop Forum Spam (SFS) listings: 1,189. # Updated: 2018.06.09 / Checked: 2019.04.11 2604:a00::/32 Deny Cloud Origin: US Tag: Interserver, Inc # ASNs 59349, 131392, 135161 ("GMO-Z.com USA, INC"). # Updated: 2019.08.29 2001:df6:b800::/48 Deny Cloud 2404:8680:1000::/36 Deny Cloud Origin: SG 2404:f080::/32 Deny Cloud Origin: VN Tag: GMO-Z.com USA, INC # ASN 201628 ("Internet Unie Services B.V"). # No recent reports or bad activity detected. Possible candidate for future removal. # Updated: 2016.09.12 / Checked: 2019.08.29 2a00:1ac0:f1be::/48 Deny Cloud Origin: NL Tag: iu.nl # ASN 49282 ("Ficolo Oy"). # Stop Forum Spam (SFS) listings: 52. # Updated: 2016.11.02 / Checked: 2019.09.06 2a03:e580::/29 Deny Cloud Origin: FI Tag: Ficolo Oy # ASN 31400 ("Accelerated IT Services GmbH"). # %Listed, Google Malware Dashboard: 0.45%. # Stop Forum Spam (SFS) listings: 1,912. # Updated: 2019.09.15 2001:1608::/32 Deny Cloud 2001:1638::/32 Deny Cloud 2a00:5080::/32 Deny Cloud 2a01:4d0::/32 Deny Cloud 2a01:7e0:aa00::/40 Deny Cloud 2a03:567::/32 Deny Cloud 2a03:2902::/32 Deny Cloud 2a05:ff01::/32 Deny Cloud 2a09:7900::/29 Deny Cloud 2a0a:51c0::/29 Deny Cloud 2a0d:c400::/29 Deny Cloud Origin: DE 2a03:ebc0:1000::/36 Deny Cloud 2a03:ebc0:5000::/36 Deny Cloud Origin: GB 2a0d:4f00::/29 Deny Cloud Origin: RU Tag: Accelerated IT # ASN 20278 ("Nexeon Technologies, Inc"). # %Listed, Google Malware Dashboard: 0.32%. # Stop Forum Spam (SFS) listings: 2,156. # Updated: 2019.08.01 2a0d:f802::/32 Deny Cloud 2a0d:f803:8f00::/40 Deny Cloud Origin: GB 2401:f500:4::/48 Deny Cloud Origin: NZ 2a07:eb00::/29 Deny Cloud 2a0d:e9c0::/29 Deny Cloud Origin: RU 2602:ffc8::/32 Deny Cloud Origin: US Tag: Nexeon Technologies # ASN 48096 ("OOO IT-Grad"). # Stop Forum Spam (SFS) listings: 46. # Updated: 2019.09.15 2a04:c900:1000::/36 Deny Cloud 2a04:c900:3000::/36 Deny Cloud 2a06:b800:1000::/36 Deny Cloud Origin: RU Tag: OOO IT-Grad # ASN 55933 ("Cloudie Limited"). # %Listed, Google Malware Dashboard: 2.46%. # Stop Forum Spam (SFS) listings: 441. # Updated: 2019.05.21 2403:3a40::/32 Deny Cloud 2403:3b40::/32 Deny Cloud 2403:3bc0::/32 Deny Cloud 2404:3bc0::/32 Deny Cloud 2404:3c40::/32 Deny Cloud Origin: CN 2a0c:f480::/29 Deny Cloud Origin: CZ 2a0d:2480::/29 Deny Cloud Origin: DE 2404:b8c0::/32 Deny Cloud Origin: JP Tag: Cloudie Limited # ASNs 31727, 62401 ("Node4 Limited"). # %Listed, Google Malware Dashboard: 0.13% (AS31727). # Stop Forum Spam (SFS) listings: 270 (AS31727). # Updated: 2016.11.18 / Checked: 2019.05.06 2a00:5600::/32 Deny Cloud 2a00:f9c0::/32 Deny Cloud 2a07:7800::/29 Deny Cloud Origin: GB Tag: Node4 Limited # ASN 200557 ("REGION40 LLC"). # Stop Forum Spam (SFS) listings: 92,453. # Updated: 2018.12.15 / Checked: 2019.05.06 2a01:81a0::/48 Deny Cloud 2a02:d0c2:2::/48 Deny Cloud 2a02:ec41::/48 Deny Cloud 2a03:5a00:3c::/48 Deny Cloud 2a04:8680::/48 Deny Cloud Origin: RU 2a04:bc40:fffc::/48 Deny Cloud 2a05:2e40::/48 Deny Cloud 2a05:d780::/48 Deny Cloud Origin: UA Tag: REGION40 LLC # ASN 29757 ("Webline Services Inc"). # %Listed, Google Malware Dashboard: 1.46%. # Stop Forum Spam (SFS) listings: 5. # Updated: 2018.12.15 / Checked: 2019.05.06 2604:d680::/32 Deny Cloud Origin: US Tag: Webline Services Inc # ASN 34549 ("meerfarbig GmbH & Co. KG"). # Stop Forum Spam (SFS) listings: 7. # Updated: 2019.09.15 2a06:5000::/29 Deny Cloud 2a06:8100::/29 Deny Cloud 2a07:7340::/29 Deny Cloud Origin: BG 2a06:1287:3000::/44 Deny Cloud Origin: BY 2a0c:9a40:1::/48 Deny Cloud Origin: CH 2a00:f820::/29 Deny Cloud 2a01:360::/29 Deny Cloud 2a06:5700::/29 Deny Cloud 2a06:6580::/29 Deny Cloud 2a07:6fc0::/29 Deny Cloud 2a07:7e00::/29 Deny Cloud Origin: DE 2a06:5740::/29 Deny Cloud Origin: GE 2a0e:5bc0::/29 Deny Cloud 2a0e:a800::/31 Deny Cloud Origin: IE 2a06:f500::/29 Deny Cloud Origin: IN 2a0b:b740::/32 Deny Cloud Origin: RO 2a01:7120:f::/48 Deny Cloud 2a07:8740::/29 Deny Cloud Origin: UA Tag: meerfarbig # ASN 29066 ("velia.net Internetdienste GmbH"). # Note when updating: Also contains "proxy" signatures. # %Listed, Google Malware Dashboard: 0.22%. # Stop Forum Spam (SFS) listings: 53,099. # Updated: 2019.04.11 / Checked: 2019.08.22 2a01:7a0::/29 Deny Cloud Origin: DE 2406:f380::/32 Deny Cloud Origin: HK 2a0b:c2c0::/29 Deny Cloud Origin: NL 2402:5780::/32 Deny Cloud Origin: SG 2604:bc80::/32 Deny Cloud 2606:e180::/32 Deny Cloud Origin: US Tag: velia.net # ASNs 38719, 135132 ("Dreamscape Networks Pty Ltd"). # %Listed, Google Malware Dashboard: 0.28% (AS38719). # Stop Forum Spam (SFS) listings: 238 (AS38719). # Updated: 2019.04.18 / Checked: 2019.09.05 2402:af00::/32 Deny Cloud 2402:cb40::/32 Deny Cloud 2404:8280::/32 Deny Cloud 2405:3f00::/31 Deny Cloud 2407:4c00::/32 Deny Cloud Origin: AU 2a00:fd80::/32 Deny Cloud Origin: GB 2405:df80::/32 Deny Cloud Origin: PH 2a04:8b40::/29 Deny Cloud Origin: RU 2400:8240::/32 Deny Cloud Origin: SG Tag: Dreamscape Networks # ASN 22458 ("NetSource Communications, Inc"). # %Listed, Google Malware Dashboard: 0.35%. # Stop Forum Spam (SFS) listings: 1. # Updated: 2018.10.03 / Checked: 2019.09.15 2604:f80::/32 Deny Cloud 2a0b:1900::/44 Deny Cloud Origin: US Tag: NetSource # ASN 197226 ('"SPRINT" S.A.'). # Ranges change frequently / Should update often. # %Listed, Google Malware Dashboard: 0.14%. # Stop Forum Spam (SFS) listings: 27,887. # Updated: 2019.01.06 / Checked: 2019.05.21 2a0d:c740:3a::/48 Deny Cloud 2a0d:c740:3c::/48 Deny Cloud Origin: NL 2a03:7940::/32 Deny Cloud 2a0c:5840::/32 Deny Cloud Origin: PL Tag: SPRINT # ASN 55286 ("B2 Net Solutions Inc"). # Mark "Packet Flip", and other CIDRs identifying as proxies (e.g., Proxy6), as proxies. # %Listed, Google Malware Dashboard: 0.02%. # Stop Forum Spam (SFS) listings: 73,142. # Updated: 2017.12.18 / Checked: 2019.05.20 2607:4300::/48 Deny Cloud Origin: CA Tag: B2 Net Solutions # ASNs 24669, 34202, 35545, 42902, 62240, 202791, 202792, 206136, 206144 ("CloudSRV Limited" and "Clouvider Limited"). # Updated: 2019.03.01 / Checked: 2019.07.04 2a02:e00:ffe9::/48 Deny Cloud Origin: DE 2a06:8ec0::/48 Deny Cloud Origin: EU 2a04:6400::/29 Deny Cloud 2a04:92c0::/29 Deny Cloud 2a05:dfc7:6::/48 Deny Cloud 2a06:bdc0::/29 Deny Cloud 2a07:7ec2::/31 Deny Cloud 2a0a:54c0::/29 Deny Cloud 2a0b:b82::/64 Deny Cloud 2a0b:b86::/34 Deny Cloud 2a0b:1c00:1919::/48 Deny Cloud 2a0d:5080::/29 Deny Cloud Origin: GB 2a07:3b80:2::/48 Deny Cloud Origin: GI 2405:3580::/32 Deny Cloud Origin: IN 2a06:a006:c2::/48 Deny Cloud Origin: IS 2a0c:ef01::/32 Deny Cloud Origin: NL 2404:b980::/35 Deny Cloud Origin: SG Tag: CloudSRV Limited # ASN 61337 ("Electronic Communities Ltd"). # (Can omit anything under 44../8; clean). # Updated: 2017.02.18 / Checked: 2019.05.04 2001:67c:504::/48 Deny Cloud 2001:67c:72c::/48 Deny Cloud Origin: GB Tag: ECOM-AS # ASN 42831 ("UK Dedicated Servers Limited"). # %Listed, Google Malware Dashboard: 0.13%. # Stop Forum Spam (SFS) listings: 3,952. # Updated: 2018.07.28 / Checked: 2019.07.06 2a0a:4e83::/48 Deny Cloud Origin: DE 2a01:a500::/32 Deny Cloud 2a03:9da0::/40 Deny Cloud 2a04:d180::/29 Deny Cloud Origin: GB 2605:7900:1000::/48 Deny Cloud Origin: US Tag: UK Dedicated Servers # ASN 44812 ("IT Expert LLC"). # Stop Forum Spam (SFS) listings: 364. # Updated: 2018.08.13 / Checked: 2019.06.02 2a07:ac80::/29 Deny Cloud 2a0b:2d84::/32 Deny Cloud Origin: RU Tag: IT Expert LLC # ASN 24806 ("INTERNET CZ, a.s"). # %Listed, Google Malware Dashboard: 0.05%. # Stop Forum Spam (SFS) listings: 435. # Updated: 2017.01.23 / Checked: 2019.09.15 2001:15e8::/32 Deny Cloud Origin: CZ Tag: INTERNET CZ, a.s # ASN 202023 ("LLHost Inc"). # Updated: 2019.02.09 / Checked: 2019.06.10 2a04:bc40:1dc1::/48 Deny Cloud 2a04:bc40:1dc2::/47 Deny Cloud 2a04:bc40:1dc4::/46 Deny Cloud 2a04:bc40:2dc1::/48 Deny Cloud 2a04:bc40:2dc2::/47 Deny Cloud Origin: UA Tag: LLHost Inc # ASN 51859 ("Mainstream doo"). # Updated: 2019.05.02 / Checked: 2019.09.15 2a04:2e40::/29 Deny Cloud Origin: RS Tag: Mainstream doo # ASN 37692 ("NetStack Ltd"). # Stop Forum Spam (SFS) listings: 108. # Updated: 2019.06.02 2c0f:ee78:8000::/48 Deny Cloud 2c0f:f738:2201::/48 Deny Cloud 2c0f:f738:3802::/48 Deny Cloud Origin: ZA Tag: NetStack Ltd # ASNs 3595, 13354, 14313, 16626, 27325, 32952 ("zColo"). # Updated: 2019.04.21 / Checked: 2019.09.08 2604:9100:1001::/48 Deny Cloud 2606:4300:1::/48 Deny Cloud 2606:ef80:6::/48 Deny Cloud 2606:fe80:10::/44 Deny Cloud 2607:1400::/48 Deny Cloud 2607:f348::/32 Deny Cloud 2610:160::/32 Deny Cloud Origin: US Tag: zColo # ASN 61138 ("Zappie Host LLC"). # Stop Forum Spam (SFS) listings: 64. # Updated: 2019.08.18 2a07:1c40:1021::/48 Deny Cloud Origin: AT 2a0c:b642:1a0e::/48 Deny Cloud Origin: BE 2a06:1280::/32 Deny Cloud Origin: BY 2a06:e881:6203::/48 Deny Cloud Origin: CH 2a06:9f40::/29 Deny Cloud Origin: NO 2c0f:f530::/44 Deny Cloud 2c0f:f530:20::/44 Deny Cloud Origin: SC Tag: Zappie Host LLC # ASN 58923 ("InterCloud ltd"). # Stop Forum Spam (SFS) listings: 123. # Updated: 2018.11.19 / Checked: 2019.04.19 2406:f100::/32 Deny Cloud Origin: BD Tag: InterCloud ltd # ASN 197540 ("netcup GmbH"). # %Listed, Google Malware Dashboard: 0.17%. # Stop Forum Spam (SFS) listings: 5,155. # Updated: 2017.02.15 / Checked: 2019.07.21 2a04:b500::/32 Deny Cloud Origin: CH 2a03:4000::/31 Deny Cloud Origin: DE Tag: netcup GmbH # ASNs 19531, 43755 ("Nodes Direct"). # %Listed, Google Malware Dashboard: 0.88% (AS19531). # Stop Forum Spam (SFS) listings: 307 (AS19531). # Updated: 2018.09.14 / Checked: 2019.07.21 2604:4600::/28 Deny Cloud Origin: US Tag: Nodes Direct # ASN 23352 ("Server Central Network"). # %Listed, Google Malware Dashboard: 0.27%. # Stop Forum Spam (SFS) listings: 3. # Updated: 2018.04.14 / Checked: 2019.07.13 2001:1838::/32 Deny Cloud Origin: US Tag: Server Central Network # ASNs 30496, 36024 ("TierPoint, LLC" / "Colo4, LLC"). # %Listed, Google Malware Dashboard: 0.34% (AS30496), 0.43% (AS36024). # Updated: 2017.08.31 / Checked: 2019.05.04 2605:7700::/47 Deny Cloud 2606:4300::/48 Deny Cloud 2607:f198::/32 Deny Cloud 2607:fdb8::/32 Deny Cloud Origin: US Tag: Colo4, LLC # ASNs 15626, 21100, 50979, 59729 ("ITL Company"). # Significant source of forum/blog spam. # FRIENDHOSTING L.P., ON-LINE DATA LTD, various data centers, etc. # Also contains VPNs (VDS/VPS; should mark these accordingly). # Updated: 2019.08.01 2001:67c:2f4c::/48 Deny Cloud 2001:67c:2f5c::/48 Deny Cloud 2001:67c:2f6c::/48 Deny Cloud 2a0a:8c40::/32 Deny Cloud Origin: BG 2a02:27a8::/30 Deny Cloud 2a02:27ac::/32 Deny Proxy 2a0e:40c0:1::/48 Deny Cloud 2a0e:40c0:2::/48 Deny Cloud Origin: UA Tag: ITL Company # ASN 395111 ("KVCHOSTING.COM LLC"). # %Listed, Google Malware Dashboard: 0.18%. # Stop Forum Spam (SFS) listings: 1,816. # Updated: 2017.03.11 / Checked: 2019.07.21 2602:ff3c::/36 Deny Cloud Origin: US Tag: KVCHOSTING.COM LLC # ASN 49453 ("Global Layer B.V"). # %Listed, Google Malware Dashboard: 0.04%. # Stop Forum Spam (SFS) listings: 15,597. # Updated: 2019.08.01 2a00:1678::/48 Deny Cloud 2a00:1678:2221::/48 Deny Cloud 2a00:1678:2426::/48 Deny Cloud 2a00:1678:2437::/48 Deny Cloud 2a00:1678:2441::/48 Deny Cloud 2a00:1678:2470::/48 Deny Cloud 2a00:1678:2525::/48 Deny Cloud 2a00:1678:2641::/48 Deny Cloud 2a00:1678:2642::/47 Deny Cloud 2a00:1678:2644::/46 Deny Cloud 2a00:1678:2648::/47 Deny Cloud 2a00:1678:2650::/48 Deny Cloud 2a00:1678:7777::/48 Deny Cloud 2a00:1678:b055::/48 Deny Cloud 2a00:1678:b33f::/48 Deny Cloud 2a00:1678:da7a::/48 Deny Cloud 2a00:1678:dea1::/48 Deny Cloud 2a00:1678:effe::/48 Deny Cloud Origin: NL Tag: Global Layer B.V # ASN 50113, 200740, 204154, 205125 ("MediaServicePlus LLC"). # %Listed, Google Malware Dashboard: 0.21% (AS50113). # Stop Forum Spam (SFS) listings: 2,456 (AS50113), 21 (AS200740). # Updated: 2019.09.05 2a0d:8340::/32 Deny Cloud Origin: CZ 2a03:e2c0::/32 Deny Cloud 2a04:5200::/32 Deny Cloud 2a04:5201:1::/48 Deny Cloud 2a04:5201:2::/48 Deny Cloud 2a04:5202::/31 Deny Cloud 2a04:5204::/30 Deny Cloud 2a07:57c0::/32 Deny Cloud 2a07:9b83::/32 Deny Cloud 2a0a:981::/32 Deny Cloud 2a0a:f080::/29 Deny Cloud Origin: RU Tag: MediaServicePlus LLC # ASN 200161 ('"DATAPRO" Limited Liability Company'). # Updated: 2018.02.25 / Checked: 2019.08.29 2a00:a960::/32 Deny Cloud Origin: RU Tag: DATAPRO # ASN 12025 ("IO Capital Princess, LLC"). # When updating, mark "ExpressVPN" as "proxy". Everything else as cloud. # Exclude (clean; don't need to list them): ^.*(Infinity|St Joseph|Brisbane Public|Decision North|Scholer LLP).*$\n # %Listed, Google Malware Dashboard: 0.10%. # Stop Forum Spam (SFS) listings: 7. # Updated: 2019.04.23 / Checked: 2019.09.10 2a05:9800:ff00::/40 Deny Cloud Origin: GB 2607:a500:4::/48 Deny Cloud 2607:a500:8::/48 Deny Cloud 2607:a500:c::/48 Deny Cloud 2607:a500:d000::/36 Deny Cloud 2607:a500:e000::/35 Deny Cloud Origin: US Tag: IO Capital Princess # ASN 51765 ("Oy Creanova Hosting Solutions Ltd"). # Stop Forum Spam (SFS) listings: 8,877. # Updated: 2019.09.15 2a0c:f040::/48 Deny Cloud Origin: FI Tag: Oy Creanova Hosting # ASN 49505 ("Selectel Ltd"). # %Listed, Google Malware Dashboard: 0.09%. # Stop Forum Spam (SFS) listings: 2,511. # Updated: 2017.05.12 / Checked: 2019.07.06 2a00:ab00::/32 Deny Cloud Origin: RU Tag: Selectel Ltd # ASN 60592 ("Gransy s.r.o."). # %Listed, Google Malware Dashboard: 0.13%. # Stop Forum Spam (SFS) listings: 2. # Updated: 2019.05.02 / Checked: 2019.09.15 2a00:a160::/32 Deny Cloud 2a00:fea0::/32 Deny Cloud 2a03:6920::/32 Deny Cloud Origin: CZ Tag: Gransy s.r.o. # ASN 35236 ("2 connect a.s."). # %Listed, Google Malware Dashboard: 0.35%. # Updated: 2019.09.15 2a00:1238::/32 Deny Cloud 2a09:500::/32 Deny Cloud 2a0b:640::/30 Deny Cloud 2a0e:25c0::/29 Deny Cloud Origin: CZ Tag: 2 connect a.s. # ASNs 42570, 200584, 201365, 207161 ("Nagravision SA", A.K.A. "Kudelski Group"). # Caught hitting protected honeypot pages for unknown purposes. No problems otherwise. Provides digital cable and # satellite television; Not expected to carry standard HTTP traffic from human endpoints normally. May remove if # problems emerge, but adding them here for now as a precaution. Not currently listed on other known blacklists. # Updated: 2018.09.09 / Checked: 2019.09.08 2a04:5c80::/32 Deny Generic 2a04:5c85::/35 Deny Generic 2a04:5c85:4000::/36 Deny Generic 2a04:5c87::/32 Deny Generic Origin: CH Tag: Nagravision SA # ASN 63956 ("Colocation Australia Pty Ltd"). # %Listed, Google Malware Dashboard: 2.98%. # Stop Forum Spam (SFS) listings: 90. # Updated: 2019.07.10 2402:1b80::/32 Deny Cloud 2402:2f80:4::/48 Deny Cloud 2406:180:8000::/40 Deny Cloud Origin: AU 2403:4f00:6000::/36 Deny Cloud Origin: NZ 2402:1b80:3000::/40 Deny Cloud Origin: SG 2402:1b80:1000::/36 Deny Cloud Origin: US Tag: Colocation Australia # ASN 6295 ("Green House Data, Inc"). # Updated: 2018.08.13 / Checked: 2019.06.10 2607:8200:c000::/35 Deny Cloud 2607:8200:e000::/36 Deny Cloud Origin: US Tag: Green House Data # ASN 20021 ("HostMySite"). # 100% hosting provider (generally considered safe to block), but may interfere with uptime monitoring service # "InternetSeer.com". Users of this service should probably set an "ignore" rule for this signature section. I won't be # mainlining a bypass for them though due to abuse reports from some users. # %Listed, Google Malware Dashboard: 0.10%. # Stop Forum Spam (SFS) listings: 3. # Updated: 2018.08.05 / Checked: 2019.08.18 2600:1300::/32 Deny Cloud 2600:1304::/32 Deny Cloud 2600:1308::/32 Deny Cloud 2600:130c::/32 Deny Cloud Origin: US Tag: HostMySite # ASN 40034 ("Confluence Networks Inc"). # %Listed, Google Malware Dashboard: 0.05%. # Updated: 2019.08.21 2604:10c0::/48 Deny Cloud 2604:10c0:ffff::/48 Deny Cloud Origin: VG Tag: Confluence # ASN 25369 ("Hydra Communications Ltd"). # %Listed, Google Malware Dashboard: 0.16%. # Stop Forum Spam (SFS) listings: 7,780. # Updated: 2019.01.06 / Checked: 2019.05.20 2a06:8dc6::/44 Deny Cloud 2a06:8dc7::/48 Deny Cloud Origin: EU 2a00:1a30::/32 Deny Cloud 2a01:4020::/32 Deny Cloud Origin: GB 2a05:6200:72::/48 Deny Cloud Origin: NL 2a03:b000:a00::/40 Deny Cloud Origin: SE Tag: Hydra Communications # ASN 55081 ("24 SHELLS"). # %Listed, Google Malware Dashboard: 0.53%. # Stop Forum Spam (SFS) listings: 150. # Updated: 2019.07.07 2a06:8640::/29 Deny Cloud Origin: GB 2607:4f00::/32 Deny Cloud Origin: US Tag: 24 SHELLS # ASNs 11588, 12989, 18607, 20446, 33438 ("Highwinds Network Group, Inc"). # Updated: 2019.08.25 2804:266c::/32 Deny Cloud Origin: BR 2001:5c0:1400::/39 Deny Cloud Origin: CA 2a03:efc0:200::/40 Deny Cloud 2a03:efc0:500::/40 Deny Cloud 2a03:efc0:700::/40 Deny Cloud 2a03:efc0:900::/40 Deny Cloud 2a03:efc0:1100::/40 Deny Cloud 2a03:efc0:1300::/40 Deny Cloud 2a03:efc0:1500::/40 Deny Cloud 2a03:efc0:1700::/40 Deny Cloud 2a03:efc0:1800::/39 Deny Cloud 2a03:efc0:ba5e::/48 Deny Cloud Origin: GB 2403:f880:6000::/39 Deny Cloud 2403:f880:6300::/40 Deny Cloud 2404:5d80:6000::/39 Deny Cloud 2404:5d80:6300::/40 Deny Cloud 2404:5d80:6600::/40 Deny Cloud Origin: JP 2001:4de0::/32 Deny Cloud 2a0a:e200:1100::/40 Deny Cloud 2a0a:e200:1300::/40 Deny Cloud 2a0a:e200:1400::/38 Deny Cloud 2a0a:e200:1800::/39 Deny Cloud 2a0a:e202:8000::/48 Deny Cloud 2a0a:e202:800b::/48 Deny Cloud 2a0a:e202:800e::/47 Deny Cloud 2a0a:e202:8010::/48 Deny Cloud 2a0a:e202:8013::/48 Deny Cloud 2a0a:e202:8014::/48 Deny Cloud Origin: NL 2001:1938::/32 Deny Cloud 2407:1580:1100::/40 Deny Cloud 2407:1580:1200::/40 Deny Cloud 2407:1580:1400::/38 Deny Cloud 2604:6840:1200::/39 Deny Cloud 2604:6840:1400::/38 Deny Cloud 2604:6840:1800::/38 Deny Cloud 2604:6840:1c00::/39 Deny Cloud 2604:6840:1e00::/40 Deny Cloud 2604:c980::/32 Deny Cloud 2604:ea80::/32 Deny Cloud 2604:fc80::/32 Deny Cloud 2606:b300::/33 Deny Cloud 2606:ce80:6100::/40 Deny Cloud 2606:ce80:6200::/39 Deny Cloud 2606:ce80:6400::/38 Deny Cloud 2606:ce80:6900::/40 Deny Cloud Origin: US Tag: Highwinds # ASNs 62, 19479, 20013 ("CyrusOne LLC"). # Some IPs on these ASNs caught probing for database dumps. # Updated: 2018.01.12 / Checked: 2019.08.13 2605:9600::/38 Deny Cloud 2605:9600:400::/39 Deny Cloud 2605:9600:800::/40 Deny Cloud 2607:ff70::/32 Deny Cloud 2610:190::/38 Deny Cloud 2610:190:1c00::/38 Deny Cloud 2610:190:5e00::/39 Deny Cloud 2610:190:7c00::/38 Deny Cloud 2610:190:df00::/40 Deny Cloud 2620:f2:c000::/48 Deny Cloud Origin: US Tag: CyrusOne LLC # Announcing as: "WEBSITEWELCOME". # Various ASNs; Sourced from HE. # Updated: 2017.09.25 / Checked: 2019.07.24 2605:f300:ffff::/48 Deny Cloud Origin: US Tag: WEBSITEWELCOME.COM # ASN 18229 ("CtrlS Datacenters Ltd"). # Some IPs on this ASN caught probing for database dumps. # %Listed, Google Malware Dashboard: 0.45%. # Stop Forum Spam (SFS) listings: 830. # Updated: 2019.08.04 2001:df0:fc00::/48 Deny Cloud 2001:df4:5100::/48 Deny Cloud 2400:3b00::/47 Deny Cloud 2400:3b00:2::/48 Deny Cloud 2400:3b00:20::/48 Deny Cloud 2400:3b00:40::/48 Deny Cloud 2400:3b00:50::/48 Deny Cloud Origin: IN Tag: CtrlS Datacenters # ASN 25234 ("ACTIVE 24 Sp. z o.o."). # Note when updating: Also contains "proxy" signatures. # Some IPs on these ASNs caught probing for database dumps. # %Listed, Google Malware Dashboard: 0.17%. # Updated: 2017.09.25 / Checked: 2019.06.01 2a02:4a8::/32 Deny Cloud Origin: CZ Tag: ACTIVE 24 # ASN 29278 ("Deninet KFT"). # IPs on this ASN caught attempting to hack users; SQLi galore. # %Listed, Google Malware Dashboard: 0.26%. # Stop Forum Spam (SFS) listings: 1,431. # Updated: 2017.10.29 / Checked: 2019.08.18 2a02:730::/32 Deny Cloud Origin: HU Tag: Deninet KFT # ASN 32767 ("SAPIOTERRA, LLC"). # No recent reports or bad activity detected. Possible candidate for future removal. # Updated: 2017.11.06 / Checked: 2019.09.06 2607:c080::/32 Deny Cloud Origin: US Tag: SAPIOTERRA, LLC # Announcing as: "LogicWeb Inc". # Various ASNs; Sourced from HE. # Updated: 2019.05.02 / Checked: 2019.09.15 2606:f180:5::/48 Deny Cloud Origin: US Tag: LogicWeb Inc # ASN 50297 ("Infium, UAB"). # %Listed, Google Malware Dashboard: 0.75%. # Stop Forum Spam (SFS) listings: 157. # Updated: 2018.03.14 / Checked: 2019.06.01 2001:67c:28f8::/48 Deny Cloud Origin: LT 2a06:5600:28f8::/48 Deny Cloud Origin: UA Tag: Infium, UAB # ASNs 30548, 31034, 199653, 199883, 200185, 205727. # "Aruba S.p.A" / "Aruba SAS" / "ARUBA NETWORKS, INC" / "ArubaCloud Limited". # Caught attempting to hack honeypots. # Updated: 2018.02.24 / Checked: 2019.08.27 2a03:2c40::/32 Deny Cloud 2a03:a140::/32 Deny Cloud Origin: FR 2a01:6e60::/32 Deny Cloud Origin: GB 2a00:6d40::/31 Deny Cloud 2a00:6d42::/32 Deny Cloud 2a00:6d47::/36 Deny Cloud 2a01:5940::/35 Deny Cloud 2a01:5940:2000::/36 Deny Cloud 2a02:4ae0:a::/48 Deny Cloud 2a02:fd40::/31 Deny Cloud 2a03:cdc0::/35 Deny Cloud 2a04:e100::/31 Deny Cloud Origin: IT 2620:11d:6000::/42 Deny Cloud Origin: US Tag: Aruba S.p.A # ASN 45671 ("Wholesale Services Provider"). # %Listed, Google Malware Dashboard: 0.19%. # Stop Forum Spam (SFS) listings: 151. # Updated: 2019.01.07 / Checked: 2019.05.22 2001:df1:6800::/48 Deny Cloud 2400:5dc0::/48 Deny Cloud 2400:8100::/32 Deny Cloud 2400:d400:1::/48 Deny Cloud 2400:d400:2::/48 Deny Cloud 2400:d400:6::/48 Deny Cloud 2400:d400:9::/48 Deny Cloud 2400:d400:11::/48 Deny Cloud 2400:d400:12::/47 Deny Cloud 2400:d400:18::/48 Deny Cloud 2400:d400:b97::/48 Deny Cloud 2400:d400:d51::/48 Deny Cloud 2400:d400:1008::/48 Deny Cloud 2400:d400:1337::/48 Deny Cloud 2400:d400:1487::/48 Deny Cloud 2400:d400:9897::/48 Deny Cloud 2400:d400:9898::/48 Deny Cloud 2400:d400:b00b::/48 Deny Cloud 2400:d400:ffff::/48 Deny Cloud 2403:1540::/48 Deny Cloud 2403:b800:1000::/48 Deny Cloud 2405:1000::/32 Deny Cloud 2406:bf00:1::/48 Deny Cloud 2406:c500:fff3::/48 Deny Cloud Origin: AU 2400:7180::/32 Deny Cloud Origin: NZ Tag: Servers Australia # ASN 49981 ("WorldStream"). # (209.222.250.0 already listed in ipv4_other.dat; can omit from here). # %Listed, Google Malware Dashboard: 0.07%. # Stop Forum Spam (SFS) listings: 2,166. # Updated: 2019.08.13 2a06:e881:6000::/44 Deny Cloud Origin: CH 2a03:69c0:100::/40 Deny Cloud Origin: FR 2a04:92c7:16::/48 Deny Cloud Origin: GB 2001:16c0:fefe::/48 Deny Cloud Origin: IR 2a00:7c80::/32 Deny Cloud 2a06:3880::/29 Deny Cloud 2a0a:1f41::/32 Deny Cloud 2a0c:ef00::/32 Deny Cloud 2a0d:3ec0::/32 Deny Cloud Origin: NL 2a06:d641::/32 Deny Cloud 2a06:d645::/32 Deny Cloud 2a06:d646::/32 Deny Cloud 2a07:ca04::/32 Deny Cloud 2a09:9441::/32 Deny Cloud 2a0b:bd00::/31 Deny Cloud 2a0c:2f40::/32 Deny Cloud Origin: RU Tag: WorldStream # ASN 11888 ("Television Internacional, S.A. de C.V."). # Stop Forum Spam (SFS) listings: 676. # Updated: 2017.12.18 / Checked: 2019.09.01 2806:230::/32 Deny Cloud Origin: MX Tag: TV Internacional # ASN 198605 ("AVAST Software s.r.o."). # Caught attempting to access sensitive parts of WP sites for unknown reasons. # Stop Forum Spam (SFS) listings: 6,353. # Updated: 2019.03.19 / Checked: 2019.08.01 2001:67c:284::/48 Deny Cloud 2a0b:e181:100::/40 Deny Cloud 2a0b:e181:200::/39 Deny Cloud 2a0b:e182:100::/40 Deny Cloud 2a0b:e182:200::/45 Deny Cloud 2a0b:e182:300::/40 Deny Cloud 2a0b:e182:400::/40 Deny Cloud Origin: CZ Tag: AVAST Software # ASN 43317 ('OOO "Fishnet Communications"'). # Caught spamming while pretending to be Google. # %Listed, Google Malware Dashboard: 0.40%. # Stop Forum Spam (SFS) listings: 3,225. # Updated: 2019.03.10 / Checked: 2019.07.10 2a00:1838::/32 Deny Cloud 2a0a:4784::/32 Deny Cloud Origin: RU Tag: Fishnet # ASN 59504 ('LLC "CloudSol"'). # %Listed, Google Malware Dashboard: 2.01%. # Stop Forum Spam (SFS) listings: 193. # Updated: 2019.07.10 2a05:fb41::/32 Deny Cloud 2a05:fb42::/32 Deny Cloud 2a07:14c0::/47 Deny Cloud 2a07:14c0:100::/40 Deny Cloud 2a07:14c0:1000::/36 Deny Cloud 2a07:14c0:c000::/36 Deny Cloud 2a07:14c1::/32 Deny Cloud 2a07:14c2::/32 Deny Cloud 2a07:14c6::/31 Deny Cloud 2a0a:4780::/30 Deny Cloud 2a0a:4785::/32 Deny Cloud 2a0a:7743::/32 Deny Cloud 2a0a:7747::/32 Deny Cloud 2a0c:2101::/32 Deny Cloud 2a0c:2104::/32 Deny Cloud 2a0c:5245::/32 Deny Cloud 2a0c:5247:1000::/36 Deny Cloud 2a0c:5247:2000::/35 Deny Cloud 2a0c:5247:4000::/35 Deny Cloud 2a0c:5247:7000::/36 Deny Cloud 2a0c:5247:c000::/36 Deny Cloud 2a0c:5247:e000::/36 Deny Cloud 2a0c:f743::/32 Deny Cloud 2a0c:f745::/32 Deny Cloud 2a0d:60c0::/31 Deny Cloud 2a0d:60c3::/32 Deny Cloud 2a0d:7740::/32 Deny Cloud 2a0d:8180:1000::/36 Deny Cloud 2a0d:8180:5000::/36 Deny Cloud 2a0d:8180:8000::/36 Deny Cloud 2a0d:8180:a000::/36 Deny Cloud 2a0d:8181::/32 Deny Cloud 2a0d:e4c2::/31 Deny Cloud 2a0d:e4c4::/31 Deny Cloud Origin: RU Tag: CloudSol # ASN 132839 ("POWER LINE (HK) CO., LIMITED"). # %Listed, Google Malware Dashboard: 0.96%. # Stop Forum Spam (SFS) listings: 16. # Updated: 2019.08.13 2401:f940::/32 Deny Cloud Origin: HK Tag: POWER LINE (HK) CO # ASN 55720 ("Gigabit Hosting Sdn Bhd"). # %Listed, Google Malware Dashboard: 2.32%. # Stop Forum Spam (SFS) listings: 729. # Updated: 2019.08.11 2402:90c0::/32 Deny Cloud Origin: HK 2400:5680::/32 Deny Cloud 2401:340::/32 Deny Cloud 2402:9500::/32 Deny Cloud Origin: MY Tag: Gigabit Hosting # ASN 27435 ("Dimension Data Cloud Solutions, Inc"). # Actually quite a large cloud service with numerous ASNs, but most of their ASNs seem clean at the moment, so for now, # I'm including just the one ASN (AS27435) that I've seen send unwanted/suspect requests to websites. May expand this # section to include other ASNs in the future if similar traffic or problems emerge from those ASNs. Activity seen from # the ASN in question includes spamming and probing. # Stop Forum Spam (SFS) listings: 9. # Updated: 2019.08.22 2402:9900::/48 Deny Cloud 2402:9900:100::/47 Deny Cloud 2402:9900:111::/48 Deny Cloud 2402:9900:200::/47 Deny Cloud 2402:9900:211::/48 Deny Cloud 2402:9900:311::/48 Deny Cloud 2402:9900:911::/48 Deny Cloud 2402:9900:b11::/48 Deny Cloud 2402:9900:c11::/48 Deny Cloud 2402:9900:d11::/48 Deny Cloud 2402:9900:e11::/48 Deny Cloud Origin: AU 2a00:47c0:111::/48 Deny Cloud 2a00:47c0:211::/48 Deny Cloud 2a00:47c0:221::/48 Deny Cloud 2a00:47c0:311::/48 Deny Cloud 2a00:47c0:611::/48 Deny Cloud 2a00:47c0:711::/48 Deny Cloud 2a00:47c0:811::/48 Deny Cloud Origin: GB 2404:c8:2::/48 Deny Cloud Origin: ID 2001:418:9807::/48 Deny Cloud 2605:b800:787::/48 Deny Cloud 2607:f480::/46 Deny Cloud 2607:f480:4::/47 Deny Cloud 2607:f480:8::/47 Deny Cloud 2607:f480:11::/48 Deny Cloud 2607:f480:16::/48 Deny Cloud 2607:f480:24::/48 Deny Cloud 2607:f480:101::/48 Deny Cloud 2607:f480:111::/48 Deny Cloud 2607:f480:1ab::/48 Deny Cloud 2607:f480:201::/48 Deny Cloud 2607:f480:211::/48 Deny Cloud 2607:f480:300::/47 Deny Cloud 2607:f480:401::/48 Deny Cloud 2607:f480:411::/48 Deny Cloud 2607:f480:999::/48 Deny Cloud 2607:f480:1111::/48 Deny Cloud 2607:f480:1ab0::/44 Deny Cloud 2607:f480:f001::/48 Deny Cloud Origin: US 2c0f:fc00:b004::/48 Deny Cloud Origin: ZA Tag: Dimension Data # ASN 60868 ("Runtime Collective Limited"). # Trademark protection organisation; Scans websites looking for potential infringements in order to send legal notices # on behalf of clients. Serves no benefit to the websites being scanned. # Updated: 2018.02.25 / Checked: 2019.08.01 2a00:77e0::/32 Deny Cloud Origin: GB Tag: Brandwatch # ASN 63018 ("US Dedicated"). # %Listed, Google Malware Dashboard: 0.80%. # Stop Forum Spam (SFS) listings: 34. # Updated: 2018.12.11 / Checked: 2019.09.15 2605:9f80::/33 Deny Cloud 2605:9f80:8000::/35 Deny Cloud 2605:9f80:c000::/34 Deny Cloud Origin: US Tag: US Dedicated # ASN 201848 ("Trader soft LLC"). # Stop Forum Spam (SFS) listings: 74. # Updated: 2016.12.04 / Checked: 2019.09.08 2a04:ac00:1::/48 Deny Cloud 2a04:ac00:4::/48 Deny Cloud Origin: RU Tag: Trader soft LLC # ASN 51395 ("SOFTplus Entwicklungen GmbH"). # Stop Forum Spam (SFS) listings: 29,222. # Updated: 2019.01.16 / Checked: 2019.05.25 2001:67c:2f0::/48 Deny Cloud 2a00:bd80::/32 Deny Cloud 2a05:6a00::/29 Deny Cloud 2a05:ad00::/29 Deny Cloud 2a0a:5dc0::/29 Deny Cloud 2a0b:ee80::/29 Deny Cloud 2a0c:e740::/32 Deny Cloud Origin: CH Tag: SOFTplus # ASN 263735 ("SOCIEDAD BUENA HOSTING, S.A"). # Stop Forum Spam (SFS) listings: 1,183. # Updated: 2018.04.06 / Checked: 2019.09.15 2803:9f80::/32 Deny Cloud Origin: HN Tag: SOCIEDAD BUENA # ASN 63199 ("Capitalonline Data Service Co.,LTD"). # Source of forum spam and other unwanted traffic. # %Listed, Google Malware Dashboard: 0.65%. # Stop Forum Spam (SFS) listings: 293. # Updated: 2019.07.04 2400:5280::/36 Deny Cloud 2400:5280:1000::/37 Deny Cloud 2400:5280:1800::/38 Deny Cloud 2400:5280:2000::/38 Deny Cloud 2400:5280:fc00::/38 Deny Cloud Origin: CN 2001:550:2801::/48 Deny Cloud Origin: US Tag: Capitalonline # ASN 37560 ("Cyberdyne S.A"). # Lots of spam from here. # Stop Forum Spam (SFS) listings: 20,885. # Updated: 2019.08.27 2001:67c:1350::/48 Deny Cloud 2a02:6f8::/32 Deny Cloud Origin: CY 2c0f:f930::/32 Deny Cloud Origin: LR 2a0a:3840::/29 Deny Cloud 2a0e:d9c0::/29 Deny Cloud Origin: SE Tag: Cyberdyne S.A # ASN 2635 ("Automattic, Inc"). # Unwanted requests first detected by ModSecurity, mostly in 192.0.64.0/18. Low chance of false positives AFAICT. Added # here by user request. May potentially block mShot (deprecated WordPress plugin). Shouldn't block humans though. ASN # also announces bogons via 10.12.*.* (these should be removed from the final aggregate when updating). Signatures run # through rules_specific.php to avoid mistakenly blocking JetPack (WordPress plugin; still actively used throughout). # Stop Forum Spam (SFS) listings: 1. # Updated: 2019.05.06 2403:6b80::/45 Run rules_specific.php 2403:6b80:8::/47 Run rules_specific.php 2403:6b80:a::/48 Run rules_specific.php 2403:6b80:ffff::/48 Run rules_specific.php Origin: AU 2801:80:1610::/48 Run rules_specific.php Origin: BR 2a04:fa80::/48 Run rules_specific.php 2a04:fa80:2::/47 Run rules_specific.php 2a04:fa80:4::/46 Run rules_specific.php 2a04:fa80:8::/48 Run rules_specific.php 2a04:fa87:fffd::/48 Run rules_specific.php 2a04:fa87:fffe::/47 Run rules_specific.php Origin: IE 2620:115:c000::/46 Run rules_specific.php 2620:115:c008::/45 Run rules_specific.php Origin: US 2001:43f8:bf0::/48 Run rules_specific.php Origin: ZA Tag: Automattic # ASN 22612 ("Namecheap, Inc"). # %Listed, Google Malware Dashboard: 0.17%. # Stop Forum Spam (SFS) listings: 61. # Updated: 2018.04.22 / Checked: 2019.04.18 2606:5b80::/32 Deny Cloud Origin: US Tag: Namecheap, Inc # ASN 49349 ("Dotsi, Unipessoal Lda"). # %Listed, Google Malware Dashboard: 0.74%. # Stop Forum Spam (SFS) listings: 423. # Updated: 2018.04.23 / Checked: 2019.07.21 2a00:1c60::/32 Deny Cloud Origin: PT 2a02:7a60::/32 Deny Cloud Origin: UA Tag: Dotsi # ASN 263179 ("Webline Services, S.A"). # Stop Forum Spam (SFS) listings: 1,440. # Updated: 2018.04.23 / Checked: 2019.06.01 2803:c880::/32 Deny Cloud Origin: HN Tag: Webline Services # ASN 197071 ("Dennis Rainer Warnholz trading as active-servers.com"). # %Listed, Google Malware Dashboard: 0.32%. # Stop Forum Spam (SFS) listings: 187. # Updated: 2019.08.01 2001:678:5e8::/48 Deny Cloud 2a00:f826:4::/48 Deny Cloud 2a02:d40:3::/48 Deny Cloud 2a02:d40:7::/48 Deny Cloud 2a02:d40:8::/48 Deny Cloud 2a05:bec0::/29 Deny Cloud 2a0c:3580::/29 Deny Cloud Origin: DE Tag: active-servers.com # ASN 7979 ("Servers.com, Inc"). # Some IPs here caught scraping website content without permission. # Stop Forum Spam (SFS) listings: 13. # Updated: 2019.03.19 / Checked: 2019.07.24 2406:380::/31 Deny Cloud Origin: HK 2a05:93c0::/30 Deny Cloud Origin: NL 2604:8240::/32 Deny Cloud 2605:f480::/31 Deny Cloud Origin: US Tag: Servers.com # ASN 48635 ("Astralus B.V"). # %Listed, Google Malware Dashboard: 0.17%. # Stop Forum Spam (SFS) listings: 1. # Updated: 2019.08.01 2a05:1500:600::/40 Deny Cloud 2a05:1500:ff00::/40 Deny Cloud Origin: DE 2001:67c:28fc::/48 Deny Cloud 2001:1460::/32 Deny Cloud 2a00:f10::/32 Deny Cloud 2a00:9b60::/40 Deny Cloud 2a01:b940::/36 Deny Cloud 2a01:b944::/32 Deny Cloud 2a02:13b0:1::/48 Deny Cloud 2a02:13b0:100::/40 Deny Cloud 2a03:3060:a::/48 Deny Cloud 2a04:6bc0::/36 Deny Cloud 2a05:a280::/29 Deny Cloud 2a05:c580::/29 Deny Cloud 2a07:ae80::/29 Deny Cloud 2a0b:7280::/29 Deny Cloud 2a0b:8f80::/48 Deny Cloud Origin: NL Tag: Astralus B.V # ASN 205406 ("Hostio Solutions B.V"). # Caught by honeypots. # Stop Forum Spam (SFS) listings: 319. # Updated: 2019.09.15 2a0b:3c40:1::/48 Deny Cloud 2a0b:3c40:a::/48 Deny Cloud 2a0b:3c40:11::/48 Deny Cloud 2a0b:3c40:12::/48 Deny Cloud 2a0b:3c40:15::/48 Deny Cloud 2a0c:9e00::/29 Deny Cloud 2a0c:fe00::/29 Deny Cloud 2a0e:5540::/29 Deny Cloud 2a0e:a940::/29 Deny Cloud 2a0e:cac0::/29 Deny Cloud 2a0e:cbc0::/29 Deny Cloud 2a0e:eb40::/29 Deny Cloud Origin: NL 2a03:401::/32 Deny Cloud Origin: TR Tag: Hostio Solutions B.V # ASN 23338 ("DCS Pacific Star, LLC"). # %Listed, Google Malware Dashboard: 2.77%. # Stop Forum Spam (SFS) listings: 35. # Updated: 2018.05.18 / Checked: 2019.08.13 2606:b680::/32 Deny Cloud Origin: US Tag: DCS Pacific Star # ASN 5602 ("KPNQWest Italia S.p.a"). # %Listed, Google Malware Dashboard: 0.29%. # Stop Forum Spam (SFS) listings: 121. # Updated: 2018.05.25 / Checked: 2019.08.22 2001:1450::/32 Deny Cloud 2a01:9300::/32 Deny Cloud 2a02:5c80::/32 Deny Cloud Origin: IT Tag: KPNQWest Italia # ASN 41564 ("Packet Exchange Limited"). # Caught XRumer operating on this network. # %Listed, Google Malware Dashboard: 0.08%. # Stop Forum Spam (SFS) listings: 9,002. # Updated: 2018.05.25 / Checked: 2019.08.29 2a02:5740::/46 Deny Cloud 2a02:5740:4::/47 Deny Cloud 2a02:5740:6::/48 Deny Cloud Origin: EE Tag: Packet Exchange Limited # ASN 42926 ("Radore Veri Merkezi Hizmetleri A.S"). # %Listed, Google Malware Dashboard: 0.07%. # Stop Forum Spam (SFS) listings: 1,040. # Updated: 2019.08.21 2a00:56a0::/32 Deny Cloud 2a01:790::/32 Deny Cloud 2a05:88c0::/29 Deny Cloud 2a05:a740::/29 Deny Cloud 2a06:f7c0::/29 Deny Cloud 2a09:cfc0::/29 Deny Cloud 2a0b:5ec0::/29 Deny Cloud 2a0c:f500::/29 Deny Cloud Origin: TR Tag: Radore Veri Merkezi # ASN 204655 ("Novogara LTD"). # Spam tolerant network. # Stop Forum Spam (SFS) listings: 38. # Updated: 2019.08.27 2a0b:b7c0::/30 Deny Cloud Origin: NL Tag: Novogara LTD # ASNs 44066, 203833 ("First Colo GmbH"). # Malware detected on network; Future C&C risk. # %Listed, Google Malware Dashboard: 0.09% (AS44066). # Stop Forum Spam (SFS) listings: 148 (AS44066), 80 (AS203833). # Updated: 2019.09.05 2a00:11c0:38::/48 Deny Cloud Origin: AT 2001:67c:1591::/48 Deny Cloud 2001:67c:15a2::/48 Deny Cloud Origin: CZ 2a00:5fc0::/32 Deny Cloud 2a01:7e0::/32 Deny Cloud 2a02:fb00::/29 Deny Cloud 2a05:8b80::/29 Deny Cloud 2a07:b800::/29 Deny Cloud 2a09:71c0::/29 Deny Cloud 2a0a:7bc0::/32 Deny Cloud 2a0a:7bc7::/32 Deny Cloud 2a0c:4ac0:1100::/40 Deny Cloud 2a0c:75c0::/45 Deny Cloud 2a0d:3580::/32 Deny Cloud 2a0d:5940::/29 Deny Cloud 2a0e:cb80::/29 Deny Cloud Origin: DE 2a02:6b40::/32 Deny Cloud Origin: ES 2a0b:b87:ffef::/48 Deny Cloud Origin: NL Tag: First Colo GmbH # ASN 62088 ("Sinarohost LTD"). # Malware detected on network; Future C&C risk. # Stop Forum Spam (SFS) listings: 936. # Updated: 2019.08.29 2a01:9520::/31 Deny Cloud 2a01:9522::/32 Deny Cloud Origin: GB 2a09:7c44::/32 Deny Cloud Origin: MD Tag: Sinarohost LTD # ASN 197695 ("Domain names registrar REG.RU"). # Malware detected on network; Future C&C risk. # %Listed, Google Malware Dashboard: 0.11%. # Stop Forum Spam (SFS) listings: 438. # Updated: 2018.06.19 / Checked: 2019.08.29 2a00:1b48::/32 Deny Cloud 2a00:f940:1::/48 Deny Cloud 2a00:f940:2::/47 Deny Cloud 2a00:f940:4::/46 Deny Cloud 2a00:f940:8::/47 Deny Cloud Origin: RU Tag: REG.RU # ASNs 4769, 46015, 55405, 136170 ("Exa Bytes Network Sdn.Bhd"). # Careful when updating; Also contains some proxies and VPNs (should be marked differently). # Malware detected on network; Future C&C risk. # Updated: 2018.06.19 / Checked: 2019.04.18 2402:6c00::/32 Deny Cloud Origin: MY Tag: Exa Bytes Network # ASN 45731 ("ARDH GLOBAL INDONESIA, PT"). # Malware detected on network; Future C&C risk. # %Listed, Google Malware Dashboard: 0.90%. # Stop Forum Spam (SFS) listings: 39. # Updated: 2018.06.19 / Checked: 2019.05.10 2001:df0:bc::/48 Deny Cloud Origin: ID Tag: ARDH GLOBAL # ASN 24971 ("Master Internet s.r.o"). # %Listed, Google Malware Dashboard: 0.30%. # Stop Forum Spam (SFS) listings: 85. # Updated: 2019.04.16 / Checked: 2019.08.29 2001:678:a50::/48 Deny Cloud 2001:67c:68::/48 Deny Cloud 2a00:a5a0::/32 Deny Cloud 2a01:430::/32 Deny Cloud 2a03:3b40::/38 Deny Proxy 2a03:7460::/32 Deny Cloud 2a06:8200::/32 Deny Cloud 2a07:4880::/29 Deny Cloud 2a0b:3240::/32 Deny Cloud 2a0c:6380::/29 Deny Cloud Origin: CZ 2a04:16c0:200::/48 Deny Cloud Origin: NL Tag: Master Internet # ASN 200651 ("Flokinet Ltd"). # %Listed, Google Malware Dashboard: 0.99%. # Stop Forum Spam (SFS) listings: 19,019. # Updated: 2018.06.25 / Checked: 2019.09.08 2a06:1700::/47 Deny Cloud 2a06:1700:2::/48 Deny Cloud Origin: RO Tag: Flokinet Ltd # ASN 45753 ("Unit 1205-1207"). # Confirmed data hosters: "Simcentric", "DATAPLUGS.COM", "Ethr.Net", "CLOUD LIMITED", "NETSEC", "Lighting Hosting". # ^.*(Simcentric|DATAPLUGS\.COM|Ethr\.Net|CLOUD LIMITED|NETSEC|Hosting).*$\n # Confirmed data hosters split to the cloud services signature files. # Everything else remains in the ISPs signature files. # %Listed, Google Malware Dashboard: 2.02%. # Stop Forum Spam (SFS) listings: 9. # Updated: 2018.06.30 / Checked: 2019.09.03 2401:4c00::/32 Deny Cloud Origin: HK Tag: Unit 1205-1207 # ASN 42237 ("ICME LIMITED"). # Stop Forum Spam (SFS) listings: 265. # Updated: 2019.04.30 / Checked: 2019.09.15 2a0b:c040::/31 Deny Cloud 2a0d:8980::/29 Deny Cloud Origin: SE Tag: ICME LIMITED # ASN 49855 ("PLUTEX GmbH"). # Tor exit node + webhosting company. Users caught caught spamming via their network. # Stop Forum Spam (SFS) listings: 1,731. # Updated: 2018.07.25 / Checked: 2019.06.30 2001:678:3b4::/48 Deny Cloud 2001:678:3b8::/48 Deny Cloud 2a02:16d0::/32 Deny Cloud 2a04:cac3::/32 Deny Cloud Origin: DE Tag: PLUTEX GmbH # ASN 29017 ("Gyron Internet Ltd"). # Cloud/hosting network. Caught attempting unauthorised access to sensitive parts of websites. # %Listed, Google Malware Dashboard: 0.17%. # Updated: 2018.08.06 / Checked: 2019.08.18 2a00:14f0::/32 Deny Cloud 2a04:84c1::/32 Deny Cloud Origin: GB Tag: Gyron Internet Ltd # ASN 55229 ("White Sands Hosting"). # Stop Forum Spam (SFS) listings: 29. # Updated: 2018.09.01 / Checked: 2019.09.01 2606:3980::/48 Deny Cloud Origin: US Tag: White Sands Hosting # ASN 64267 ("Sprious LLC"). # Ranges change frequently / Should update often. # Stop Forum Spam (SFS) listings: 21,740. # Updated: 2018.09.07 / Checked: 2019.05.21 2602:fefa::/32 Deny Cloud Origin: US Tag: Sprious LLC # ASN 60144 ("3W Infra B.V"). # Caught attempting to hack honeypots. # Stop Forum Spam (SFS) listings: 132. # Updated: 2019.07.13 2a02:5060::/32 Deny Cloud 2a0c:ef03::/32 Deny Cloud Origin: NL Tag: 3W Infra B.V # ASN 58073 ("YISP B.V"). # Stop Forum Spam (SFS) listings: 3,205. # Updated: 2018.09.15 / Checked: 2019.07.24 2a02:2a38::/32 Deny Cloud Origin: NL Tag: YISP B.V # ASN 39790 ("Web4U s.r.o"). # Caught trying to hack WordPress sites. # Updated: 2018.09.17 / Checked: 2019.09.10 2001:1568::/32 Deny Cloud Origin: CZ Tag: Web4U s.r.o # ASN 13768 ("Cogeco Peer 1"). # Multi-play network, primarily offers infrastructure for webhosting services. Some unwanted traffic seen from their # ASN, probing for secure pages, spam attempts, etc. Also contains some broadband providers (should remove these when # updating): "Kijoma Broadband", "Fairleigh Dickinson University"; ^.*(?:Kijoma|University).*$\n # %Listed, Google Malware Dashboard: 0.14%. # Stop Forum Spam (SFS) listings: 373. # Updated: 2018.10.05 / Checked: 2019.08.13 2001:1978:202::/48 Deny Cloud 2001:1978:1000::/39 Deny Cloud 2001:1978:1300::/40 Deny Cloud 2001:1978:1400::/38 Deny Cloud 2001:1978:1800::/38 Deny Cloud 2001:1978:1c00::/40 Deny Cloud 2001:1978:1e00::/40 Deny Cloud 2001:1978:2000::/40 Deny Cloud 2001:1978:2300::/40 Deny Cloud 2001:1978:2400::/40 Deny Cloud 2605:9300:1::/48 Deny Cloud 2607:d500:300::/40 Deny Cloud 2607:d500:600::/40 Deny Cloud 2607:d500:d00::/40 Deny Cloud 2620:11c:c001::/48 Deny Cloud Origin: CA 2a03:8a00::/36 Deny Cloud Origin: GB 2605:6c80:3::/48 Deny Cloud 2606:be00::/40 Deny Cloud 2607:f170:20::/44 Deny Cloud Origin: US Tag: Cogeco Peer 1 # ASNs 3267, 48693 ("The federal state autonomous educational establishment of # additional professional education Center of Realization of State Educational # Policy and Informational Technologies"). # Caught trying to hack WordPress sites. # %Listed, Google Malware Dashboard: 0.31% (AS3267). # Stop Forum Spam (SFS) listings: 1 (AS3267), 1 (AS48693). # Updated: 2019.03.27 / Checked: 2019.08.04 2001:b08::/32 Deny Cloud 2a07:a6c0::/29 Deny Cloud Origin: RU Tag: TakeWYN # ASN 206898 ("Server Hosting Pty Ltd"). # %Listed, Google Malware Dashboard: 3.21%. # Stop Forum Spam (SFS) listings: 901. # Updated: 2018.11.02 / Checked: 2019.08.27 2a05:9f06::/31 Deny Cloud Origin: PT Tag: AS206898 # ASNs 51862, 54548 ("ProfitBricks, Inc"). # Added by user request. Dedicated hosting provider. # %Listed, Google Malware Dashboard: 0.07%. # Updated: 2018.12.31 / Checked: 2019.05.10 2a02:2478::/32 Deny Cloud 2a02:247a::/32 Deny Cloud Origin: DE Tag: ProfitBricks # ASN 44901 ("BelCloud Hosting Corporation"). # %Listed, Google Malware Dashboard: 0.17%. # Stop Forum Spam (SFS) listings: 563. # Updated: 2019.01.06 / Checked: 2019.05.20 2a07:1c44:3980::/41 Deny Cloud Origin: AT 2a07:5740::/31 Deny Cloud Origin: BG Tag: BelCloud # ASN 34867 ("Cosmonova LLC"). # Caught spamming while pretending to be Google. # Stop Forum Spam (SFS) listings: 507. # Updated: 2019.02.07 / Checked: 2019.09.06 2a00:17a0::/32 Deny Cloud Origin: UA Tag: Cosmonova LLC # ASN 54456 ("CloudAccess.net, LLC"). # %Listed, Google Malware Dashboard: 0.06%. # Updated: 2019.02.08 / Checked: 2019.06.10 2607:1b00:1::/48 Deny Cloud 2607:1b00:2::/47 Deny Cloud 2607:1b00:10::/48 Deny Cloud 2607:1b00:93b2::/48 Deny Cloud Origin: US Tag: CloudAccess.net # ASN 202053 ("UpCloud Ltd"). # %Listed, Google Malware Dashboard: 0.07%. # Stop Forum Spam (SFS) listings: 268. # Updated: 2019.06.10 2a04:3540::/30 Deny Cloud 2a04:3544::/31 Deny Cloud Origin: FI 2a09:51c0::/29 Deny Cloud Origin: NL Tag: UpCloud Ltd # ASN 21769 ("Colocation America Corporation"). # %Listed, Google Malware Dashboard: 0.94%. # Stop Forum Spam (SFS) listings: 394. # Updated: 2019.06.10 / Checked: 2019.09.15 2a09:1e80::/29 Deny Cloud 2a0a:1f47::/32 Deny Cloud Origin: NL 2a0b:2a86::/32 Deny Cloud 2a0c:2f44::/30 Deny Cloud Origin: RU 2602:fed3:6::/48 Deny Cloud 2602:fed3:b::/48 Deny Cloud 2602:fed3:11::/48 Deny Cloud 2606:9a80::/32 Deny Cloud 2607:f188::/32 Deny Cloud Origin: US Tag: Colo America Corp # ASN 136557 ("Host Universal Pty Ltd"). # %Listed, Google Malware Dashboard: 0.41%. # Stop Forum Spam (SFS) listings: 5,939. # Updated: 2019.06.14 2402:7340:1::/48 Deny Cloud 2402:7340:2::/48 Deny Cloud 2404:f780:2::/48 Deny Cloud 2404:f780:4::/47 Deny Cloud 2404:f780:8::/48 Deny Cloud 2406:d500:4::/48 Deny Cloud 2406:d500:6::/48 Deny Cloud 2406:d500:9::/48 Deny Cloud 2406:d500:12::/48 Deny Cloud 2406:d500:14::/48 Deny Cloud 2406:d500:ee::/48 Deny Cloud 2406:d501::/32 Deny Cloud Origin: AU 2a09:54c0::/48 Deny Cloud Origin: CY 2a0d:7f47::/48 Deny Cloud Origin: GB 2402:9e80:6::/48 Deny Cloud Origin: HK 2400:9f40::/32 Deny Cloud 2402:bd80::/32 Deny Cloud 2403:42c0::/32 Deny Cloud 2405:f180::/32 Deny Cloud 2407:3b80::/32 Deny Cloud Origin: IN 2001:df4:fc00::/48 Deny Cloud 2402:bd82::/31 Deny Cloud Origin: NZ Tag: Host Universal Pty Ltd # ASN 15083 ("Infolink Global Corporation"). # %Listed, Google Malware Dashboard: 0.34%. # Stop Forum Spam (SFS) listings: 129. # Updated: 2019.02.27 / Checked: 2019.06.24 2a06:8e40::/29 Deny Cloud Origin: DK 2607:1680::/32 Deny Cloud 2607:feb8::/32 Deny Cloud Origin: US Tag: Infolink Global Corporation # ASN 63473 ("HostHatch LLC"). # Caught spamming while pretending to be Google. # %Listed, Google Malware Dashboard: 0.30%. # Stop Forum Spam (SFS) listings: 339. # Updated: 2019.07.09 2a01:6f0:ffff::/48 Deny Cloud 2a04:bdc7:100::/48 Deny Cloud Origin: DE 2a0e:dc0:3::/48 Deny Cloud Origin: NL 2605:4840:3::/48 Deny Cloud 2a0d:5600:30::/47 Deny Cloud 2a0d:5600:33::/48 Deny Cloud Origin: US Tag: HostHatch LLC # ASN 35913 ("DediPath"). # Dedicated hosting. Some listings on various DBs. Some announces suggest # possible proxies (should mark accordingly). # %Listed, Google Malware Dashboard: 0.10%. # Stop Forum Spam (SFS) listings: 1,460. # Updated: 2019.03.13 / Checked: 2019.07.18 2402:d0c0:2::/47 Deny Cloud Origin: SG 2602:fe90:100::/40 Deny Cloud 2602:fe90:200::/39 Deny Cloud Origin: US Tag: DediPath # ASNs 36444, 52924, 202521 ("NEXCESS.NET L.L.C"). # %Listed, Google Malware Dashboard: 1.83% (AS36444), 1.75% (AS202521). # Stop Forum Spam (SFS) listings: 201 (AS36444), 15 (AS52924). # Updated: 2019.03.19 / Checked: 2019.08.01 2a07:45c4::/40 Deny Cloud Origin: GB 2607:f7c0::/32 Deny Cloud Origin: US Tag: NEXCESS.NET # ASN 48282 ("McHost.Ru"). # %Listed, Google Malware Dashboard: 0.12%. # Stop Forum Spam (SFS) listings: 836. # Updated: 2019.03.24 / Checked: 2019.08.03 2a0d:8480::/47 Deny Cloud Origin: RU Tag: McHost.Ru # ASN 13830 ("Nexril"). # Stop Forum Spam (SFS) listings: 9. # Updated: 2019.08.04 2a07:1c40:1020::/48 Deny Cloud Origin: AT 2a0c:b642:1a02::/48 Deny Cloud Origin: BE 2a06:e881:620f::/48 Deny Cloud Origin: CH 2a04:8802::/31 Deny Cloud 2a04:8804::/30 Deny Cloud 2a04:dd82::/31 Deny Cloud 2a04:dd84::/30 Deny Cloud 2a07:dec4::/30 Deny Cloud 2a0c:fe40::/29 Deny Cloud Origin: RU 2001:506:30::/48 Deny Cloud 2602:fece::/36 Deny Cloud 2604:fbc0::/36 Deny Cloud Origin: US Tag: Nexril # ASN 209299 ("VITOX TELECOM"). # Dedicated hosting provider and server leasing. SQLi and spam attempts caught. # Updated: 2019.07.10 2a0d:a740::/47 Deny Cloud Origin: EE Tag: CLOUD STAR # ASN 14987 ("Rethem Hosting LLC"). # Caught spamming. # Updated: 2019.03.30 / Checked: 2019.08.11 2001:550:101::/48 Deny Cloud 2607:8500::/32 Deny Cloud Origin: US Tag: Rethem Hosting LLC # ASN 44220 ("Parfumuri Femei.com SRL"). # Very high levels of spam originating from this network. # %Listed, Google Malware Dashboard: 0.88%. # Stop Forum Spam (SFS) listings: 60,107. # Updated: 2019.08.18 2a09:a380::/29 Deny Cloud Origin: RO Tag: Parfumuri Femei # ASN 18254 ("KLAYER LLC"). # %Listed, Google Malware Dashboard: 2.61% (AS18254). # Stop Forum Spam (SFS) listings: 10 (AS18254), 1 (AS49466). # Updated: 2019.04.18 / Checked: 2019.09.05 2401:1640:10::/48 Deny Cloud Origin: HK Tag: KLAYER LLC # ASNs 42708, 43948 ("GleSYS AB"; formerly "Portlane AB"). # Exclude (carries human endpoints and seems clean): # - "^.*Internetbolaget.*$\n" # Mark as proxy: # - "^(.*(?:VP[SN]|Tunnel|Edelino).*)$" # Mark as cloud: # - "^(.*(?:Host|Netelia|Sveaab|GleSYS|Webbplatsen|InfoGuard).*)$" # Mark as spam (carries human endpoints, but also poses a spam risk): # - "^(.*(?:Svenska).*)$" # Everything else mark as generic. # %Listed, Google Malware Dashboard: 0.13% (AS42708), 0.03% (AS43948). # Stop Forum Spam (SFS) listings: 1,622 (AS42708). # Updated: 2019.05.02 / Checked: 2019.09.18 2a01:8640:6::/48 Deny Cloud Origin: GB 2a00:1a28::/32 Deny Cloud 2a02:750::/29 Deny Cloud Origin: SE Tag: Portlane Networks AB # ASN 25780 ("HugeServer Networks, LLC"). # Caught trying to hack WordPress sites. # Stop Forum Spam (SFS) listings: 139. # Updated: 2019.05.02 / Checked: 2019.09.15 2a03:a3a0::/32 Deny Cloud Origin: NL 2604:34c0::/32 Deny Cloud 2604:6b40::/32 Deny Cloud 2605:8680::/40 Deny Cloud 2605:8680:ff1::/48 Deny Cloud 2605:8680:ff2::/47 Deny Cloud 2605:8680:eeee::/48 Deny Cloud 2605:8680:efef::/48 Deny Cloud 2605:8680:fffe::/47 Deny Cloud 2605:8681::/32 Deny Cloud Origin: US Tag: HugeServer Networks # ASN 9009 ("M247 Ltd"). # Multiplay network providing broadband connectivity, server leasing, line rental, webhosting services and others. # Anything marked as "server" or "host", we'll move to the cloud/hosting signature files. ^(.*(?:Host|Server).*)\x01$ # Everything else can go in the ISPs signature files. When updating, to reduce the risk of false positives: # - Remove all subordinates of 38.0.0.0/8 from final aggregate (already blocked elsewhere and don't want duplicates). # - "Secure Internet LLC" mark as proxy (not generic). # Stop Forum Spam (SFS) listings: 255,032. # Updated: 2019.05.13 / Checked: 2019.09.15 2001:ac8:44::/48 Deny Cloud Origin: GB Tag: M247 Ltd # ASN 3728 ("Onramp Access LLC"). # Caught trying to hack WordPress sites. # Stop Forum Spam (SFS) listings: 22. # Updated: 2019.05.21 2604:a400:8000::/36 Deny Cloud Origin: US Tag: Onramp Access LLC # ASN 1764 ("Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH"). # Caught trying to hack WordPress sites + huge amounts of spam originating from this ASN. Appears to be a cloud # infrastructure provider. No evidence of human endpoints currently, but should keep a close eye on this in case of # possible future false positives (large range of provided services; could be something in there that I've missed). # Re-check when updating. # %Listed, Google Malware Dashboard: 0.23%. # Stop Forum Spam (SFS) listings: 32,441. # Updated: 2019.05.21 2001:4b60:100::/48 Deny Cloud 2a01:190::/29 Deny Cloud 2a03:e600::/32 Deny Cloud 2a05:dd80::/29 Deny Cloud 2a07:3740::/29 Deny Cloud 2a07:4080::/29 Deny Cloud 2a07:a980::/32 Deny Cloud 2a0b:5a40::/29 Deny Cloud 2a0c:4e40::/29 Deny Cloud 2a0d:4d80::/29 Deny Cloud Origin: AT Tag: Next Layer # ASN 62744 ("Quintex Alliance Consulting"). # Caught probing honeypots for vulnerabilities. # Stop Forum Spam (SFS) listings: 59,743. # Updated: 2019.05.25 2620:7:6000::/47 Deny Cloud Origin: US Tag: Quintex # ASN 63996 ("Mazeda Networks Limited"). # Caught XRumer operating on this network. Primarily a server leasing and webhosting company, but marking for use with # reCAPTCHA, due to that they're multiplay, and also offer corporate internet connectivity (possible human endpoints). # Not sure how to distinguish which ranges belong to which service within the network. # Stop Forum Spam (SFS) listings: 241. # Updated: 2019.05.28 2400:3240::/32 Deny Cloud Origin: BD Tag: Mazeda Networks --- recaptcha: enabled: true # ASN 29889 ("Fast Serv Networks, LLC"). # Dedicated host; evidence of unauthorised access attempts; spam events. # Stop Forum Spam (SFS) listings: 158. # Updated: 2019.06.10 2602:fffa::/36 Deny Cloud 2620:100:5007::/48 Deny Cloud Origin: US Tag: Fast Serv Networks # ASN 24768 ("ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA"). # Significant source of spam. # %Listed, Google Malware Dashboard: 0.22%. # Stop Forum Spam (SFS) listings: 9,190. # Updated: 2019.06.15 2a06:5700::/29 Deny Cloud Origin: DE 2a07:ba00::/29 Deny Cloud Origin: GR 2a06:5800::/29 Deny Cloud Origin: IN 2a00:1650::/32 Deny Cloud Origin: PT Tag: ALMOUROLTEC # ASN 51048 ("Next Connex Ltd"). # Some reports of weird access attempts. Cloud provider. Added for the moment and will monitor for a while. # Stop Forum Spam (SFS) listings: 1. # Updated: 2019.06.23 2a03:4300::/29 Deny Cloud Origin: GB Tag: Next Connex Ltd --- recaptcha: enabled: true # ASN 61272 ("Informacines sistemos ir technologijos, UAB"). # Caught trying to flood/spam honeypots. # Stop Forum Spam (SFS) listings: 1,225. # Updated: 2019.06.24 2a02:e00:ffe7::/48 Deny Cloud Origin: DE 2a04:2180::/32 Deny Cloud 2a04:2181:c010::/48 Deny Cloud 2a09:140::/29 Deny Cloud Origin: LT 2a0a:1f40::/32 Deny Cloud Origin: NL Tag: AS61272 # ASN 43160 ("Mdc Datacenter S.L"). # Source of forum spam. (When updating, omit invalids; marked with recaptcha # to reduce the risk of false positives; interaces with some ISPs). # Stop Forum Spam (SFS) listings: 65. # Updated: 2019.07.02 2a01:b5c0::/32 Deny Cloud Origin: ES Tag: Mdc Datacenter S.L # ASN 64236 ("Accuserv Inc"). # Source of forum spam. # Stop Forum Spam (SFS) listings: 11. # Updated: 2019.07.02 2604:abc0::/32 Deny Cloud 2a09:4bc7:d010::/44 Deny Cloud Origin: US Tag: Accuserv Inc # ASN 31463 ("4D Data Centres Limited"). # Source of forum spam. # %Listed, Google Malware Dashboard: 0.38%. # Updated: 2019.07.02 2a0d:98c0::/29 Deny Cloud Origin: DE 2a00:1c18::/29 Deny Cloud 2a03:9ba0:100::/40 Deny Cloud 2a07:45c2::/40 Deny Cloud 2a0c:bc80::/32 Deny Cloud 2a0d:4140::/32 Deny Cloud Origin: GB 2607:8b00:1::/48 Deny Cloud Origin: US Tag: 4D Data # ASN 134094 ("Serverfield Co., Ltd."). # Evidence of spamming at some RBLs. # Stop Forum Spam (SFS) listings: 604. # Updated: 2019.07.09 2a0a:40:100::/40 Deny Cloud Origin: FR 2402:1780:3::/48 Deny Cloud 2402:1780:4::/46 Deny Cloud 2402:1780:8::/47 Deny Cloud 2402:1780:10::/46 Deny Cloud 2402:1780:14::/48 Deny Cloud 2a0c:5201::/32 Deny Cloud Origin: TW Tag: Serverfield # ASNs 7160, 31898, 43894 ("Oracle Corporation"). # Listing here due to reports from some users of spam events, brute-force # attempts, probing, and other unwanted traffic from their ASNs, plus various # RBL listings at various RBLs. Example: abuseipdb.com/check/129.213.67.237 # They own a very large number of ASNs though, and most of them seem clean at # the moment, and blocking more than needed reduces maintainability (i.e., # discourages regular updates), so I'm opting to list only those ASNs directly # connected to any currently available reports. Quite a massive network, so # should monitor for a while, for potential false positives and potential # future additions alike. # %Listed, Google Malware Dashboard: 0.03% (AS7160). # Stop Forum Spam (SFS) listings: 84 (AS7160), 189 (AS31898). # Updated: 2019.07.13 2801:1:8800::/48 Deny Cloud 2801:1:8805::/48 Deny Cloud Origin: CR 2405:ba00:8800::/48 Deny Cloud 2405:ba00:8804::/48 Deny Cloud 2405:ba00:8808::/48 Deny Cloud 2405:ba00:8810::/48 Deny Cloud Origin: IN 2a02:6900:8804::/48 Deny Cloud 2a02:6900:8808::/48 Deny Cloud 2a02:6900:880c::/48 Deny Cloud 2a02:6900:8810::/48 Deny Cloud 2a02:6900:8814::/48 Deny Cloud 2a02:6900:8818::/48 Deny Cloud 2a02:6900:881c::/48 Deny Cloud 2a02:6900:8820::/48 Deny Cloud 2a02:6900:8824::/48 Deny Cloud Origin: SE 2603:c000:800::/40 Deny Cloud 2603:c000:a00::/40 Deny Cloud 2603:c001:1000::/39 Deny Cloud 2603:c001:1400::/39 Deny Cloud 2603:c002:800::/40 Deny Cloud 2603:c002:a00::/40 Deny Cloud 2603:c002:8800::/40 Deny Cloud 2603:c002:8a00::/40 Deny Cloud 2603:c011::/36 Deny Cloud 2603:c011:4000::/36 Deny Cloud 2603:c022::/35 Deny Cloud 2603:c022:8000::/35 Deny Cloud 2606:b400:8804::/48 Deny Cloud 2606:b400:8808::/48 Deny Cloud 2606:b400:880c::/48 Deny Cloud 2606:b400:8814::/48 Deny Cloud 2606:b400:881c::/48 Deny Cloud 2606:b400:8820::/48 Deny Cloud 2606:b400:8824::/47 Deny Cloud 2606:b400:882b::/48 Deny Cloud 2606:b400:8830::/47 Deny Cloud 2606:b400:8832::/48 Deny Cloud Origin: US Tag: Oracle Corporation # ASN 60355 ("KV Solutions B.V"). # Evidence of spamming at some RBLs. # Updated: 2019.07.13 2a0c:e640::/29 Deny Cloud 2a0d:2580::/29 Deny Cloud 2a0d:2680::/29 Deny Cloud Origin: NL Tag: KV Solutions B.V # ASN 202448 ("MVPS LTD"). # Mirai detected on this network. # Stop Forum Spam (SFS) listings: 3. # Updated: 2019.07.16 2a05:8280::/32 Deny Cloud 2a0c:b9c0::/32 Deny Cloud Origin: DE 2a09:cd40::/32 Deny Cloud Origin: NL Tag: MVPS LTD # ASN 134113 ("Kazi Sazzad Hossain T/A Millennium Computers & Networking"). # Caught trying to hack WordPress sites. # Stop Forum Spam (SFS) listings: 8. # Updated: 2019.07.21 2403:140::/32 Deny Cloud Origin: BD Tag: Kazi Sazzad Hossain # ASNs 39535, 62217 ("VooServers Ltd"). # Cloud provider; Source of spam and other unwanted traffic. # %Listed, Google Malware Dashboard: 0.33% (AS62217). # Stop Forum Spam (SFS) listings: 27 (AS62217). # Updated: 2019.07.22 2a06:1287:2600::/44 Deny Cloud Origin: BY 2a0b:4040::/29 Deny Cloud Origin: DE 2001:67c:2e68::/47 Deny Cloud Origin: FR 2a00:1c10:103::/48 Deny Cloud 2a00:1c10:104::/48 Deny Cloud 2a01:6c60::/30 Deny Cloud 2a07:a340::/32 Deny Cloud 2a0b:3880::/32 Deny Cloud Origin: GB 2a04:a140::/32 Deny Cloud 2a05:2d00::/32 Deny Cloud 2a06:3e80::/32 Deny Cloud Origin: NL 2605:45c0::/35 Deny Cloud 2607:6980::/43 Deny Cloud Origin: US 2c0f:f7e8::/47 Deny Cloud Origin: ZA Tag: VooServers Ltd # ASNs 12406, 134204 ("Business Network Ltd"). # Cloud provider; Source of spam and other unwanted traffic. # Stop Forum Spam (SFS) listings: 1,326 (AS12406), 93 (AS134204). # Updated: 2019.07.24 2400:4d40::/32 Deny Cloud Origin: BD 2a00:6440::/32 Deny Cloud 2a06:1287:40::/48 Deny Cloud Origin: BY Tag: Business Network Ltd