File: vault/ipv6.dat

Recommend this page to a friend!
vault/ipv6.dat
File:	`vault/ipv6.dat`
Role:	Auxiliary data
Content type:	`text/plain`
Description:	Auxiliary data
Class:	CIDRAM Check if an IP address is a bad source of traffic
Author:	By Caleb
Last change:	Signatures update. Signatures update. Signatures update. Signatures update.
Date:	5 years ago
Size:	`161,777 bytes`
Download
# IPv6 signatures file (unwanted cloud services and non-human endpoints).
# Canonical link to the online version of this file: https://github.com/CIDRAM/CIDRAM/blob/master/vault/ipv6.dat

# Version: 2019.260.254
# Last modified: 2019.09.18


# ---
# ASN 46844 ("Sharktech").
# Source of forum spam and malware.
# %Listed, Google Malware Dashboard: 0.29%.
# Stop Forum Spam (SFS) listings: 4,196.
# Updated: 2019.04.09 / Checked: 2019.08.22

2a00:c2c0:ffff::/48 Deny Cloud
Origin: NL
2a0c:c181::/32 Deny Cloud
Origin: RU
2610:150::/32 Deny Cloud
Origin: US
Tag: Sharktech


# ASN 35916 ("MULTACOM CORPORATION").
# %Listed, Google Malware Dashboard: 1.49%.
# Stop Forum Spam (SFS) listings: 1,344.
# Updated: 2019.03.13 / Checked: 2019.07.18

2a09:dc04::/30 Deny Cloud
Origin: NL
2a04:9d00::/29 Deny Cloud
2a07:dec0::/30 Deny Cloud
2a07:f000::/29 Deny Cloud
2a0c:980::/29 Deny Cloud
2a0c:16c0::/29 Deny Cloud
2a0c:7980::/29 Deny Cloud
2a0c:81c0::/29 Deny Cloud
2a0c:b840::/29 Deny Cloud
2a0d:5980::/29 Deny Cloud
2a0d:6900::/29 Deny Cloud
2a0d:9480::/29 Deny Cloud
2a0d:ab00::/29 Deny Cloud
2a0d:af00::/29 Deny Cloud
2a0d:d480::/29 Deny Cloud
Origin: RU
2607:9a00::/32 Deny Cloud
2607:f130::/32 Deny Cloud
Origin: US
Tag: Multacom Corp


# ASN 58879 ("ShangHai AnchNet Tec").
# %Listed, Google Malware Dashboard: 2.10%.
# Stop Forum Spam (SFS) listings: 37.
# Updated: 2019.04.07 / Checked: 2019.08.22

2404:de80::/39 Deny Cloud
Origin: HK
Tag: ShangHai AnchNet Tec


# ASN 7497 ("Computer Network Information Center").
# %Listed, Google Malware Dashboard: 0.43%.
# Stop Forum Spam (SFS) listings: 7.
# Updated: 2018.03.28 / Checked: 2019.06.20

2001:cc0::/32 Deny Cloud
2400:dd00::/28 Deny Cloud
2401:de00::/32 Deny Cloud
Origin: CN
Tag: CST-NET


# ASN 46573 ("Global Frag Networks").
# %Listed, Google Malware Dashboard: 1.55%.
# Stop Forum Spam (SFS) listings: 162.
# Updated: 2019.02.09 / Checked: 2019.06.10

2604:d180::/32 Deny Cloud
Origin: US
Tag: Global Frag Networks


# ASN 54600 ("PEG TECH INC").
# %Listed, Google Malware Dashboard: 0.91%.
# Stop Forum Spam (SFS) listings: 3,056.
# Updated: 2019.04.23 / Checked: 2019.09.10

2605:7280::/40 Deny Cloud
Origin: US
Tag: PEG TECH INC


# ASNs 133731, 134176 ("Xinyuan Interconnect (HK) Limited", formerly "Royal Network Technology", and "Rainbow network
# limited"). Ranges change frequently / Should update often.
# %Listed, Google Malware Dashboard: 2.79% (AS133731).
# Stop Forum Spam (SFS) listings: 74 (AS133731), 1 (AS134176).
# Updated: 2019.05.21

2403:3a40::/32 Deny Cloud
2403:3b40::/32 Deny Cloud
2403:3bc0::/32 Deny Cloud
2404:3bc0::/32 Deny Cloud
2404:3c40::/32 Deny Cloud
Origin: CN
2a0c:f480::/29 Deny Cloud
Origin: CZ
2a0b:4340:80::/47 Deny Cloud
2a0d:2480::/29 Deny Cloud
Origin: DE
2404:8c80::/32 Deny Cloud
Origin: HK
2404:b8c0::/32 Deny Cloud
Origin: JP
Tag: Royal Rainbow


# ASN 26347 ("New Dream Network, LLC").
# %Listed, Google Malware Dashboard: 0.29%.
# Stop Forum Spam (SFS) listings: 175.
# Updated: 2019.01.16 / Checked: 2019.05.25

2607:f298:4::/47 Deny Cloud
2607:f298:6::/48 Deny Cloud
2607:f298:a::/47 Deny Cloud
2607:f298:6050::/44 Deny Cloud
Origin: US
Tag: New Dream Network


# ASN 33182 ("HostDime.com, Inc").
# %Listed, Google Malware Dashboard: 0.26%.
# Stop Forum Spam (SFS) listings: 645.
# Updated: 2019.08.22

2804:9c4::/32 Deny Cloud
Origin: BR
2803:c40::/32 Deny Cloud
Origin: CO
2a04:840::/44 Deny Cloud
Origin: GB
2404:a700::/32 Deny Cloud
Origin: IN
2806:213::/32 Deny Cloud
Origin: MX
2605:2080::/33 Deny Cloud
2607:fcd8::/43 Deny Cloud
2607:fcd8:20::/44 Deny Cloud
Origin: US
Tag: HostDime.com, Inc


# ASN 47583 ("Hostinger International Limited").
# %Listed, Google Malware Dashboard: 0.38%.
# Stop Forum Spam (SFS) listings: 217.
# Updated: 2018.09.06 / Checked: 2019.07.07

2a02:4780::/46 Deny Cloud
2a02:4780:4::/47 Deny Cloud
2a02:4780:8::/47 Deny Cloud
Origin: LT
Tag: Hostinger Int


# ASN 12824 ("home.pl").
# %Listed, Google Malware Dashboard: 0.45%.
# Stop Forum Spam (SFS) listings: 45.
# Updated: 2019.01.06 / Checked: 2019.05.21

2a02:25a8::/29 Deny Cloud
Origin: PL
Tag: home.pl


# ASN 25532 ("Masterhost").
# %Listed, Google Malware Dashboard: 0.15%.
# Stop Forum Spam (SFS) listings: 2.
# Updated: 2016.04.18 / Checked: 2019.09.06

2a00:15f8::/32 Deny Cloud
Origin: RU
Tag: Masterhost


# ASN 26496 ("GoDaddy.com, LLC").
# %Listed, Google Malware Dashboard: 0.40%.
# Stop Forum Spam (SFS) listings: 3,752.
# Updated: 2019.08.11

2a00:1168::/32 Deny Cloud
Origin: DE
2407:1c00::/32 Deny Cloud
Origin: SG
2603:4::/44 Deny Cloud
2603:4:10::/45 Deny Cloud
2603:5:2100::/40 Deny Cloud
2603:5:2200::/40 Deny Cloud
2607:f208:209::/48 Deny Cloud
2607:f208:305::/48 Deny Cloud
2607:f208:400::/42 Deny Cloud
2607:f208:440::/43 Deny Cloud
2607:f208:500::/44 Deny Cloud
2607:f208:530::/44 Deny Cloud
2607:f208:560::/44 Deny Cloud
2607:f208:580::/44 Deny Cloud
2607:f208:1020::/44 Deny Cloud
2607:f208:1160::/44 Deny Cloud
2607:f208:4000::/40 Deny Cloud
2607:f208:4f02::/48 Deny Cloud
2607:f208:5000::/40 Deny Cloud
2607:f208:5f01::/48 Deny Cloud
2607:f208:5f02::/48 Deny Cloud
2607:f208:a010::/48 Deny Cloud
2607:f208:a110::/48 Deny Cloud
2607:f208:af00::/47 Deny Cloud
Origin: US
Tag: GoDaddy.com, LLC


# ASN 8560 ("1&1 Internet SE").
# %Listed, Google Malware Dashboard: 0.15%.
# Stop Forum Spam (SFS) listings: 3,800.
# Updated: 2018.04.10 / Checked: 2019.07.06

2001:8d8::/32 Deny Cloud
2a0d:7f00::/29 Deny Cloud
Origin: DE
2001:ba0::/32 Deny Cloud
Origin: ES
2a00:da00::/32 Deny Cloud
Origin: GB
2607:f1c0::/32 Deny Cloud
Origin: US
Tag: 1&1 Internet SE


# ASNs 16276, 35540 ("OVH Systems").
# Caught attempting to hack honeypots.
# %Listed, Google Malware Dashboard: 0.22% (AS16276).
# Stop Forum Spam (SFS) listings: 252,644 (AS16276), 10 (AS35540).
# Updated: 2017.05.06 / Checked: 2019.07.18

2607:5300::/32 Deny Cloud
Origin: CA
2001:41d0::/32 Deny Cloud
Origin: FR
2402:1f00::/32 Deny Cloud
Origin: HK
2604:2dc0::/32 Deny Cloud
Origin: US
Tag: OVH Systems


# ASN 27823 ("Dattatec.com").
# %Listed, Google Malware Dashboard: 0.16%.
# Stop Forum Spam (SFS) listings: 115.
# Updated: 2016.04.18 / Checked: 2019.09.15

2800:6c0::/32 Deny Cloud
Origin: AR
Tag: Dattatec.com


# ASNs 7203, 16265, 19148, 28753, 30633, 38930, 59253, 60626, 60781, 133752, 136988, 205544, 394380, 395954, 396190,
# 396362 ("Leaseweb Network"). Updated: 2019.06.20

2a03:f85:2::/48 Deny Cloud
Origin: AT
2401:d040::/32 Deny Cloud
Origin: AU
2602:fe6a:f::/48 Deny Cloud
Origin: CA
2a06:1180::/29 Deny Cloud
Origin: CY
2a00:c98::/32 Deny Cloud
2a01:198:ff00::/40 Deny Cloud
2a03:ce40::/47 Deny Cloud
Origin: DE
2a03:7480::/44 Deny Cloud
Origin: ES
2a02:2ca0:3a::/48 Deny Cloud
Origin: EU
2a01:9260::/32 Deny Cloud
2a0d:3000::/29 Deny Cloud
Origin: GB
2a07:3b80:3::/48 Deny Cloud
Origin: GI
2402:9e80:2402::/48 Deny Cloud
Origin: HK
2001:1af8::/32 Deny Cloud
2402:20c0:1::/48 Deny Cloud
2a00:ec8::/32 Deny Cloud
2a00:5020::/48 Deny Cloud
2a00:9d20:1::/48 Deny Cloud
2a00:9d20:2::/47 Deny Cloud
2a00:9d20:4::/48 Deny Cloud
2a00:9d20:7::/48 Deny Cloud
2a00:9d20:31::/48 Deny Cloud
2a00:9d20:34::/48 Deny Cloud
2a00:9d20:49::/48 Deny Cloud
2a00:9d20:53::/48 Deny Cloud
2a00:9d20:65::/48 Deny Cloud
2a00:9d20:101::/48 Deny Cloud
2a00:9d20:102::/48 Deny Cloud
2a00:9d20:5353::/48 Deny Cloud
2a00:c6c0:1::/48 Deny Cloud
2a00:fc80::/48 Deny Cloud
2a01:b2e0::/29 Deny Cloud
2a02:bc0::/32 Deny Cloud
2a02:cc8::/32 Deny Cloud
2a02:2870:8000::/33 Deny Cloud
2a02:2968::/29 Deny Cloud
2a02:40c0::/36 Deny Cloud
2a03:38a0::/32 Deny Cloud
2a03:e280::/32 Deny Cloud
2a05:3f40::/30 Deny Cloud
2a06:ab00::/32 Deny Cloud
2a06:b5c0::/29 Deny Cloud
2a07:95c0::/29 Deny Cloud
2a0a:1400::/29 Deny Cloud
2a0a:2340::/29 Deny Cloud
2a0a:2d00::/29 Deny Cloud
2a0a:3200::/29 Deny Cloud
2a0c:9e40:1::/48 Deny Cloud
2a0c:9e40:2::/48 Deny Cloud
2a0d:3bc0::/29 Deny Cloud
2a0e:1a80::/29 Deny Cloud
Origin: NL
2a06:cd40:300::/48 Deny Cloud
Origin: RO
2a04:88c0::/36 Deny Cloud
2a05:b300::/29 Deny Cloud
2a06:a5c0::/29 Deny Cloud
2a07:a300::/29 Deny Cloud
Origin: SC
2001:df1:800::/47 Deny Cloud
2400:9780::/48 Deny Cloud
2402:5980::/40 Deny Cloud
2402:a7c0::/31 Deny Cloud
Origin: SG
2604:9a00::/32 Deny Cloud
2605:fe80::/32 Deny Cloud
2606:9880::/32 Deny Cloud
2607:f5b0::/32 Deny Cloud
2607:f5b2::/31 Deny Cloud
2607:f5b4::/32 Deny Cloud
2607:f5b5::/47 Deny Cloud
2607:f5b7::/32 Deny Cloud
Origin: US
Tag: Leaseweb


# ASN 43146 ("Agava Ltd").
# %Listed, Google Malware Dashboard: 0.10%.
# Stop Forum Spam (SFS) listings: 8.
# Updated: 2019.03.01 / Checked: 2019.07.02

2a03:4900::/47 Deny Cloud
2a03:4900:2::/48 Deny Cloud
2a03:4900:5::/48 Deny Cloud
2a03:4900:6::/48 Deny Cloud
2a03:4900:a0::/47 Deny Cloud
2a03:4900:fffb::/48 Deny Cloud
2a03:4900:fffc::/47 Deny Cloud
2a03:4900:ffff::/48 Deny Cloud
Origin: RU
Tag: Agava Ltd


# ASN 36351 ("SoftLayer Technologies").
# Careful when updating; Signatures reflect varying block reasons, split across multiple files.
# %Listed, Google Malware Dashboard: 0.06%.
# Stop Forum Spam (SFS) listings: 7,776.

# SoftLayer cloud services, webhosting providers, etc.
# This section all as "Run rules_softlayer.php".
# Excludes: Anything citing "TEFINCOM", "Packet Flip", "VPN", "proxy", "Privat Kommunikation", "Secure Internet" (VPNs
# and proxies; covered elsewhere).
# ^(.*(TEFINCOM|Packet Flip|VPN|Proxy|Privat Kommunikation|Secure Internet).*)$
# Excludes: Anything citing "Telecom", "AT&T", "American Heart Association" (not cloud services; shouldn't be blocked).
# ^(.*(Telecom|AT&T|American Heart Association).*)$
# Excludes: Anything citing "Starry" (not cloud services; blocked as generic via spammy ISPs).
# ^(.*(Starry).*)$
# Excludes: Anything citing "Vonex" (clean; don't need to block).
# ^(.*(Vonex).*)$
# Includes: Everything else.
# Updated: 2019.04.23 / Checked: 2019.08.13

2402:2f80::/48 Run rules_softlayer.php
2403:1480:1000::/36 Run rules_softlayer.php
2403:5680::/48 Run rules_softlayer.php
Origin: AU
2803:3240:1::/48 Run rules_softlayer.php
Origin: BZ
2402:f740::/36 Run rules_softlayer.php
Origin: CN
2a01:6f0:fffe::/48 Run rules_softlayer.php
Origin: DE
2a04:f400:3000::/48 Run rules_softlayer.php
Origin: EU
2a02:2498:3::/48 Run rules_softlayer.php
Origin: GB
2402:9e80::/47 Run rules_softlayer.php
2403:a280:8000::/36 Run rules_softlayer.php
Origin: HK
2001:df3:8800::/48 Run rules_softlayer.php
2001:df4:f000::/48 Run rules_softlayer.php
2001:df5:9000::/48 Run rules_softlayer.php
Origin: IN
2a03:8180:1000::/38 Run rules_softlayer.php
2a03:8180:1400::/39 Run rules_softlayer.php
2a03:8180:1600::/40 Run rules_softlayer.php
2a03:8180:1800::/39 Run rules_softlayer.php
2a03:8180:1c00::/39 Run rules_softlayer.php
2a03:8180:1f00::/40 Run rules_softlayer.php
Origin: NL
2401:c900:1000::/38 Run rules_softlayer.php
2401:c900:1400::/39 Run rules_softlayer.php
2401:c900:1600::/40 Run rules_softlayer.php
2401:c900:1800::/40 Run rules_softlayer.php
2401:c900:1f00::/40 Run rules_softlayer.php
2401:c900:2000::/39 Run rules_softlayer.php
2402:b180:1::/48 Run rules_softlayer.php
Origin: SG
2402:e380::/48 Run rules_softlayer.php
2602:ff1c:1::/48 Run rules_softlayer.php
2602:ff84:e::/48 Run rules_softlayer.php
2602:ff84:13::/48 Run rules_softlayer.php
2606:2e00:8004::/47 Run rules_softlayer.php
2606:2e00:8006::/48 Run rules_softlayer.php
2606:2e00:8008::/45 Run rules_softlayer.php
2606:2e00:8010::/45 Run rules_softlayer.php
2606:2e00:8018::/48 Run rules_softlayer.php
2606:2e00:8020::/64 Run rules_softlayer.php
2606:2e00:8021::/64 Run rules_softlayer.php
2606:2e00:8022::/64 Run rules_softlayer.php
2606:2e00:8023::/64 Run rules_softlayer.php
2606:2e00:8024::/48 Run rules_softlayer.php
2607:6980:e000::/44 Run rules_softlayer.php
2607:f0d0::/32 Run rules_softlayer.php
2620:11b:3002::/48 Run rules_softlayer.php
2620:121:5000::/47 Run rules_softlayer.php
2620:121:5002::/48 Run rules_softlayer.php
Origin: US
2803:2f40:ffff::/48 Run rules_softlayer.php
Origin: UY
Tag: SoftLayer


# ASN 42244 ("Hosting Operator eServer.ru Ltd").
# Stop Forum Spam (SFS) listings: 2.
# Updated: 2018.08.25 / Checked: 2019.09.01

2a0a:2540::/29 Deny Cloud
Origin: RU
2a04:b540:1000::/36 Deny Cloud
2a04:b540:2000::/36 Deny Cloud
Origin: SK
Tag: eServer.ru


# ASN 42244 ("Hosting Operator eServer.ru Ltd").
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2019.03.19 / Checked: 2019.08.01

2a0a:2540::/29 Deny Cloud
Origin: RU
2a04:b540:1000::/36 Deny Cloud
2a04:b540:2000::/36 Deny Cloud
Origin: SK
Tag: eServer.ru


# ASNs 6870, 12722 ("RECONN. Operator svyazy Ltd").
# %Listed, Google Malware Dashboard: 0.27% (AS12722).
# Stop Forum Spam (SFS) listings: 1,560 (AS6870), 131 (AS12722).
# Updated: 2019.02.28 / Checked: 2019.06.28

2a02:c6c0::/32 Deny Cloud
Origin: GB
2001:67c:2824::/48 Deny Cloud
2a00:1f70::/32 Deny Cloud
2a05:4800::/29 Deny Cloud
Origin: RU
Tag: svyazy


# ASN 35415 ("Webzilla B.V").
# %Listed, Google Malware Dashboard: 0.19%.
# Stop Forum Spam (SFS) listings: 140.
# Updated: 2018.08.22 / Checked: 2019.06.28

2a00:1178::/32 Deny Cloud
Origin: NL
2a06:7740::/48 Deny Cloud
2a06:78c0::/48 Deny Cloud
Origin: RU
Tag: Webzilla B.V


# ASN 53225 ("IPGLOBE DATACENTER").
# Updated: 2016.05.15 / Checked: 2019.05.06

2804:644::/32 Deny Cloud
Origin: BR
Tag: IPGLOBE DATACENTER


# ASNs 28271, 52550 ("DataCorpore Servios e Representaes").
# %Listed, Google Malware Dashboard: 1.40% (AS28271).
# Stop Forum Spam (SFS) listings: 71 (AS28271).
# Updated: 2018.09.16 / Checked: 2019.07.24

2804:4c4::/32 Deny Cloud
2804:cc0::/32 Deny Cloud
Origin: BR
Tag: DataCorpore Servios


# ASN 53850 ("GorillaServers, Inc").
# %Listed, Google Malware Dashboard: 1.35%.
# Stop Forum Spam (SFS) listings: 20,603.
# Updated: 2016.09.15 / Checked: 2019.08.27

2606:c700::/32 Deny Cloud
Origin: US
Tag: GorillaServers, Inc


# Announcing as: "Data Center", "Data Centre" (w/ + w/o space).
# Various ASNs; Sourced from HE.
# Updated: 2019.08.01

2a03:3180:f::/48 Deny Cloud
Origin: AT
2400:9c00::/32 Deny Cloud
2404:3d00:400::/40 Deny Cloud
Origin: AU
2a02:1760::/32 Deny Cloud
2a04:6480::/29 Deny Cloud
Origin: BE
2804:160::/32 Deny Cloud
2804:4c0:ffff:fd70::/64 Deny Cloud
2804:6e8::/32 Deny Cloud
2804:888::/32 Deny Cloud
2804:938::/32 Deny Cloud
2804:1208::/32 Deny Cloud
2804:122c::/32 Deny Cloud
2804:1d40::/32 Deny Cloud
2804:2460::/32 Deny Cloud
2804:3cb8::/32 Deny Cloud
2804:3fe4::/32 Deny Cloud
2804:4bbc::/32 Deny Cloud
2804:4c30::/32 Deny Cloud
Origin: BR
2607:8880::/32 Deny Cloud
Origin: CA
2001:67c:33c::/48 Deny Cloud
2a00:7580:10::/48 Deny Cloud
Origin: CH
2801:190::/44 Deny Cloud
Origin: CO
2a04:cac3::/32 Deny Cloud
2a06:9500:1001::/48 Deny Cloud
2a06:9500:1002::/47 Deny Cloud
2a06:9500:1004::/48 Deny Cloud
2a0b:3180::/29 Deny Cloud
2a0b:76c0::/29 Deny Cloud
Origin: DE
2a01:b5c0::/32 Deny Cloud
2a03:7480::/43 Deny Cloud
Origin: ES
2a00:f5c0::/32 Deny Cloud
2a04:d500::/32 Deny Cloud
Origin: FI
2a03:ad40:120::/48 Deny Cloud
2a03:ad40:130::/48 Deny Cloud
2a03:ad40:140::/48 Deny Cloud
2a03:ad40:420::/48 Deny Cloud
2a03:ad40:430::/48 Deny Cloud
Origin: FR
2001:920:184b::/48 Deny Cloud
2a04:a180::/32 Deny Cloud
2a05:dfc7:31::/48 Deny Cloud
Origin: GB
2401:9f00::/32 Deny Cloud
2407:7200::/32 Deny Cloud
Origin: HK
2a05:9580::/29 Deny Cloud
Origin: HU
2401:8800::/40 Deny Cloud
2401:8800:200::/40 Deny Cloud
2401:8800:400::/40 Deny Cloud
2401:8800:600::/40 Deny Cloud
2401:8800:800::/40 Deny Cloud
2401:8800:a00::/40 Deny Cloud
2401:8800:c00::/40 Deny Cloud
2401:8800:e00::/40 Deny Cloud
2404:7e80:1000::/36 Deny Cloud
2404:7e80:2000::/36 Deny Cloud
2404:7e80:4000::/36 Deny Cloud
2404:a700::/32 Deny Cloud
Origin: IN
2402:7a00::/32 Deny Cloud
2406:fe00::/32 Deny Cloud
Origin: JP
2a0b:1d40::/32 Deny Cloud
Origin: LT
2001:b20::/32 Deny Cloud
Origin: LU
2401:fd40::/32 Deny Cloud
Origin: MN
2806:303::/32 Deny Cloud
Origin: MX
2401:200::/32 Deny Cloud
2403:bc00:1::/48 Deny Cloud
2403:bc00:7fff::/48 Deny Cloud
2403:bc00:8000::/47 Deny Cloud
2404:6300::/32 Deny Cloud
Origin: MY
2a01:8d20::/32 Deny Cloud
2a01:9b40::/32 Deny Cloud
2a07:6d40::/29 Deny Cloud
2a0b:a180::/29 Deny Cloud
Origin: NL
2a04:6540::/32 Deny Cloud
Origin: NO
2401:9800::/32 Deny Cloud
2404:d8::/32 Deny Cloud
Origin: PH
2a0b:d280::/32 Deny Cloud
Origin: PL
2405:2500:5::/48 Deny Cloud
Origin: TH
2a03:401::/32 Deny Cloud
Origin: TR
2a03:7720::/48 Deny Cloud
Origin: UA
2602:fe3f::/36 Deny Cloud
2602:fec4::/36 Deny Cloud
2602:fff8::/36 Deny Cloud
2604:2ec0::/48 Deny Cloud
2604:2ec0:63::/48 Deny Cloud
2604:5800::/32 Deny Cloud
2605:2640::/46 Deny Cloud
2605:3380::/32 Deny Cloud
2605:4400::/32 Deny Cloud
2605:9700::/32 Deny Cloud
2605:bc00::/32 Deny Cloud
2606:db00::/32 Deny Cloud
2607:fd60:c938::/48 Deny Cloud
Origin: US
Tag: Data Center


# ASN 42807 ("Aerotek Bilisim Taahhut Sanayi ve Ticaret Limited Sirketi").
# %Listed, Google Malware Dashboard: 0.17%.
# Stop Forum Spam (SFS) listings: 2.
# Updated: 2017.07.25 / Checked: 2019.09.18

2a03:adc0::/48 Deny Cloud
Origin: TR
Tag: AS42807


# ASNs 34360, 41079, 43758, 48760, 198414 ("H88 S.A").
# Webhosting company based in Poland.
# Updated: 2019.04.12 / Checked: 2019.08.25

2001:67c:2e0::/48 Deny Cloud
2a01:4660::/32 Deny Cloud
2a02:1778::/32 Deny Cloud
2a07:1cc0::/29 Deny Cloud
Origin: PL
Tag: H88 S.A


# ASN 46475 ("Limestone Networks, Inc").
# %Listed, Google Malware Dashboard: 0.22%.
# Stop Forum Spam (SFS) listings: 19.
# Updated: 2019.03.19 / Checked: 2019.08.01

2602:fe6b::/36 Deny Cloud
2607:ff68::/32 Deny Cloud
Origin: US
Tag: Limestone Networks


# ASN 13301 ("United Gameserver GmbH").
# Caught trying to DDoS SFS.
# %Listed, Google Malware Dashboard: 0.17%.
# Updated: 2016.05.13 / Checked: 2019.05.21

2a01:480::/32 Deny Cloud
Origin: DE
Tag: United Gameserver


# ASN 24961 ("myLoc managed IT AG").
# Caught trying to DDoS SFS.
# %Listed, Google Malware Dashboard: 0.13%.
# Stop Forum Spam (SFS) listings: 23,453.
# Updated: 2019.08.05

2001:678:248::/48 Deny Cloud
2001:67c:192c::/48 Deny Cloud
2001:4ba0::/31 Deny Cloud
2a07:4400::/29 Deny Cloud
2a0c:2500::/29 Deny Cloud
2a0e:4680::/32 Deny Cloud
Origin: DE
Tag: myLoc


# ASNs 57043, 395839 ("HOSTKEY B.V").
# %Listed, Google Malware Dashboard: 0.05% (AS57043).
# Stop Forum Spam (SFS) listings: 1,605 (AS57043), 159 (AS395839).
# Updated: 2018.04.24 / Checked: 2019.07.24

2a05:b40::/29 Deny Cloud
Origin: NL
2602:ffc5:cb0::/44 Deny Cloud
2604:5940::/32 Deny Cloud
Origin: US
Tag: HOSTKEY B.V


# "Rackspace Hosting".
# Careful when updating; Section contains one "Run" parameter.
# Known ASNs: 10532, 12200, 15395, 19994, 22720, 27357, 33070, 39921, 44716, 45187, 54636, 58683.
# Updated: 2019.05.04

2a0b:440::/32 Deny Cloud
Origin: DE
2a00:1a48::/32 Deny Cloud
Origin: GB
2401:1800::/31 Deny Cloud
Origin: HK
2001:4800::/31 Deny Cloud
2001:4802::/32 Deny Cloud
2620:103::/47 Deny Cloud
2620:103:2::/48 Deny Cloud
Origin: US
Tag: Rackspace Hosting


# ASN 35017 ("Swiftway Communications, Inc").
# When updating, "Secure Internet LLC" mark as proxy.
# %Listed, Google Malware Dashboard: 0.14%.
# Stop Forum Spam (SFS) listings: 1,701.
# Updated: 2018.09.10 / Checked: 2019.07.21

2a02:748::/32 Deny Cloud
Origin: PL
Tag: Swiftway


# ASN 6939 ("Hurricane Electric, Inc").
# %Listed, Google Malware Dashboard: 0.13%.
# Stop Forum Spam (SFS) listings: 1,017.
# Updated: 2019.09.03

# Note when updating: There are some CIDRs in BGP that shouldn't be included here as signatures.
# - "2001::/32" (provides "Teredo" tunneling).
# - "2002::/16" (provides "6to4" bridging connectivity).
# - "AeroSurf" (human endpoints).
# - "BLOOMINGDALE HOME TELEPHONE COMPANY, INC" (human endpoints).
# - "Glasford Telephone Company" (human endpoints).
# - "maHost Internet Services Inc" (a hoster, but RoA is invalid, and records seem clean).
# - "Internet Assigned Numbers Authority" (bogons and unassigned or pending assignment).
# - Anything labeled as "Broadband" or "Telecom" (can reasonably assume as human endpoints).
# I.e., "^200(?:1\:\:\/32|2\:\:\/16).*$|.*invalid.*|^.*(?:AeroSurf|Tele(?:phone|com)|maHost|Broadband|Wicked).*$|^.*Authority$"

2a09:2580::/29 Run rules_as6939.php
Origin: BE
2a09:3b80::/29 Run rules_as6939.php
Origin: BG
2a09:3880::/29 Run rules_as6939.php
Origin: CZ
2a09:e500::/29 Run rules_as6939.php
Origin: GB
2001:df2:7900::/48 Run rules_as6939.php
2400:7a00::/32 Run rules_as6939.php
Origin: HK
2a03:b2c0::/29 Run rules_as6939.php
Origin: LT
2a06:1c80::/32 Run rules_as6939.php
Origin: NL
2a09:2780::/29 Run rules_as6939.php
2a09:3d80::/29 Run rules_as6939.php
2a09:f480::/29 Run rules_as6939.php
2a09:fa80::/29 Run rules_as6939.php
Origin: TR
2001:470::/32 Run rules_as6939.php
2001:49e8::/32 Run rules_as6939.php
2600:7000::/24 Run rules_as6939.php
2602:feca::/36 Run rules_as6939.php
2602:ff06:725::/48 Run rules_as6939.php
2604:a100:100::/48 Run rules_as6939.php
2604:c800:ffff::/48 Run rules_as6939.php
2620:0:50c0::/48 Run rules_as6939.php
2620:64:6000::/48 Run rules_as6939.php
2620:138:c001::/48 Run rules_as6939.php
2620:138:c002::/48 Run rules_as6939.php
Origin: US
Tag: Hurricane Electric


# ASNs 49532, 62904 ("Eonix Corporation").
# "SSL Private Proxy" mark as proxy (not cloud).
# %Listed, Google Malware Dashboard: 6.41% (AS62904).
# Stop Forum Spam (SFS) listings: 8,831 (AS49532), 13,583 (AS62904).
# Updated: 2019.04.21 / Checked: 2019.06.30

2a07:440::/31 Deny Cloud
Origin: DE
2602:ffc5:10e::/48 Deny Cloud
2607:ff28::/32 Deny Cloud
Origin: US
Tag: Eonix Corporation


# ASNs 32748, 46440 ("Steadfast Networks").
# %Listed, Google Malware Dashboard: 0.41% (AS32748).
# Stop Forum Spam (SFS) listings: 230 (AS32748).
# Updated: 2018.10.05 / Checked: 2019.08.13

2602:ffbb::/36 Deny Cloud
2607:6980:13f0::/44 Deny Cloud
2607:f128::/32 Deny Cloud
Origin: US
Tag: Steadfast Networks


# ASN 51088 ("A2B IP B.V").
# %Listed, Google Malware Dashboard: 0.34%.
# Stop Forum Spam (SFS) listings: 2.
# Updated: 2019.09.15

2001:67c:1064::/48 Deny Cloud
2001:1be8:3f03:713::/64 Deny Cloud
2a00:d640::/32 Deny Cloud
2a01:77e0::/32 Deny Cloud
2a02:1668::/32 Deny Cloud
2a02:2738::/32 Deny Cloud
2a0b:1c0::/29 Deny Cloud
Origin: NL
Tag: A2B IP B.V


# ASNs 20860, 21130, 25108 ("IOMart").
# Careful when updating; Also contains some proxies and VPNs (should be marked differently).
# %Listed, Google Malware Dashboard: 0.16% (AS20860).
# Stop Forum Spam (SFS) listings: 9,787 (AS20860).
# Updated: 2019.04.23 / Checked: 2019.09.10

2607:bd00:100::/48 Deny Cloud
Origin: CA
2001:1b40::/32 Deny Cloud
2a00:42a0::/32 Deny Cloud
2a00:5d80::/32 Deny Cloud
2a00:e120::/32 Deny Cloud
2a01:61c0::/40 Deny Cloud
2a01:b040::/32 Deny Cloud
2a02:8c8::/32 Deny Cloud
2a02:2658::/32 Deny Cloud
2a03:b200::/29 Deny Cloud
2a03:ca80::/31 Deny Cloud
2a03:f2c0::/32 Deny Cloud
2a04:de40::/42 Deny Cloud
2a0b:4580::/32 Deny Cloud
2a0b:9400:1000::/48 Deny Cloud
2a0d:9780::/32 Deny Cloud
Origin: GB
2403:cc00:3000::/36 Deny Cloud
Origin: SG
2a0c:4380::/40 Deny Cloud
Origin: US
Tag: IOMart


# ASN 35425 ("Bytemark Limited").
# Stop Forum Spam (SFS) listings: 8.
# Updated: 2016.01.20 / Checked: 2019.05.04

2001:41c8::/29 Deny Cloud
2a03:9ba0::/40 Deny Cloud
Origin: GB
Tag: Bytemark Limited


# ASNs 14061, 39690, 46652 ("DigitalOcean, LLC", "Digital Ocean SRL", "ServerStack, Inc").
# Ranges change frequently / Should update often.
# Remove unassigned prior to aggregating (e.g., 10.0.0.0/8).
# Mirai detected on this network.
# %Listed, Google Malware Dashboard: 0.22% (AS14061).
# Stop Forum Spam (SFS) listings: 63,578 (AS14061).
# Updated: 2019.03.30 / Checked: 2019.06.03

2a03:b0c0::/46 Deny Cloud
Origin: NL
2400:6180::/48 Deny Cloud
2400:6180:100::/40 Deny Cloud
Origin: SG
2604:a880::/46 Deny Cloud
2604:a880:400::/48 Deny Cloud
2604:a880:800::/47 Deny Cloud
2604:a880:cad::/48 Deny Cloud
Origin: US
Tag: Digital Ocean, Inc


# ASN 5577 ("Root SA").
# Stop Forum Spam (SFS) listings: 1,581.
# Updated: 2019.08.13

2001:67c:15a3::/48 Deny Cloud
Origin: CZ
2a0e:2b04::/30 Deny Cloud
Origin: LT
2a01:608::/32 Deny Cloud
Origin: LU
Tag: Root SA


# ASN 11878 ("Tzulo Inc").
# %Listed, Google Malware Dashboard: 2.99%.
# Stop Forum Spam (SFS) listings: 596.
# Updated: 2019.04.07 / Checked: 2019.08.22

2620:15:6000::/48 Deny Cloud
Origin: CA
2607:2780::/48 Deny Cloud
2607:9000::/32 Deny Cloud
Origin: US
Tag: Tzulo Inc


# ASN 17139 ("Corporate Colocation Inc").
# %Listed, Google Malware Dashboard: 9.29%.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2018.05.04 / Checked: 2019.08.05

2401:f500:1::/48 Deny Cloud
Origin: NZ
2607:fca8::/32 Deny Cloud
Origin: US
Tag: Corporate Colocation


# ASN 32613 ("iWeb Technologies Inc").
# %Listed, Google Malware Dashboard: 0.15%.
# Updated: 2016.01.20 / Checked: 2019.05.21

2606:5d80::/32 Deny Cloud
2607:f748::/32 Deny Cloud
Origin: CA
Tag: iWeb


# ASNs 22781, 29713 ("Reliable Hosting Services", "Strong Technology, LLC").
# Stop Forum Spam (SFS) listings: 74 (AS22781).
# Updated: 2019.08.27

2a0e:be00::/29 Deny Cloud
Origin: LT
2604:4100::/36 Deny Cloud
2607:fb50::/32 Deny Cloud
Origin: US
Tag: Reliable Hosting


# ASN 33597 ("InfoRelay Online Systems, Inc").
# No recent reports or bad activity detected. Possible candidate for future removal.
# Updated: 2017.09.09 / Checked: 2019.09.10

2a03:b280:1000::/48 Deny Cloud
Origin: CZ
2607:b080::/32 Deny Cloud
2607:f108::/32 Deny Cloud
Origin: US
Tag: InfoRelay Online


# ASN 29854 ("WestHost, Inc").
# Mark "Packet Flip", "Secure Internet LLC", "VPN Consumer Network" CIDRs as proxies.
# %Listed, Google Malware Dashboard: 0.31%.
# Stop Forum Spam (SFS) listings: 66.
# Updated: 2018.05.04 / Checked: 2019.05.20

2a0c:4180::/29 Deny Cloud
Origin: RU
2606:2e00::/33 Deny Cloud
2607:fc98::/32 Deny Cloud
2a05:3b00::/31 Deny Cloud
Origin: US
Tag: WestHost, Inc


# ASN 32097 ("WholeSale Internet, Inc").
# %Listed, Google Malware Dashboard: 2.73%.
# Stop Forum Spam (SFS) listings: 1,259.
# Updated: 2018.10.10 / Checked: 2019.04.07

2001:4858::/32 Deny Cloud
Origin: US
Tag: WholeSale Internet


# ASN 33387 ("DataShack, LC").
# %Listed, Google Malware Dashboard: 0.35%.
# Stop Forum Spam (SFS) listings: 882.
# Updated: 2019.04.07 / Checked: 2019.08.22

2a0a:1f43::/32 Deny Cloud
Origin: NL
2604:4300::/32 Deny Cloud
Origin: US
Tag: DataShack, LC


# ASN 62710 ("Rack911").
# %Listed, Google Malware Dashboard: 0.62%.
# Updated: 2019.02.27 / Checked: 2019.06.23

2602:ffdb::/41 Deny Cloud
2602:ffdb:100::/41 Deny Cloud
2602:ffdb:980::/41 Deny Cloud
2602:ffdb:f80::/41 Deny Cloud
Origin: US
Tag: Rack911


# ASN 63930 ("READY SERVER PTE LTD").
# %Listed, Google Malware Dashboard: 0.74%.
# Stop Forum Spam (SFS) listings: 7.
# Updated: 2019.08.04

2400:fb80::/32 Deny Cloud
2401:e780::/32 Deny Cloud
Origin: SG
Tag: Ready Server


# ASN 42655 ("ON-LINE Ltd").
# %Listed, Google Malware Dashboard: 0.09%.
# Stop Forum Spam (SFS) listings: 1,755.
# Updated: 2016.01.21 / Checked: 2019.08.01

2001:67c:2224::/48 Deny Cloud
Origin: UA
Tag: ON-LINE Ltd


# "Internap Network Services Corporation". Various ASNs. Updated: 2019.07.13

2406:3800::/32 Deny Cloud
Origin: AU
2a02:b50::/33 Deny Cloud
2a02:b50:8000::/34 Deny Cloud
Origin: GB
2400:f800::/32 Deny Cloud
Origin: HK
2404:1200::/32 Deny Cloud
2405:d800::/32 Deny Cloud
Origin: SG
2001:48c8::/32 Deny Cloud
2600:c00::/31 Deny Cloud
2600:c02::/32 Deny Cloud
2600:c04::/31 Deny Cloud
2600:c06::/32 Deny Cloud
2600:c07::/48 Deny Cloud
2600:c08::/31 Deny Cloud
2600:c0b::/32 Deny Cloud
2600:c0c::/30 Deny Cloud
2600:c10::/30 Deny Cloud
2600:c14::/32 Deny Cloud
Origin: US
Tag: Internap Network


# ASNs 23033, 32875 ("Wowrack.com").
# %Listed, Google Malware Dashboard: 0.67% (AS23033).
# Stop Forum Spam (SFS) listings: 5,520 (AS23033), 40 (AS32875).
# Updated: 2019.02.07 / Checked: 2019.06.03

2a07:9944:1d::/48 Deny Cloud
Origin: EU
2001:df6:6c00::/48 Deny Cloud
Origin: IN
2602:febc::/36 Deny Cloud
2602:ffca::/36 Deny Cloud
2604:c00::/32 Deny Cloud
2605:fe00::/36 Deny Cloud
2607:f8f8::/32 Deny Cloud
Origin: US
Tag: Wowrack.com


# ASN 11051 ("Cyberverse, Inc").
# Updated: 2019.05.27

2602:fe6b:1000::/36 Deny Cloud
2607:f820::/32 Deny Cloud
2620:13e:500a::/48 Deny Cloud
Origin: US
Tag: Cyberverse, Inc


# ASN 54489 ("CoreSpace, Inc").
# (Can omit anything under 44../8; clean).
# %Listed, Google Malware Dashboard: 0.03%.
# Stop Forum Spam (SFS) listings: 373.
# Updated: 2016.01.22 / Checked: 2019.07.07

2604:7780::/32 Deny Cloud
Origin: US
Tag: CoreSpace, Inc


# ASN 32421 ("Black Lotus Communications").
# %Listed, Google Malware Dashboard: 0.10%.
# Updated: 2018.04.30 / Checked: 2019.06.01

2001:67c:2f08::/48 Deny Cloud
Origin: GB
Tag: Black Lotus


# ASNs 8100, 29761 ("QuadraNet, Inc").
# Ranges change frequently / Should update often.
# Mark "Packet Flip" and "VPNSECURE" CIDRs as proxies.
# %Listed, Google Malware Dashboard: 0.29% (AS8100).
# Stop Forum Spam (SFS) listings: 43,944 (AS8100).
# Updated: 2019.03.13 / Checked: 2019.05.20

2a07:1c44:1820::/48 Deny Cloud
Origin: AT
2a06:1280:ce03::/48 Deny Cloud
Origin: BY
2a06:e800::/29 Deny Cloud
Origin: DK
2a07:9944:1a::/48 Deny Cloud
Origin: EU
2400:30c0:1::/48 Deny Cloud
2400:30c0:2::/48 Deny Cloud
2a05:b0c6:300::/40 Deny Cloud
Origin: GB
2404:bd80:c1::/48 Deny Cloud
Origin: MM
2a05:4240::/29 Deny Cloud
Origin: TR
2a04:6ac0::/29 Deny Cloud
Origin: UA
2602:ff75::/36 Deny Cloud
2602:ff96:2::/48 Deny Cloud
2602:ff96:4::/48 Deny Cloud
2602:ff96:11::/48 Deny Cloud
2602:ff96:14::/48 Deny Cloud
2602:fff6:1::/48 Deny Cloud
2602:fff6:2::/47 Deny Cloud
2602:fff6:6::/48 Deny Cloud
2604:bc0::/47 Deny Cloud
2605:8900:3000::/36 Deny Cloud
2607:fcd0::/32 Deny Cloud
2607:ff48::/32 Deny Cloud
2620:134:8004::/47 Deny Cloud
Origin: US
Tag: QuadraNet, Inc


# ASN 11282 ("SERVERYOU INC").
# %Listed, Google Malware Dashboard: 0.40%.
# Updated: 2017.03.31 / Checked: 2019.09.05

2001:470:e3::/48 Deny Cloud
Origin: US
Tag: SERVERYOU INC


# ASN 25577 ("Connexions4London Ltd").
# Seems to now announce as "IDE Group" since last update, and listings aren't
# as bad as they once were. Might be able to eventually delist them, hopefully.
# Stop Forum Spam (SFS) listings: 57.
# Updated: 2019.04.07 / Checked: 2019.08.22

2803:8700:10::/48 Deny Cloud
Origin: CR
2001:67c:1c0::/48 Deny Cloud
2001:9d8::/32 Deny Cloud
2a0d:5e00::/29 Deny Cloud
Origin: GB
Tag: Connexions4London


# ASN 32475 ("SingleHop, Inc").
# %Listed, Google Malware Dashboard: 0.16%.
# Stop Forum Spam (SFS) listings: 98.
# Updated: 2019.08.11

2607:f978:5::/48 Deny Cloud
2607:f978:7::/48 Deny Cloud
Origin: US
Tag: SingleHop, Inc


# ASN 29550 ("eUKhost LTD").
# %Listed, Google Malware Dashboard: 0.06%.
# Stop Forum Spam (SFS) listings: 57.
# Updated: 2017.03.19 / Checked: 2019.08.11

2a02:af8::/32 Deny Cloud
Origin: GB
Tag: eUKhost LTD


# ASNs 12703, 24931, 32911, 38963, 57669 ("Pulsant (Scotland) Ltd").
# Updated: 2019.05.22 / Checked: 2019.08.21

2001:67c:580::/48 Deny Cloud
2a00:85a0::/32 Deny Cloud
2a01:5ae0::/32 Deny Cloud
2a01:6ca0::/32 Deny Cloud
2a01:ba20::/32 Deny Cloud
2a02:16e0::/32 Deny Cloud
2a02:16f8::/32 Deny Cloud
2a03:67c0::/32 Deny Cloud
2a04:4300::/48 Deny Cloud
2a0b:a380::/48 Deny Cloud
Origin: GB
Tag: Pulsant


# ASN 51852 ("Private Layer INC").
# %Listed, Google Malware Dashboard: 0.19%.
# Stop Forum Spam (SFS) listings: 17,734.
# Updated: 2019.08.04

2a02:29b8::/32 Deny Cloud
Origin: CH
Tag: Private Layer INC


# ASN 40676 ("Psychz Networks").
# Ranges change frequently / Should update often.
# %Listed, Google Malware Dashboard: 0.55%.
# Stop Forum Spam (SFS) listings: 10,319.
# Updated: 2019.07.20

2a07:1c40:102a::/48 Deny Cloud
Origin: AT
2001:df2:c600::/48 Deny Cloud
Origin: AU
2a0c:b642:1a08::/48 Deny Cloud
Origin: BE
2602:fed2:7103::/48 Deny Cloud
Origin: CA
2a06:e881:6205::/48 Deny Cloud
Origin: CH
2803:dc40:1::/48 Deny Cloud
Origin: CL
2a0d:1180::/48 Deny Cloud
Origin: ES
2a07:9944:1b::/48 Deny Cloud
2a07:9944:1c::/48 Deny Cloud
Origin: EU
2a0a:6700::/45 Deny Cloud
2a0e:3840:2::/48 Deny Cloud
Origin: GB
2a06:a006:c5::/48 Deny Cloud
2a06:a006:f1::/48 Deny Cloud
Origin: IS
2a0d:df40::/29 Deny Cloud
Origin: LT
2402:d0c0::/47 Deny Cloud
Origin: SG
2602:fe90::/40 Deny Cloud
2602:fea6::/36 Deny Cloud
2602:ff96:5::/48 Deny Cloud
2602:ff96:9::/48 Deny Cloud
2602:ff96:12::/48 Deny Cloud
2602:ff96:15::/48 Deny Cloud
2602:ff96:16::/48 Deny Cloud
2602:ff96:1f::/48 Deny Cloud
2602:ff96:1fe::/48 Deny Cloud
2602:ffb0:11::/48 Deny Cloud
2602:ffc5:10b::/48 Deny Cloud
2602:ffc5:10c::/48 Deny Cloud
2602:ffc5:110::/44 Deny Cloud
2602:ffc5:120::/43 Deny Cloud
2604:980:1::/48 Deny Cloud
2604:6600::/32 Deny Cloud
2605:6c80:6::/47 Deny Cloud
2605:6c80:a::/48 Deny Cloud
2606:1780::/32 Deny Cloud
2606:6680:2::/48 Deny Cloud
2606:6680:4::/48 Deny Cloud
2606:6680:7::/48 Deny Cloud
2606:6680:10::/47 Deny Cloud
2606:6680:12::/48 Deny Cloud
2606:6680:15::/48 Deny Cloud
2606:6680:16::/47 Deny Cloud
2606:6680:18::/48 Deny Cloud
2a0b:ae40:1::/48 Deny Cloud
2a0b:ae40:2::/47 Deny Cloud
2a0b:ae40:4::/48 Deny Cloud
Origin: US
Tag: Psychz Networks


# ASN 36114 ("Versaweb, LLC").
# %Listed, Google Malware Dashboard: 0.03%.
# Stop Forum Spam (SFS) listings: 190.
# Updated: 2016.01.23 / Checked: 2019.08.13

2605:6f80::/40 Deny Cloud
Origin: US
Tag: Versaweb, LLC


# ASN 27176 ("DataWagon LLC").
# %Listed, Google Malware Dashboard: 5.88%.
# Stop Forum Spam (SFS) listings: 255.
# Updated: 2019.08.22

2a06:fe00::/29 Deny Cloud
2a09:9f80::/29 Deny Cloud
2a0d:6f80::/32 Deny Cloud
2a0d:6f82::/32 Deny Cloud
2a0d:6f84::/32 Deny Cloud
2a0d:6f86::/32 Deny Cloud
Origin: LT
2a07:d9c0::/30 Deny Cloud
2a0b:2a87::/32 Deny Cloud
2a0c:a184::/31 Deny Cloud
Origin: RU
2605:aa80::/32 Deny Cloud
Origin: US
Tag: DataWagon LLC


# ASNs 20473, 46407 ("Choopa, LLC").
# Ranges change frequently / Should update often.
# Mark "Packet Flip" and "Secure Internet LLC" CIDRs as proxies.
# %Listed, Google Malware Dashboard: 0.14% (AS20473).
# Stop Forum Spam (SFS) listings: 10,287 (AS20473).
# Updated: 2019.05.20

2404:2ac0::/32 Deny Cloud
Origin: AU
2a06:e881:5901::/48 Deny Cloud
Origin: CH
2a03:13a1:4a8::/48 Deny Cloud
2a03:13a2:283f::/48 Deny Cloud
2a03:13a2:343e::/48 Deny Cloud
2a03:13a2:488b::/48 Deny Cloud
2a03:13a2:a78e::/48 Deny Cloud
2a03:13a3:660f::/48 Deny Cloud
2a03:13a3:c38a::/48 Deny Cloud
2a03:13a3:e2e5::/48 Deny Cloud
2a03:13a4:99::/48 Deny Cloud
2a03:13a4:7517::/48 Deny Cloud
2a03:13a4:784a::/48 Deny Cloud
2a03:13a4:b4eb::/48 Deny Cloud
2a03:13a4:e428::/48 Deny Cloud
2a03:13a5:b0d5::/48 Deny Cloud
2a03:13a5:c774::/48 Deny Cloud
2a03:13a5:d798::/48 Deny Cloud
2a03:13a6:7812::/48 Deny Cloud
2a03:13a6:f3d3::/48 Deny Cloud
2a03:13a7:90f::/48 Deny Cloud
2a03:13a7:2c6c::/48 Deny Cloud
2a03:13a7:ea77::/48 Deny Cloud
2a0c:da01::/48 Deny Cloud
Origin: DE
2a04:6f01:8f00::/48 Deny Cloud
2a0c:36c3::/32 Deny Cloud
Origin: EE
2001:678:90c::/48 Deny Cloud
2a05:f480:1000::/36 Deny Cloud
2a09:b440::/48 Deny Cloud
Origin: FR
2402:9e80:14::/48 Deny Cloud
Origin: HK
2001:678:214::/48 Deny Cloud
Origin: HU
2401:c080:1000::/37 Deny Cloud
2401:c080:1800::/38 Deny Cloud
Origin: JP
2a00:fd40:6::/48 Deny Cloud
2a06:2d40::/47 Deny Cloud
2a09:d680:1002::/48 Deny Cloud
2a0c:7e40:7bb1::/48 Deny Cloud
2a0c:7e40:b397::/48 Deny Cloud
2a0c:7e41:5357::/48 Deny Cloud
2a0c:7e41:8600::/48 Deny Cloud
2a0c:7e41:c22a::/48 Deny Cloud
2a0c:7e42:993c::/48 Deny Cloud
2a0c:7e42:db7c::/48 Deny Cloud
2a0c:7e42:f776::/48 Deny Cloud
2a0c:7e43:2e10::/48 Deny Cloud
2a0c:7e43:352e::/48 Deny Cloud
2a0c:7e43:43be::/48 Deny Cloud
2a0c:7e43:a525::/48 Deny Cloud
2a0c:7e43:e28c::/48 Deny Cloud
2a0c:7e44:da38::/48 Deny Cloud
2a0c:7e44:dda8::/48 Deny Cloud
2a0c:7e45:1f8e::/48 Deny Cloud
2a0c:7e45:c712::/48 Deny Cloud
2a0c:7e45:d430::/48 Deny Cloud
2a0c:7e46:8a7::/48 Deny Cloud
2a0c:7e46:4f08::/48 Deny Cloud
2a0c:7e47:111f::/48 Deny Cloud
2a0c:7e47:715c::/48 Deny Cloud
2a0c:7e47:c909::/48 Deny Cloud
2a0c:7e47:ec2e::/48 Deny Cloud
2a0d:2406:1800::/39 Deny Cloud
Origin: NL
2a0d:1a40:666::/48 Deny Cloud
Origin: SE
2403:a2c0::/32 Deny Cloud
Origin: TW
2001:19f0::/38 Deny Cloud
2001:19f0:ccc::/47 Deny Cloud
2001:19f0:1000::/37 Deny Cloud
2001:19f0:4000::/37 Deny Cloud
2001:19f0:5000::/36 Deny Cloud
2001:19f0:6000::/36 Deny Cloud
2001:19f0:7000::/37 Deny Cloud
2001:19f0:7800::/38 Deny Cloud
2001:19f0:8000::/38 Deny Cloud
2001:19f0:8800::/38 Deny Cloud
2001:19f0:9000::/37 Deny Cloud
2001:19f0:a800::/37 Deny Cloud
2001:19f0:b000::/38 Deny Cloud
2602:fece:22::/48 Deny Cloud
2602:ff71:1337::/48 Deny Cloud
2602:ffb0:5::/48 Deny Cloud
2602:ffb0:7::/48 Deny Cloud
2602:ffb0:1b::/48 Deny Cloud
2602:ffb0:29::/48 Deny Cloud
2602:ffe5:800::/40 Deny Cloud
2602:fff6:4::/48 Deny Cloud
2605:9880::/39 Deny Cloud
2605:9880:400::/38 Deny Cloud
2607:6980:50b0::/44 Deny Cloud
2607:7180::/32 Deny Cloud
2607:7c80:53::/48 Deny Cloud
Origin: US
Tag: Choopa, LLC


# ASN 7162 ("UOL DIVEO S.A").
# %Listed, Google Malware Dashboard: 0.22%.
# Updated: 2019.07.24

2804:49c:13::/48 Deny Cloud
2804:49c:31::/48 Deny Cloud
2804:49c:3403::/48 Deny Cloud
2804:49c:4203::/48 Deny Cloud
2804:49c:4205::/48 Deny Cloud
2804:49c:4210::/48 Deny Cloud
2804:49c:7000::/39 Deny Cloud
2804:49c:c0f1::/48 Deny Cloud
Origin: BR
Tag: UOL DIVEO S.A


# ASN 46562 ("Total Server Solutions L.L.C").
# %Listed, Google Malware Dashboard: 0.34%.
# Stop Forum Spam (SFS) listings: 4,655.
# Updated: 2019.09.05

2602:fff6:5::/48 Deny Cloud
2604:2880::/48 Deny Cloud
2604:4600:aa01::/48 Deny Cloud
2604:8180::/32 Deny Cloud
2607:f7a0:1::/48 Deny Cloud
2607:f7a0:2::/47 Deny Cloud
2607:f7a0:4::/46 Deny Cloud
2607:f7a0:8::/47 Deny Cloud
2607:f7a0:b::/48 Deny Cloud
2607:f7a0:c::/46 Deny Cloud
2607:f7a0:10::/45 Deny Cloud
2607:f7a0:18::/46 Deny Cloud
Origin: US
Tag: AS46562


# Announcing as: "RAM Host".
# Had its own ASN in the past, but not anymore. CIDRs still relevant though.
# Updated: 2019.05.21

2604:4600:aa01::/48 Deny Cloud
2605:8900:1000::/36 Deny Cloud
2605:8900:3000::/36 Deny Cloud
2605:8900:5000::/36 Deny Cloud
Origin: US
Tag: RAM Host


# "Host Europe GmbH", "HEG Managed", "PlusServer GmbH" (all three combined due to heavy interlacing).
# ASNs 5521, 6659, 8972, 15891, 20621, 20738, 20773, 25074, 31100, 34011, 34088, 35329, 50932, 61157, 200386.
# Updated: 2019.08.27

2001:830::/32 Deny Cloud
2001:aa8::/32 Deny Cloud
2001:1520::/32 Deny Cloud
2a00:e10::/32 Deny Cloud
2a00:1158::/32 Deny Cloud
2a00:74c0::/32 Deny Cloud
2a01:488::/32 Deny Cloud
2a01:a740::/32 Deny Cloud
2a02:ad0::/29 Deny Cloud
2a02:cbf0::/30 Deny Cloud
2a02:cbf4::/31 Deny Cloud
2a02:cbf7::/47 Deny Cloud
2a02:cbf7:100::/48 Deny Cloud
2a02:e740::/29 Deny Cloud
2a04:2f80::/29 Deny Cloud
2a04:e0c0::/29 Deny Cloud
2a09:2040::/29 Deny Cloud
2a0c:de40::/29 Deny Cloud
2a0e:a680:1::/48 Deny Cloud
Origin: DE
2a02:4e8::/32 Deny Cloud
Origin: GB
Tag: Host Europe GmbH


# ASN 14576 ("K SERVERS LTD").
# %Listed, Google Malware Dashboard: 0.03%.
# Stop Forum Spam (SFS) listings: 91.
# Updated: 2018.08.22 / Checked: 2019.06.24

2a07:4dc0::/29 Deny Cloud
2a07:b400::/30 Deny Cloud
Origin: NL
2606:5e00::/35 Deny Cloud
2606:5e00:f000::/36 Deny Cloud
Origin: US
Tag: K SERVERS LTD


# ASN 18978 ("Enzu Inc").
# %Listed, Google Malware Dashboard: 1.98%.
# Stop Forum Spam (SFS) listings: 11,998.
# Updated: 2017.09.24 / Checked: 2019.07.06

2605:f700:10::/48 Deny Cloud
2605:f700:40::/44 Deny Cloud
2605:f700:80::/44 Deny Cloud
2605:f700:c0::/44 Deny Cloud
2605:f700:100::/44 Deny Cloud
2605:f700:140::/42 Deny Cloud
2605:f700:180::/42 Deny Cloud
2605:f700:400::/38 Deny Cloud
Origin: US
Tag: Enzu Inc


# ASNs 18779, 54500 ("EGIHosting").
# %Listed, Google Malware Dashboard: 1.15% (AS18779).
# Stop Forum Spam (SFS) listings: 319 (AS18779), 31 (AS54500).
# Updated: 2019.07.12

2a0c:7dc0::/29 Deny Cloud
2a0c:89c0::/29 Deny Cloud
Origin: BG
2a0c:47c0::/29 Deny Cloud
Origin: CH
2a0c:9ac0::/29 Deny Cloud
Origin: FI
2a07:23c0:1::/48 Deny Cloud
2a07:23c0:7::/48 Deny Cloud
Origin: GB
2a03:4a80:a::/48 Deny Cloud
Origin: NL
2a02:f240::/29 Deny Cloud
Origin: NO
2a0c:7080::/29 Deny Cloud
2a0d:3900::/29 Deny Cloud
Origin: RU
2604:bc0:3::/48 Deny Cloud
2604:4f00::/36 Deny Cloud
2607:f358::/32 Deny Cloud
Origin: US
Tag: EGIHosting


# ASN 30083 ("HEG US Inc").
# %Listed, Google Malware Dashboard: 0.16%.
# Stop Forum Spam (SFS) listings: 376.
# Updated: 2017.01.25 / Checked: 2019.08.05

2605:de00::/32 Deny Cloud
Origin: US
Tag: HEG US Inc


# ASN 174 ("Cogent Communications").

# Myself and others have seen and experienced a significant amount of unwanted traffic from their ASN in the past (hack
# attempts, spamming, scraping, etc), and generally, this type of traffic should be blocked, but unfortunately, their
# ASN encompasses and interlaces significantly with with a number of benign, innocent ISPs, human endpoint, backbone
# architecture, etc that we don't want to block. Therefore, I'm splitting this up into multiple sections across
# multiple signature files accordingly.

# Wikipedia page about Cogent Communications: en.wikipedia.org/wiki/Cogent_Communications
# Refer bgpmon.net/large-scale-bgp-hijack-out-of-india/
# Refer forums.spybot.info/showthread.php?23632-SPAM-frauds-fakes-and-other-MALWARE-deliveries/page37
# Refer dyn.com/blog/mitm-internet-hijacking/

# When updating: Remove invalids to reduce false positive risk.

# Announces with "Hosting" or "Host"
# Updated: 2019.02.27 / Checked: 2019.07.02
2602:ffb6::/36 Deny Cloud
Origin: CA
2001:978:2309::/48 Deny Cloud
2001:978:3901::/48 Deny Cloud
2001:978:b600::/48 Deny Cloud
Origin: DE
2a07:85c0::/48 Deny Cloud
2a07:85c1::/48 Deny Cloud
Origin: NL
Tag: Cogent Hosting

# Announces with "Server"
# Updated: 2019.07.02
2001:49f0::/47 Deny Cloud
2001:49f0:a::/48 Deny Cloud
2001:49f0:100d::/48 Deny Cloud
2001:49f0:1010::/48 Deny Cloud
2001:49f0:101d::/48 Deny Cloud
2001:49f0:101e::/48 Deny Cloud
2001:49f0:1023::/48 Deny Cloud
2001:49f0:1024::/47 Deny Cloud
2001:49f0:2001::/48 Deny Cloud
2001:49f0:2002::/47 Deny Cloud
2001:49f0:2004::/46 Deny Cloud
2001:49f0:2008::/45 Deny Cloud
2001:49f0:2010::/44 Deny Cloud
2001:49f0:2020::/46 Deny Cloud
2001:49f0:2024::/47 Deny Cloud
2001:49f0:2027::/48 Deny Cloud
2001:49f0:2028::/45 Deny Cloud
2001:49f0:2030::/45 Deny Cloud
2001:49f0:2039::/48 Deny Cloud
2001:49f0:203a::/47 Deny Cloud
2001:49f0:203c::/46 Deny Cloud
2001:49f0:2040::/44 Deny Cloud
2001:49f0:2920::/48 Deny Cloud
2001:49f0:3000::/45 Deny Cloud
2001:49f0:30a0::/48 Deny Cloud
2001:49f0:4000::/48 Deny Cloud
2001:49f0:4002::/48 Deny Cloud
2001:49f0:4021::/48 Deny Cloud
2001:49f0:5000::/48 Deny Cloud
2001:49f0:6000::/46 Deny Cloud
2001:49f0:6004::/47 Deny Cloud
2001:49f0:7000::/47 Deny Cloud
2001:49f0:7002::/48 Deny Cloud
2001:49f0:a000::/36 Deny Cloud
2001:49f0:d000::/44 Deny Cloud
2001:49f0:d010::/45 Deny Cloud
2001:49f0:d018::/48 Deny Cloud
2001:49f0:d01a::/47 Deny Cloud
2001:49f0:d01c::/46 Deny Cloud
2001:49f0:d020::/44 Deny Cloud
2001:49f0:d030::/46 Deny Cloud
2001:49f0:d034::/47 Deny Cloud
2001:49f0:d037::/48 Deny Cloud
2001:49f0:d038::/48 Deny Cloud
2001:49f0:d03d::/48 Deny Cloud
2001:49f0:d03e::/47 Deny Cloud
2001:49f0:d040::/44 Deny Cloud
2001:49f0:d050::/46 Deny Cloud
2001:49f0:d054::/47 Deny Cloud
2001:49f0:d057::/48 Deny Cloud
2001:49f0:d058::/45 Deny Cloud
2001:49f0:d060::/43 Deny Cloud
2001:49f0:d080::/45 Deny Cloud
2001:49f0:d089::/48 Deny Cloud
2001:49f0:d08a::/47 Deny Cloud
2001:49f0:d08c::/46 Deny Cloud
2001:49f0:d090::/45 Deny Cloud
2001:49f0:d098::/49 Deny Cloud
2001:49f0:d099::/49 Deny Cloud
2001:49f0:d09a::/48 Deny Cloud
2001:49f0:d09c::/47 Deny Cloud
2001:49f0:d09e::/48 Deny Cloud
2001:49f0:d0a0::/47 Deny Cloud
2001:49f0:d0a2::/48 Deny Cloud
2001:49f0:d0a5::/48 Deny Cloud
2001:49f0:d0a6::/47 Deny Cloud
2001:49f0:d0a8::/46 Deny Cloud
2001:49f0:d0ac::/47 Deny Cloud
2001:49f0:d0b9::/48 Deny Cloud
2001:49f0:d0bf::/48 Deny Cloud
Origin: US
Tag: Cogent Server


# ASNs 59711, 61046, 201525, 202015 ("HZ Hosting Ltd").
# Updated: 2018.08.21 / Checked: 2019.06.28

2a01:8640::/46 Deny Cloud
2a01:8640:4::/47 Deny Cloud
2a01:8640:7::/48 Deny Cloud
2a01:8640:8::/48 Deny Cloud
Origin: GB
2a0a:e2c4::/31 Deny Cloud
Origin: UA
Tag: HZ Hosting Ltd


# ASNs 30279, 53889, 54334, 63008, 63262, 394021, 394056, 394143 ("Micfo, LLC").
# Ranges change frequently / Should update often.
# Provides numerous cloud services / webhosting services / IoT / etc. Source of spam and other unwanted traffic.
# Exclude: Anything citing "Telecom" (ISP), "Level3" (infrastructure) -- ^.*(Telecom|Level3).*$\n
# Updated: 2019.06.14

2407:9780::/32 Deny Cloud
2605:3e80:200::/39 Deny Cloud
2605:3e80:400::/38 Deny Cloud
2605:3e80:800::/37 Deny Cloud
2605:3e80:1000::/38 Deny Cloud
2605:3e80:1400::/39 Deny Cloud
2605:3e80:1700::/40 Deny Cloud
2605:3e80:1800::/40 Deny Cloud
2605:3e80:1a00::/40 Deny Cloud
2605:3e80:1d00::/40 Deny Cloud
2605:3e80:1e00::/39 Deny Cloud
2605:3e80:2000::/38 Deny Cloud
2605:3e80:2400::/39 Deny Cloud
2605:3e80:2700::/40 Deny Cloud
2605:3e80:2900::/40 Deny Cloud
2605:3e80:2c00::/39 Deny Cloud
2605:3e80:2f00::/40 Deny Cloud
2605:3e80:3100::/40 Deny Cloud
2605:3e80:3200::/39 Deny Cloud
2605:3e80:3400::/38 Deny Cloud
2605:3e80:3800::/40 Deny Cloud
2605:3e80:3a00::/40 Deny Cloud
2605:3e80:7004::/48 Deny Cloud
2605:3e80:c000::/48 Deny Cloud
Origin: US
Tag: Micfo, LLC


# ASN 53264 ("Continuum Data Centers, LLC").
# %Listed, Google Malware Dashboard: 0.41%.
# Stop Forum Spam (SFS) listings: 50.
# Updated: 2017.07.23 / Checked: 2019.04.07

2607:ff50::/32 Deny Cloud
Origin: US
Tag: Continuum


# ASN 51167 ("Contabo GmbH").
# Caught spamming while pretending to be Google.
# %Listed, Google Malware Dashboard: 0.21%.
# Stop Forum Spam (SFS) listings: 12,292.
# Updated: 2019.07.13

2a02:c200::/32 Deny Cloud
2a02:c205::/32 Deny Cloud
2a02:c207::/32 Deny Cloud
Origin: DE
2a09:9442::/32 Deny Cloud
Origin: RU
Tag: Contabo GmbH


# ASN 45815 ("ESDS Software Solution").
# %Listed, Google Malware Dashboard: 0.28%.
# Stop Forum Spam (SFS) listings: 3.
# Updated: 2017.01.25 / Checked: 2019.06.03

2400:5300::/47 Deny Cloud
Origin: IN
Tag: ESDS


# ASN 51430 ("AltusHost B.V").
# %Listed, Google Malware Dashboard: 0.28%.
# Stop Forum Spam (SFS) listings: 1,844.
# Updated: 2019.07.21

2a00:7140::/32 Deny Cloud
2a00:7142::/31 Deny Cloud
2a00:7144::/32 Deny Cloud
2a00:7145::/48 Deny Cloud
2a00:7146::/48 Deny Cloud
Origin: NL
Tag: AltusHost B.V


# "Akamai Technologies" (too many ASNs to list; excluding invalids).
# Updated: 2019.08.05

2800:550:2a::/48 Deny Cloud
Origin: CL
2a02:2370:1::/48 Deny Cloud
2a02:2370:2::/47 Deny Cloud
2a02:2370:4::/47 Deny Cloud
2a02:2370:6::/48 Deny Cloud
2a02:2370:101::/48 Deny Cloud
2a02:2370:102::/48 Deny Cloud
2a02:26f0::/32 Deny Cloud
Origin: EU
2a01:348:317::/48 Deny Cloud
Origin: GB
2404:c800:8203::/48 Deny Cloud
Origin: HK
2001:218:3004::/48 Deny Cloud
Origin: JP
2404:4e00:1::/48 Deny Cloud
2404:4e00:2::/47 Deny Cloud
2404:4e00:4::/46 Deny Cloud
2404:4e00:101::/48 Deny Cloud
2404:4e00:102::/48 Deny Cloud
2404:4e00:1003::/48 Deny Cloud
2404:4e00:1083::/48 Deny Cloud
Origin: SG
2001:418:1401:4::/64 Deny Cloud
2001:418:1401:7::/64 Deny Cloud
2001:418:1401:9::/64 Deny Cloud
2001:418:1401:e::/63 Deny Cloud
2001:418:141f:100::/56 Deny Cloud
2001:418:141f:200::/56 Deny Cloud
2001:418:1420:200::/56 Deny Cloud
2001:418:142d:100::/56 Deny Cloud
2001:418:142e:100::/56 Deny Cloud
2001:418:142e:200::/55 Deny Cloud
2001:418:143a:100::/56 Deny Cloud
2001:418:143b:100::/56 Deny Cloud
2001:418:1456:a00::/56 Deny Cloud
2001:418:1456:1300::/56 Deny Cloud
2001:418:1456:1900::/56 Deny Cloud
2001:418:1c01:1::/64 Deny Cloud
2001:418:8001::/48 Deny Cloud
2001:418:8404:1::/64 Deny Cloud
2001:428:1802:9::/64 Deny Cloud
2001:438:fffd:13::/64 Deny Cloud
2001:590:1801::/48 Deny Cloud
2001:5a0:3a03::/48 Deny Cloud
2001:4878::/47 Deny Cloud
2001:4878:3::/48 Deny Cloud
2001:4878:6::/47 Deny Cloud
2001:4878:8::/48 Deny Cloud
2001:4878:10::/48 Deny Cloud
2001:4878:27::/48 Deny Cloud
2001:4878:31::/48 Deny Cloud
2001:4878:33::/48 Deny Cloud
2001:4878:34::/48 Deny Cloud
2001:4878:37::/48 Deny Cloud
2001:4878:38::/47 Deny Cloud
2001:4878:45::/48 Deny Cloud
2001:4878:52::/48 Deny Cloud
2001:4878:62::/47 Deny Cloud
2001:4878:101::/48 Deny Cloud
2001:4878:102::/47 Deny Cloud
2001:4878:136::/48 Deny Cloud
2001:4878:151::/48 Deny Cloud
2001:4878:153::/48 Deny Cloud
2001:4878:158::/48 Deny Cloud
2001:4878:164::/48 Deny Cloud
2001:4878:1e0::/44 Deny Cloud
2001:4878:204::/48 Deny Cloud
2001:4878:215::/48 Deny Cloud
2001:4878:216::/47 Deny Cloud
2001:4878:219::/48 Deny Cloud
2001:4878:220::/48 Deny Cloud
2001:4878:225::/48 Deny Cloud
2001:4878:228::/48 Deny Cloud
2001:4878:234::/48 Deny Cloud
2001:4878:242::/48 Deny Cloud
2001:4878:246::/48 Deny Cloud
2001:4878:259::/48 Deny Cloud
2001:4878:261::/48 Deny Cloud
2001:4878:321::/48 Deny Cloud
2001:4878:322::/47 Deny Cloud
2001:4878:324::/48 Deny Cloud
2001:4878:347::/48 Deny Cloud
2001:4878:356::/48 Deny Cloud
2001:4878:2000::/48 Deny Cloud
2001:4878:2007::/48 Deny Cloud
2001:4878:2008::/48 Deny Cloud
2001:4878:2010::/48 Deny Cloud
2001:4878:2027::/48 Deny Cloud
2001:4878:2031::/48 Deny Cloud
2001:4878:2033::/48 Deny Cloud
2001:4878:2034::/48 Deny Cloud
2001:4878:2037::/48 Deny Cloud
2001:4878:2038::/48 Deny Cloud
2001:4878:2045::/48 Deny Cloud
2001:4878:2052::/48 Deny Cloud
2001:4878:2062::/47 Deny Cloud
2001:4878:2101::/48 Deny Cloud
2001:4878:2102::/47 Deny Cloud
2001:4878:2136::/48 Deny Cloud
2001:4878:2151::/48 Deny Cloud
2001:4878:2153::/48 Deny Cloud
2001:4878:2158::/48 Deny Cloud
2001:4878:2164::/48 Deny Cloud
2001:4878:21e0::/44 Deny Cloud
2001:4878:2204::/48 Deny Cloud
2001:4878:2215::/48 Deny Cloud
2001:4878:2216::/47 Deny Cloud
2001:4878:2219::/48 Deny Cloud
2001:4878:2220::/48 Deny Cloud
2001:4878:2225::/48 Deny Cloud
2001:4878:2228::/48 Deny Cloud
2001:4878:2234::/48 Deny Cloud
2001:4878:2242::/48 Deny Cloud
2001:4878:2246::/48 Deny Cloud
2001:4878:2259::/48 Deny Cloud
2001:4878:2261::/48 Deny Cloud
2001:4878:2321::/48 Deny Cloud
2001:4878:2322::/47 Deny Cloud
2001:4878:2324::/48 Deny Cloud
2001:4878:2347::/48 Deny Cloud
2001:4878:2356::/48 Deny Cloud
2001:4878:4000::/48 Deny Cloud
2001:4878:4003::/48 Deny Cloud
2001:4878:4007::/48 Deny Cloud
2001:4878:4008::/48 Deny Cloud
2001:4878:4010::/48 Deny Cloud
2001:4878:4027::/48 Deny Cloud
2001:4878:4031::/48 Deny Cloud
2001:4878:4033::/48 Deny Cloud
2001:4878:4037::/48 Deny Cloud
2001:4878:4038::/48 Deny Cloud
2001:4878:4052::/48 Deny Cloud
2001:4878:4062::/47 Deny Cloud
2001:4878:4101::/48 Deny Cloud
2001:4878:4102::/47 Deny Cloud
2001:4878:4136::/48 Deny Cloud
2001:4878:4158::/48 Deny Cloud
2001:4878:4164::/48 Deny Cloud
2001:4878:41e0::/44 Deny Cloud
2001:4878:4204::/48 Deny Cloud
2001:4878:4215::/48 Deny Cloud
2001:4878:4216::/47 Deny Cloud
2001:4878:4219::/48 Deny Cloud
2001:4878:4220::/48 Deny Cloud
2001:4878:4225::/48 Deny Cloud
2001:4878:4234::/48 Deny Cloud
2001:4878:4242::/48 Deny Cloud
2001:4878:4246::/48 Deny Cloud
2001:4878:4259::/48 Deny Cloud
2001:4878:4321::/48 Deny Cloud
2001:4878:4322::/47 Deny Cloud
2001:4878:4324::/48 Deny Cloud
2001:4878:4347::/48 Deny Cloud
2001:4878:8000::/48 Deny Cloud
2001:4878:8006::/47 Deny Cloud
2001:4878:8008::/48 Deny Cloud
2001:4878:8010::/48 Deny Cloud
2001:4878:8027::/48 Deny Cloud
2001:4878:8031::/48 Deny Cloud
2001:4878:8033::/48 Deny Cloud
2001:4878:8034::/48 Deny Cloud
2001:4878:8037::/48 Deny Cloud
2001:4878:8038::/48 Deny Cloud
2001:4878:8045::/48 Deny Cloud
2001:4878:8052::/48 Deny Cloud
2001:4878:8062::/47 Deny Cloud
2001:4878:8101::/48 Deny Cloud
2001:4878:8102::/47 Deny Cloud
2001:4878:8136::/48 Deny Cloud
2001:4878:8151::/48 Deny Cloud
2001:4878:8153::/48 Deny Cloud
2001:4878:8158::/48 Deny Cloud
2001:4878:8164::/48 Deny Cloud
2001:4878:81e0::/44 Deny Cloud
2001:4878:8204::/48 Deny Cloud
2001:4878:8215::/48 Deny Cloud
2001:4878:8216::/47 Deny Cloud
2001:4878:8219::/48 Deny Cloud
2001:4878:8220::/48 Deny Cloud
2001:4878:8225::/48 Deny Cloud
2001:4878:8228::/48 Deny Cloud
2001:4878:8234::/48 Deny Cloud
2001:4878:8242::/48 Deny Cloud
2001:4878:8246::/48 Deny Cloud
2001:4878:8259::/48 Deny Cloud
2001:4878:8261::/48 Deny Cloud
2001:4878:8321::/48 Deny Cloud
2001:4878:8322::/47 Deny Cloud
2001:4878:8324::/48 Deny Cloud
2001:4878:8347::/48 Deny Cloud
2001:4878:8356::/48 Deny Cloud
2001:4878:a000::/48 Deny Cloud
2001:4878:a006::/47 Deny Cloud
2001:4878:a008::/48 Deny Cloud
2001:4878:a010::/48 Deny Cloud
2001:4878:a027::/48 Deny Cloud
2001:4878:a031::/48 Deny Cloud
2001:4878:a033::/48 Deny Cloud
2001:4878:a034::/48 Deny Cloud
2001:4878:a038::/48 Deny Cloud
2001:4878:a045::/48 Deny Cloud
2001:4878:a052::/48 Deny Cloud
2001:4878:a062::/48 Deny Cloud
2001:4878:a102::/48 Deny Cloud
2001:4878:a136::/48 Deny Cloud
2001:4878:a151::/48 Deny Cloud
2001:4878:a153::/48 Deny Cloud
2001:4878:a204::/48 Deny Cloud
2001:4878:a215::/48 Deny Cloud
2001:4878:a216::/48 Deny Cloud
2001:4878:a220::/48 Deny Cloud
2001:4878:a225::/48 Deny Cloud
2001:4878:a228::/48 Deny Cloud
2001:4878:a242::/48 Deny Cloud
2001:4878:a246::/48 Deny Cloud
2001:4878:a259::/48 Deny Cloud
2001:4878:a261::/48 Deny Cloud
2001:4878:a321::/48 Deny Cloud
2001:4878:a322::/47 Deny Cloud
2001:4878:a324::/48 Deny Cloud
2001:4878:a347::/48 Deny Cloud
2001:4878:a356::/48 Deny Cloud
2001:4878:b006::/47 Deny Cloud
2001:4878:b008::/48 Deny Cloud
2001:4878:b010::/48 Deny Cloud
2001:4878:b027::/48 Deny Cloud
2001:4878:b031::/48 Deny Cloud
2001:4878:b038::/48 Deny Cloud
2001:4878:b045::/48 Deny Cloud
2001:4878:b102::/48 Deny Cloud
2001:4878:b136::/48 Deny Cloud
2001:4878:b151::/48 Deny Cloud
2001:4878:b153::/48 Deny Cloud
2001:4878:b216::/48 Deny Cloud
2001:4878:b220::/48 Deny Cloud
2001:4878:b225::/48 Deny Cloud
2001:4878:b228::/48 Deny Cloud
2001:4878:b259::/48 Deny Cloud
2001:4878:b347::/48 Deny Cloud
2001:4878:c000::/48 Deny Cloud
2001:4878:c007::/48 Deny Cloud
2001:4878:c008::/48 Deny Cloud
2001:4878:c010::/48 Deny Cloud
2001:4878:c027::/48 Deny Cloud
2001:4878:c031::/48 Deny Cloud
2001:4878:c033::/48 Deny Cloud
2001:4878:c034::/48 Deny Cloud
2001:4878:c037::/48 Deny Cloud
2001:4878:c038::/48 Deny Cloud
2001:4878:c052::/48 Deny Cloud
2001:4878:c062::/47 Deny Cloud
2001:4878:c101::/48 Deny Cloud
2001:4878:c102::/47 Deny Cloud
2001:4878:c136::/48 Deny Cloud
2001:4878:c158::/48 Deny Cloud
2001:4878:c164::/48 Deny Cloud
2001:4878:c1e0::/44 Deny Cloud
2001:4878:c204::/48 Deny Cloud
2001:4878:c215::/48 Deny Cloud
2001:4878:c216::/47 Deny Cloud
2001:4878:c219::/48 Deny Cloud
2001:4878:c220::/48 Deny Cloud
2001:4878:c225::/48 Deny Cloud
2001:4878:c228::/48 Deny Cloud
2001:4878:c234::/48 Deny Cloud
2001:4878:c242::/48 Deny Cloud
2001:4878:c246::/48 Deny Cloud
2001:4878:c257::/48 Deny Cloud
2001:4878:c259::/48 Deny Cloud
2001:4878:c321::/48 Deny Cloud
2001:4878:c322::/47 Deny Cloud
2001:4878:c324::/48 Deny Cloud
2001:4878:c347::/48 Deny Cloud
2600:1400::/24 Deny Cloud
2602:ff99:0:6::/64 Deny Cloud
2606:6c00:2::/48 Deny Cloud
2606:6c00:4::/46 Deny Cloud
2606:6c00:8::/48 Deny Cloud
2606:6c00:100::/48 Deny Cloud
2606:6c00:102::/48 Deny Cloud
2606:6c00:120::/44 Deny Cloud
2606:6c00:2000::/48 Deny Cloud
Origin: US
Tag: Akamai Technologies


# ASN 6428 ("Rose Hosting").
# %Listed, Google Malware Dashboard: 0.58%.
# Stop Forum Spam (SFS) listings: 77.
# Updated: 2017.10.30 / Checked: 2019.07.24

2606:9200::/32 Deny Cloud
Origin: US
Tag: Rose Hosting


# ASN 5693 ("Latisys-Irvine, LLC").
# Stop Forum Spam (SFS) listings: 10.
# Updated: 2016.04.03 / Checked: 2019.08.01

2001:1990::/32 Deny Cloud
Origin: US
Tag: Latisys-Irvine, LLC


# ASN 46261 ("QuickPacket, LLC").
# Ranges change frequently / Should update often.
# %Listed, Google Malware Dashboard: 0.37%.
# Stop Forum Spam (SFS) listings: 2,726.
# Updated: 2019.06.24

2606:f280::/33 Deny Cloud
2606:f280:8000::/34 Deny Cloud
2606:f280:c000::/35 Deny Cloud
Origin: CA
2605:a880::/48 Deny Cloud
2605:a880:8000::/48 Deny Cloud
2607:3f00::/43 Deny Cloud
2607:3f00:20::/48 Deny Cloud
2607:3f00:2a::/48 Deny Cloud
Origin: US
Tag: QuickPacket, LLC


# ASNs 10480, 29802, 54540 ("HIVELOCITY VENTURES CORP").
# (Can omit anything under 44../8; clean).
# %Listed, Google Malware Dashboard: 0.19% (AS29802), 0.13% (AS54540).
# Stop Forum Spam (SFS) listings: 670 (AS29802), 222 (AS54540).
# Updated: 2019.06.12

2a0a:1f45::/32 Deny Cloud
Origin: NL
2001:504:3c::/48 Deny Cloud
2600:c04:1022::/48 Deny Cloud
2602:ff16:1::/48 Deny Cloud
2602:ff16:2::/47 Deny Cloud
2602:ffd1::/46 Deny Cloud
2602:fff6:f::/48 Deny Cloud
2604:880:1::/48 Deny Cloud
2604:880:2::/47 Deny Cloud
2604:880:4::/47 Deny Cloud
2604:880:6::/48 Deny Cloud
2604:880:a::/48 Deny Cloud
2604:880:d::/48 Deny Cloud
2604:880:e::/48 Deny Cloud
2604:880:10::/46 Deny Cloud
2604:880:26::/47 Deny Cloud
2604:880:32::/48 Deny Cloud
2604:880:35::/48 Deny Cloud
2604:880:37::/48 Deny Cloud
2604:880:39::/48 Deny Cloud
2604:880:3a::/48 Deny Cloud
2604:880:3c::/48 Deny Cloud
2604:880:41::/48 Deny Cloud
2604:880:4c::/46 Deny Cloud
2604:880:50::/47 Deny Cloud
2604:880:54::/48 Deny Cloud
2604:880:56::/48 Deny Cloud
2604:880:58::/47 Deny Cloud
2604:880:5a::/48 Deny Cloud
2604:880:5c::/48 Deny Cloud
2604:880:5e::/48 Deny Cloud
2604:880:60::/48 Deny Cloud
2604:880:62::/47 Deny Cloud
2604:880:64::/47 Deny Cloud
2604:880:6e::/47 Deny Cloud
2604:880:72::/47 Deny Cloud
2604:880:74::/47 Deny Cloud
2604:880:76::/48 Deny Cloud
2604:880:78::/48 Deny Cloud
2604:880:200::/39 Deny Cloud
2604:880:3d00::/48 Deny Cloud
2604:4500::/45 Deny Cloud
2604:4500:8::/46 Deny Cloud
2604:4500:c::/48 Deny Cloud
2604:4500:100::/40 Deny Cloud
2604:4500:900::/40 Deny Cloud
2604:4500:c00::/40 Deny Cloud
2604:8380::/32 Deny Cloud
2606:cd80::/48 Deny Cloud
2620:1e8:2::/47 Deny Cloud
2620:1e8:4::/47 Deny Cloud
Origin: US
Tag: HIVELOCITY VENTURES


# ASN 13739 ("Datacenter IP, LLC").
# Stop Forum Spam (SFS) listings: 311.
# Updated: 2018.08.05 / Checked: 2019.06.01

2a0c:acc0::/29 Deny Cloud
Origin: AT
2604:6080::/32 Deny Cloud
Origin: US
Tag: Datacenter IP, LLC


# ASN 43578 ("MBA DATACENTERS S.L").
# Stop Forum Spam (SFS) listings: 12.
# Updated: 2019.03.30 / Checked: 2019.08.11

2a04:b880::/48 Deny Cloud
2a04:b880:5::/48 Deny Cloud
2a05:4700:b::/48 Deny Cloud
2a05:4700:50::/48 Deny Cloud
2a05:4700:100::/47 Deny Cloud
Origin: ES
Tag: MBA DATACENTERS S.L


# ASN 10439 ("CariNet, Inc").
# Caught attempting to hack honeypots.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2016.04.08 / Checked: 2019.09.15

2607:ff10::/32 Deny Cloud
Origin: US
Tag: CariNet, Inc


# ASN 29141 ("Bradler & Krantz GmbH & Co. KG").
# %Listed, Google Malware Dashboard: 0.54%.
# Stop Forum Spam (SFS) listings: 2.
# Updated: 2016.04.10 / Checked: 2019.09.08

2a02:e00::/32 Deny Cloud
Origin: DE
Tag: Bradler & Krantz


# ASN 34762 ("Combell NV").
# %Listed, Google Malware Dashboard: 0.13%.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2019.05.06

2a00:1c98::/32 Deny Cloud
2a00:7000::/32 Deny Cloud
2a02:d08::/32 Deny Cloud
2a03:a800::/32 Deny Cloud
2a06:efc0::/32 Deny Cloud
2a07:ca80::/29 Deny Cloud
2a0d:5040::/31 Deny Cloud
Origin: BE
2a00:1bd8::/32 Deny Cloud
2a01:40e0::/32 Deny Cloud
2a02:2858::/40 Deny Cloud
2a02:2858:200::/39 Deny Cloud
2a02:2858:400::/40 Deny Cloud
2a03:5500::/31 Deny Cloud
2a0a:640::/32 Deny Cloud
Origin: NL
Tag: Combell NV


# ASN 39020 ("Comvive Servidores S.L").
# %Listed, Google Malware Dashboard: 0.31%.
# Stop Forum Spam (SFS) listings: 192.
# Updated: 2016.04.10 / Checked: 2019.06.20

2a00:1d70::/32 Deny Cloud
Origin: ES
Tag: Comvive Servidores


# ASN 34971 ("Prometeus di Daniela Agro").
# %Listed, Google Malware Dashboard: 0.19%.
# Stop Forum Spam (SFS) listings: 23.
# Updated: 2018.03.14 / Checked: 2019.05.20

2a00:dcc0::/32 Deny Cloud
2a00:dcc7:d000::/38 Deny Cloud
Origin: IT
2a06:fdc0::/32 Deny Cloud
Origin: RO
Tag: Daniela Agro


# ASNs 48496, 52173 ("Makonix SIA").
# %Listed, Google Malware Dashboard: 0.70% (AS48496), 0.21% (AS48496).
# Stop Forum Spam (SFS) listings: 576 (AS48496), 2,127 (AS48496).
# Updated: 2018.07.09 / Checked: 2019.05.20

2a02:7aa0::/34 Deny Cloud
Origin: LV
Tag: Makonix SIA


# ASN 57169 ("EDIS GmbH").
# %Listed, Google Malware Dashboard: 0.11%.
# Stop Forum Spam (SFS) listings: 903.
# Updated: 2016.11.02 / Checked: 2019.06.20

2a03:f80:852::/48 Deny Cloud
2a03:f80:ad15::/48 Deny Cloud
2a03:f80:ed15::/48 Deny Cloud
2a03:f80:ed16::/47 Deny Cloud
2a03:f81::/32 Deny Cloud
2a03:f83::/32 Deny Cloud
2a03:f84::/32 Deny Cloud
2a03:f87:ffff::/48 Deny Cloud
Origin: AT
Tag: EDIS GmbH


# ASNs 8272, 8426, 34948 ("ClaraNET LTD").
# %Listed, Google Malware Dashboard: 0.38% (AS8426).
# Stop Forum Spam (SFS) listings: 21 (AS8426).
# Updated: 2019.05.19

2a00:1798::/32 Deny Cloud
Origin: DE
2a02:a0::/32 Deny Cloud
Origin: ES
2001:a70::/32 Deny Cloud
2a02:1f8::/32 Deny Cloud
2a02:2328::/32 Deny Cloud
2a03:7300::/32 Deny Cloud
Origin: FR
2001:67c:1088::/47 Deny Cloud
2001:67c:27dc::/48 Deny Cloud
2001:a88::/32 Deny Cloud
2a00:ed0::/32 Deny Cloud
2a01:7b8::/32 Deny Cloud
Origin: GB
2a00:7740::/32 Deny Cloud
2a02:830::/32 Deny Cloud
Origin: NL
2001:4cc0::/32 Deny Cloud
2a03:73c0::/48 Deny Cloud
2a03:8bc0:33::/48 Deny Cloud
2a03:9c80:4000::/34 Deny Cloud
2a07:4f40::/29 Deny Cloud
2a09:5640::/32 Deny Cloud
2a09:58c0::/32 Deny Cloud
Origin: PT
Tag: ClaraNET LTD


# ASN 43289 ("Trabia-Network S.R.L").
# Stop Forum Spam (SFS) listings: 41,134.
# Updated: 2019.05.06

2a03:f80:373::/48 Deny Cloud
Origin: AT
2a02:e00:ffe8::/48 Deny Cloud
Origin: DE
2a05:bc00::/29 Deny Cloud
2a06:80c0::/29 Deny Cloud
2a06:8e40::/29 Deny Cloud
2a06:8e80::/29 Deny Cloud
2a06:a240::/29 Deny Cloud
2a06:a2c0::/29 Deny Cloud
2a06:e800::/29 Deny Cloud
2a07:640::/29 Deny Cloud
2a07:c80::/29 Deny Cloud
2a07:17c0::/29 Deny Cloud
2a07:2680::/29 Deny Cloud
2a07:2880::/29 Deny Cloud
2a07:2f40::/29 Deny Cloud
2a07:3dc0::/29 Deny Cloud
2a07:41c0::/29 Deny Cloud
2a07:4240::/29 Deny Cloud
2a07:5200::/29 Deny Cloud
2a07:8000::/29 Deny Cloud
2a07:8240::/29 Deny Cloud
2a07:9d00::/29 Deny Cloud
2a0a:3400::/29 Deny Cloud
2a0a:cf80::/29 Deny Cloud
2a0b:200::/29 Deny Cloud
2a0b:7f40::/29 Deny Cloud
2a0c:2b00::/29 Deny Cloud
Origin: DK
2403:280::/32 Deny Cloud
Origin: HK
2a00:1dc0::/29 Deny Cloud
Origin: MD
2a07:8800::/29 Deny Cloud
Origin: UA
Tag: Trabia-Network


# ASN 29691 ("Nine Internet Solutions AG").
# %Listed, Google Malware Dashboard: 0.05%.
# Stop Forum Spam (SFS) listings: 7,319.
# Updated: 2018.08.21 / Checked: 2019.08.29

2a02:418::/29 Deny Cloud
2a05:9a80::/29 Deny Cloud
Origin: CH
Tag: Nine Internet


# ASN 61102 ("Interhost Communication Solutions Ltd").
# %Listed, Google Malware Dashboard: 0.33%.
# Stop Forum Spam (SFS) listings: 347.
# Updated: 2016.04.10 / Checked: 2019.08.01

2a03:f80:972::/48 Deny Cloud
Origin: AT
2a03:ff40::/32 Deny Cloud
Origin: IL
Tag: AS61102


# ASN 14442 ("Media-Hosts Inc").
# Stop Forum Spam (SFS) listings: 55.
# Updated: 2016.04.10 / Checked: 2019.04.13

2605:2100::/36 Deny Cloud
Origin: CA
Tag: Media-Hosts Inc


# ASN 53667 ("FranTech Solutions").
# %Listed, Google Malware Dashboard: 0.22%.
# Stop Forum Spam (SFS) listings: 33,781.
# Updated: 2017.12.18 / Checked: 2019.08.01

2605:6400:1::/48 Deny Cloud
2605:6400:2::/47 Deny Cloud
2605:6400:10::/48 Deny Cloud
2605:6400:20::/48 Deny Cloud
2605:6400:30::/48 Deny Cloud
2605:6400:100::/48 Deny Cloud
Origin: US
Tag: FranTech Solutions


# ASN 35908 ("Krypt Technologies").
# %Listed, Google Malware Dashboard: 0.63%.
# Stop Forum Spam (SFS) listings: 492.
# Updated: 2019.03.27 / Checked: 2019.08.04

2607:f180::/31 Deny Cloud
Origin: US
Tag: Krypt Technologies


# ASN 31815 ("Media Temple, Inc").
# %Listed, Google Malware Dashboard: 0.29%.
# Updated: 2017.11.16 / Checked: 2019.09.15

2606:2300:8000::/48 Deny Cloud
Origin: US
Tag: Media Temple, Inc


# ASNs 12586, 48039 ("GHOSTnet GmbH").
# %Listed, Google Malware Dashboard: 0.63% (AS12586).
# Stop Forum Spam (SFS) listings: 941 (AS12586).
# Updated: 2019.07.12

2001:67c:18e8::/48 Deny Cloud
2001:67c:2c58::/48 Deny Cloud
2001:67c:2f84::/48 Deny Cloud
2a00:12d8::/29 Deny Cloud
2a00:1890::/29 Deny Cloud
2a00:1910::/29 Deny Cloud
2a00:19d0::/29 Deny Cloud
2a00:cdc0::/32 Deny Cloud
2a01:bd40::/29 Deny Cloud
2a02:7a0::/32 Deny Cloud
2a02:2fc0::/29 Deny Cloud
2a0b:6c80::/32 Deny Cloud
Origin: DE
Tag: GHOSTnet GmbH


# ASNs 21859, 62610 ("Zenlayer Inc").
# %Listed, Google Malware Dashboard: 0.72% (AS21859).
# Stop Forum Spam (SFS) listings: 2,094 (AS21859).
# Updated: 2019.09.15

2400:ba41:1::/48 Deny Cloud
2407:6a80::/32 Deny Cloud
Origin: CN
2a0b:21c0:1000::/36 Deny Cloud
2a0b:21c0:2000::/35 Deny Cloud
2a0b:21c0:4000::/34 Deny Cloud
2a0b:21c0:8000::/35 Deny Cloud
2a0b:21c0:a000::/36 Deny Cloud
Origin: DE
2602:ffe4::/37 Deny Cloud
2602:ffe4:800::/38 Deny Cloud
2602:ffe4:c00::/46 Deny Cloud
2602:ffe4:c05::/48 Deny Cloud
2602:ffe4:c0b::/48 Deny Cloud
2602:ffe4:c11::/48 Deny Cloud
2602:ffe4:c12::/48 Deny Cloud
2602:ffe4:c14::/47 Deny Cloud
2602:ffe4:c17::/48 Deny Cloud
2602:ffe4:c18::/47 Deny Cloud
2602:ffe4:c1a::/48 Deny Cloud
2602:ffe4:c20::/48 Deny Cloud
2604:980:1000::/36 Deny Cloud
2604:980:2000::/35 Deny Cloud
2604:980:4000::/35 Deny Cloud
2604:980:7000::/36 Deny Cloud
2604:980:8000::/35 Deny Cloud
2607:a400::/32 Deny Cloud
Origin: US
Tag: Zenlayer Inc


# ASN 22923 ("Yesup Ecommerce Solutions Inc").
# %Listed, Google Malware Dashboard: 0.20%.
# Stop Forum Spam (SFS) listings: 2,285.
# Updated: 2019.09.15

2604:6880::/32 Deny Cloud
Origin: CA
2a0a:9204:ab6d::/48 Deny Cloud
Origin: DE
Tag: Yesup Ecommerce


# ASN 30475 ("Handy Networks, LLC").
# %Listed, Google Malware Dashboard: 0.13%.
# Stop Forum Spam (SFS) listings: 478.
# Updated: 2018.07.09 / Checked: 2019.09.06

2602:fff6:d::/48 Deny Cloud
2606:6680:6::/48 Deny Cloud
2607:fc88::/32 Deny Cloud
Origin: US
Tag: Handy Networks


# ASN 31863 ("Centrilogic, Inc").
# (Can omit anything under 44../8; clean).
# %Listed, Google Malware Dashboard: 0.49%.
# Stop Forum Spam (SFS) listings: 816.
# Updated: 2018.08.06 / Checked: 2019.06.03

2602:ff96:3::/48 Deny Cloud
2602:ff96:7::/48 Deny Cloud
2607:5600::/32 Deny Cloud
2607:6980:2730::/44 Deny Cloud
Origin: US
Tag: Centrilogic


# ASNs 37958, 63541 ("Beijing Blue I.T Technologies Co.,Ltd").
# %Listed, Google Malware Dashboard: 0.08% (AS63541).
# Stop Forum Spam (SFS) listings: 50 (AS63541).
# Updated: 2018.12.11 / Checked: 2019.05.01

2400:e140:0:3000::/64 Deny Cloud
2400:e140:1000::/48 Deny Cloud
2400:e140:3000::/48 Deny Cloud
Origin: CN
Tag: Beijing Blue


# ASN 53340 ("VegasNAP, LLC").
# %Listed, Google Malware Dashboard: 0.38%.
# Stop Forum Spam (SFS) listings: 82.
# Updated: 2017.07.27 / Checked: 2019.06.03

2604:2280::/40 Deny Cloud
2604:2280:4100::/40 Deny Cloud
2604:2280:ff00::/40 Deny Cloud
2605:6f80:ffff::/48 Deny Cloud
2606:6680:5::/48 Deny Cloud
Origin: US
Tag: VegasNAP, LLC


# ASNs 34702, 34729 ("Aktsiaselts WaveCom").
# %Listed, Google Malware Dashboard: 0.14% (AS34702).
# Stop Forum Spam (SFS) listings: 4,032 (AS34702).
# Updated: 2018.12.19 / Checked: 2019.05.07

2a01:97a0::/32 Deny Cloud
2a0c:36c7::/32 Deny Cloud
Origin: EE
Tag: Aktsiaselts


# ASN 54290 ("Hostwinds LLC").
# %Listed, Google Malware Dashboard: 0.31%.
# Stop Forum Spam (SFS) listings: 166.
# Updated: 2019.03.26 / Checked: 2019.08.04

2a06:4700::/29 Deny Cloud
2a0d:7c40::/29 Deny Cloud
Origin: NL
2607:5500::/31 Deny Cloud
Origin: US
Tag: Hostwinds LLC


# ASN 8342 ("OJSC RTComm.RU").
# %Listed, Google Malware Dashboard: 0.37%.
# Stop Forum Spam (SFS) listings: 153.
# Updated: 2016.04.23 / Checked: 2019.04.29

2001:1bb0::/32 Deny Cloud
Origin: RU
Tag: OJSC RTComm.RU


# ASN 9123 ("OOO TimeWeb").
# Split to ISPs signature files:
# - "residential ethernet networks".
# - "trade center public wi-fi & campus connectivity".
# - "bank campus network & e-commerce cluster".
# - "corporate internet gate".
# ^.*(residential|trade center|campus connectivity|bank campus|corporate internet gate).*$
# Everything else in the cloud services signature files.
# %Listed, Google Malware Dashboard: 0.71%.
# Stop Forum Spam (SFS) listings: 285.
# Updated: 2018.11.21 / Checked: 2019.08.03

2a03:6f00:1::/48 Deny Cloud
2a03:6f00:2::/47 Deny Cloud
2a03:6f00:4::/46 Deny Cloud
Origin: RU
Tag: OOO TimeWeb


# ASN 10098 ("Henderson Data Centre Limited").
# Some residual evidence of spamming via MegaRBL.
# Updated: 2016.04.23 / Checked: 2019.09.05

2407:7200::/32 Deny Cloud
Origin: HK
Tag: Henderson


# ASN 15967 ("Nazwa.pl Sp.z.o.o").
# %Listed, Google Malware Dashboard: 0.43%.
# Stop Forum Spam (SFS) listings: 43.
# Updated: 2016.04.23 / Checked: 2019.05.07

2a01:6100::/32 Deny Cloud
Origin: PL
Tag: Nazwa.pl


# ASN 18450 ("WebNX, Inc").
# Contains proxy entries (careful when updating).
# %Listed, Google Malware Dashboard: 0.20%.
# Stop Forum Spam (SFS) listings: 51.
# Updated: 2018.11.02 / Checked: 2019.04.13

2607:f2d8::/32 Deny Cloud
Origin: US
Tag: WebNX, Inc


# ASN 198068 ("FASTVPS EESTI OU").
# %Listed, Google Malware Dashboard: 0.12%.
# Stop Forum Spam (SFS) listings: 159.
# Updated: 2017.06.28 / Checked: 2019.08.29

2a03:f480:1::/48 Deny Cloud
2a03:f480:2::/48 Deny Cloud
Origin: EE
Tag: FASTVPS EESTI OU


# ASN 43513 ("Sia Nano IT").
# Stop Forum Spam (SFS) listings: 753.
# Updated: 2019.09.05

2a00:c68::/32 Deny Cloud
2a02:7aa0:4000::/48 Deny Cloud
2a05:8700::/29 Deny Cloud
Origin: LV
Tag: Sia Nano IT


# ASNs 7224, 14618, 16509, 38895, 62785 ("Amazon.com, Inc").
# ASNs 8987, 9059, 395343 ("Amazon Data Services").
# (Just those ASNs. Don't expand this section in the future). Remove when
# updating due to false positive risk: 203.83.220.0/22 ("Amazon.com Tech Telecom"),
# as well as anything marked as "invalid". Also check out the Amazon blocklist
# provided by Macmathan (can be installed via the front-end).
# Updated: 2019.08.01

2403:b300::/32 Run rules_specific.php
Origin: AU
2804:800::/32 Run rules_specific.php
Origin: BR
2a05:d000:2000::/40 Run rules_specific.php
2a05:d000:6000::/40 Run rules_specific.php
2a05:d000:c000::/40 Run rules_specific.php
2a05:d000:e000::/40 Run rules_specific.php
2a05:d012::/36 Run rules_specific.php
2a05:d014::/36 Run rules_specific.php
2a05:d016::/36 Run rules_specific.php
2a05:d018::/36 Run rules_specific.php
2a05:d01c::/36 Run rules_specific.php
2a05:d01e::/36 Run rules_specific.php
2a05:d050:2040::/44 Run rules_specific.php
2a05:d050:2080::/44 Run rules_specific.php
2a05:d050:20c0::/44 Run rules_specific.php
2a05:d050:4040::/44 Run rules_specific.php
2a05:d050:4080::/44 Run rules_specific.php
2a05:d050:40c0::/44 Run rules_specific.php
2a05:d050:6040::/44 Run rules_specific.php
2a05:d050:6080::/44 Run rules_specific.php
2a05:d050:60c0::/44 Run rules_specific.php
2a05:d050:8010::/44 Run rules_specific.php
2a05:d050:8020::/44 Run rules_specific.php
2a05:d050:8040::/43 Run rules_specific.php
2a05:d050:8060::/44 Run rules_specific.php
2a05:d050:8080::/43 Run rules_specific.php
2a05:d050:80a0::/44 Run rules_specific.php
2a05:d050:80c0::/44 Run rules_specific.php
2a05:d050:80e0::/44 Run rules_specific.php
2a05:d050:a040::/44 Run rules_specific.php
2a05:d050:a080::/44 Run rules_specific.php
2a05:d050:a0c0::/44 Run rules_specific.php
2a05:d050:c040::/44 Run rules_specific.php
2a05:d050:c080::/44 Run rules_specific.php
2a05:d050:c0c0::/44 Run rules_specific.php
2a05:d050:e040::/44 Run rules_specific.php
2a05:d050:e080::/44 Run rules_specific.php
2a05:d050:e0c0::/44 Run rules_specific.php
Origin: IE
2400:6700::/32 Run rules_specific.php
Origin: JP
2400:6500::/32 Run rules_specific.php
Origin: SG
2406:da00:2000::/40 Run rules_specific.php
2406:da00:6000::/40 Run rules_specific.php
2406:da00:a000::/40 Run rules_specific.php
2406:da00:e000::/40 Run rules_specific.php
2406:da00:ff00::/48 Run rules_specific.php
2406:da12::/36 Run rules_specific.php
2406:da14::/36 Run rules_specific.php
2406:da16::/36 Run rules_specific.php
2406:da18::/36 Run rules_specific.php
2406:da1a::/36 Run rules_specific.php
2406:da1c::/36 Run rules_specific.php
2406:da1e::/36 Run rules_specific.php
2406:daa0:1080::/44 Run rules_specific.php
2406:daa0:10c0::/44 Run rules_specific.php
2406:daa0:2040::/44 Run rules_specific.php
2406:daa0:2080::/44 Run rules_specific.php
2406:daa0:20c0::/44 Run rules_specific.php
2406:daa0:4020::/44 Run rules_specific.php
2406:daa0:4040::/44 Run rules_specific.php
2406:daa0:4060::/44 Run rules_specific.php
2406:daa0:4080::/44 Run rules_specific.php
2406:daa0:6080::/44 Run rules_specific.php
2406:daa0:8020::/44 Run rules_specific.php
2406:daa0:8080::/44 Run rules_specific.php
2406:daa0:80c0::/44 Run rules_specific.php
2406:daa0:a040::/44 Run rules_specific.php
2406:daa0:a080::/44 Run rules_specific.php
2406:daa0:a0c0::/44 Run rules_specific.php
2406:daa0:c020::/44 Run rules_specific.php
2406:daa0:c040::/44 Run rules_specific.php
2406:daa0:c080::/44 Run rules_specific.php
2406:daa0:c0a0::/44 Run rules_specific.php
2406:daa0:c0c0::/44 Run rules_specific.php
2406:daa0:e040::/44 Run rules_specific.php
2406:daa0:e080::/44 Run rules_specific.php
2406:daa0:e0c0::/44 Run rules_specific.php
2600:1f00:1000::/40 Run rules_specific.php
2600:1f00:5000::/40 Run rules_specific.php
2600:1f00:6000::/40 Run rules_specific.php
2600:1f01:4800::/47 Run rules_specific.php
2600:1f01:4810::/47 Run rules_specific.php
2600:1f01:4820::/47 Run rules_specific.php
2600:1f01:4830::/47 Run rules_specific.php
2600:1f01:4840::/47 Run rules_specific.php
2600:1f01:4844::/47 Run rules_specific.php
2600:1f01:4850::/47 Run rules_specific.php
2600:1f01:4860::/47 Run rules_specific.php
2600:1f01:4870::/47 Run rules_specific.php
2600:1f01:4880::/47 Run rules_specific.php
2600:1f01:4890::/47 Run rules_specific.php
2600:1f01:48a0::/47 Run rules_specific.php
2600:1f01:48b0::/47 Run rules_specific.php
2600:1f01:48c0::/47 Run rules_specific.php
2600:1f01:48d0::/46 Run rules_specific.php
2600:1f01:48e0::/47 Run rules_specific.php
2600:1f11::/36 Run rules_specific.php
2600:1f12::/36 Run rules_specific.php
2600:1f14::/35 Run rules_specific.php
2600:1f15::/36 Run rules_specific.php
2600:1f16::/36 Run rules_specific.php
2600:1f18::/33 Run rules_specific.php
2600:1f1c::/36 Run rules_specific.php
2600:1f1e::/36 Run rules_specific.php
2600:1fa0:1040::/44 Run rules_specific.php
2600:1fa0:1080::/44 Run rules_specific.php
2600:1fa0:10c0::/44 Run rules_specific.php
2600:1fa0:2040::/44 Run rules_specific.php
2600:1fa0:2080::/44 Run rules_specific.php
2600:1fa0:20c0::/44 Run rules_specific.php
2600:1fa0:4020::/44 Run rules_specific.php
2600:1fa0:4040::/44 Run rules_specific.php
2600:1fa0:4060::/44 Run rules_specific.php
2600:1fa0:4080::/44 Run rules_specific.php
2600:1fa0:40a0::/44 Run rules_specific.php
2600:1fa0:40c0::/44 Run rules_specific.php
2600:1fa0:40e0::/44 Run rules_specific.php
2600:1fa0:5040::/44 Run rules_specific.php
2600:1fa0:5080::/44 Run rules_specific.php
2600:1fa0:50c0::/44 Run rules_specific.php
2600:1fa0:6040::/44 Run rules_specific.php
2600:1fa0:6080::/44 Run rules_specific.php
2600:1fa0:60c0::/44 Run rules_specific.php
2600:1fa0:8010::/44 Run rules_specific.php
2600:1fa0:8020::/44 Run rules_specific.php
2600:1fa0:8040::/43 Run rules_specific.php
2600:1fa0:8060::/44 Run rules_specific.php
2600:1fa0:8080::/43 Run rules_specific.php
2600:1fa0:80a0::/44 Run rules_specific.php
2600:1fa0:80c0::/44 Run rules_specific.php
2600:1fa0:80e0::/44 Run rules_specific.php
2600:1fa0:c020::/44 Run rules_specific.php
2600:1fa0:c040::/44 Run rules_specific.php
2600:1fa0:c0c0::/44 Run rules_specific.php
2600:1fa0:e020::/44 Run rules_specific.php
2600:1fa0:e040::/44 Run rules_specific.php
2600:1fa0:e080::/44 Run rules_specific.php
2600:1fa0:e0c0::/44 Run rules_specific.php
2600:9000:1001::/48 Run rules_specific.php
2600:9000:1002::/47 Run rules_specific.php
2600:9000:1004::/48 Run rules_specific.php
2600:9000:1006::/47 Run rules_specific.php
2600:9000:1008::/46 Run rules_specific.php
2600:9000:100c::/47 Run rules_specific.php
2600:9000:100f::/48 Run rules_specific.php
2600:9000:1010::/46 Run rules_specific.php
2600:9000:1015::/48 Run rules_specific.php
2600:9000:1016::/47 Run rules_specific.php
2600:9000:1018::/46 Run rules_specific.php
2600:9000:101c::/47 Run rules_specific.php
2600:9000:101f::/48 Run rules_specific.php
2600:9000:1020::/45 Run rules_specific.php
2600:9000:1028::/48 Run rules_specific.php
2600:9000:102a::/47 Run rules_specific.php
2600:9000:102d::/48 Run rules_specific.php
2600:9000:102f::/48 Run rules_specific.php
2600:9000:1030::/48 Run rules_specific.php
2600:9000:1035::/48 Run rules_specific.php
2600:9000:1036::/47 Run rules_specific.php
2600:9000:1038::/45 Run rules_specific.php
2600:9000:1040::/46 Run rules_specific.php
2600:9000:1044::/48 Run rules_specific.php
2600:9000:1046::/47 Run rules_specific.php
2600:9000:1048::/45 Run rules_specific.php
2600:9000:1077::/48 Run rules_specific.php
2600:9000:1078::/45 Run rules_specific.php
2600:9000:1080::/46 Run rules_specific.php
2600:9000:1084::/48 Run rules_specific.php
2600:9000:1086::/47 Run rules_specific.php
2600:9000:1089::/48 Run rules_specific.php
2600:9000:108a::/48 Run rules_specific.php
2600:9000:108c::/46 Run rules_specific.php
2600:9000:1090::/44 Run rules_specific.php
2600:9000:10a0::/43 Run rules_specific.php
2600:9000:10c1::/48 Run rules_specific.php
2600:9000:10c2::/47 Run rules_specific.php
2600:9000:10c4::/46 Run rules_specific.php
2600:9000:10c8::/48 Run rules_specific.php
2600:9000:10cb::/48 Run rules_specific.php
2600:9000:10cd::/48 Run rules_specific.php
2600:9000:10ce::/47 Run rules_specific.php
2600:9000:10d0::/46 Run rules_specific.php
2600:9000:10d4::/48 Run rules_specific.php
2600:9000:10d6::/47 Run rules_specific.php
2600:9000:10d8::/45 Run rules_specific.php
2600:9000:10e0::/48 Run rules_specific.php
2600:9000:10e2::/47 Run rules_specific.php
2600:9000:10e4::/48 Run rules_specific.php
2600:9000:10e8::/45 Run rules_specific.php
2600:9000:10f0::/47 Run rules_specific.php
2600:9000:10f2::/48 Run rules_specific.php
2600:9000:10f4::/48 Run rules_specific.php
2600:9000:10f6::/48 Run rules_specific.php
2600:9000:10f8::/46 Run rules_specific.php
2600:9000:10fc::/47 Run rules_specific.php
2600:9000:10ff::/48 Run rules_specific.php
2600:9000:1103::/48 Run rules_specific.php
2600:9000:1107::/48 Run rules_specific.php
2600:9000:1109::/48 Run rules_specific.php
2600:9000:110b::/48 Run rules_specific.php
2600:9000:110c::/48 Run rules_specific.php
2600:9000:1111::/48 Run rules_specific.php
2600:9000:1113::/48 Run rules_specific.php
2600:9000:1115::/48 Run rules_specific.php
2600:9000:1116::/47 Run rules_specific.php
2600:9000:1118::/47 Run rules_specific.php
2600:9000:111a::/48 Run rules_specific.php
2600:9000:111e::/47 Run rules_specific.php
2600:9000:1120::/48 Run rules_specific.php
2600:9000:1122::/47 Run rules_specific.php
2600:9000:1124::/48 Run rules_specific.php
2600:9000:1128::/47 Run rules_specific.php
2600:9000:112a::/48 Run rules_specific.php
2600:9000:112e::/47 Run rules_specific.php
2600:9000:1130::/47 Run rules_specific.php
2600:9000:113b::/48 Run rules_specific.php
2600:9000:2000::/46 Run rules_specific.php
2600:9000:2004::/47 Run rules_specific.php
2600:9000:2007::/48 Run rules_specific.php
2600:9000:2008::/46 Run rules_specific.php
2600:9000:200c::/47 Run rules_specific.php
2600:9000:200f::/48 Run rules_specific.php
2600:9000:2010::/46 Run rules_specific.php
2600:9000:2015::/48 Run rules_specific.php
2600:9000:2016::/48 Run rules_specific.php
2600:9000:2018::/46 Run rules_specific.php
2600:9000:201c::/47 Run rules_specific.php
2600:9000:201f::/48 Run rules_specific.php
2600:9000:2020::/45 Run rules_specific.php
2600:9000:202b::/48 Run rules_specific.php
2600:9000:202c::/47 Run rules_specific.php
2600:9000:202f::/48 Run rules_specific.php
2600:9000:2032::/48 Run rules_specific.php
2600:9000:2036::/48 Run rules_specific.php
2600:9000:2038::/47 Run rules_specific.php
2600:9000:203a::/48 Run rules_specific.php
2600:9000:203c::/46 Run rules_specific.php
2600:9000:2041::/48 Run rules_specific.php
2600:9000:2042::/47 Run rules_specific.php
2600:9000:2044::/48 Run rules_specific.php
2600:9000:2046::/47 Run rules_specific.php
2600:9000:2048::/48 Run rules_specific.php
2600:9000:204a::/47 Run rules_specific.php
2600:9000:204c::/48 Run rules_specific.php
2600:9000:204e::/47 Run rules_specific.php
2600:9000:2055::/48 Run rules_specific.php
2600:9000:2056::/47 Run rules_specific.php
2600:9000:205c::/48 Run rules_specific.php
2600:9000:205e::/47 Run rules_specific.php
2600:9000:2061::/48 Run rules_specific.php
2600:9000:2062::/47 Run rules_specific.php
2600:9000:2064::/47 Run rules_specific.php
2600:9000:2066::/48 Run rules_specific.php
2600:9000:206f::/48 Run rules_specific.php
2600:9000:2070::/45 Run rules_specific.php
2600:9000:2078::/47 Run rules_specific.php
2600:9000:207b::/48 Run rules_specific.php
2600:9000:207c::/47 Run rules_specific.php
2600:9000:207f::/48 Run rules_specific.php
2600:9000:2086::/48 Run rules_specific.php
2600:9000:208a::/47 Run rules_specific.php
2600:9000:208e::/48 Run rules_specific.php
2600:9000:2090::/46 Run rules_specific.php
2600:9000:2095::/48 Run rules_specific.php
2600:9000:2097::/48 Run rules_specific.php
2600:9000:2098::/46 Run rules_specific.php
2600:9000:209c::/48 Run rules_specific.php
2600:9000:209f::/48 Run rules_specific.php
2600:9000:20a3::/48 Run rules_specific.php
2600:9000:20a5::/48 Run rules_specific.php
2600:9000:20a9::/48 Run rules_specific.php
2600:9000:20aa::/47 Run rules_specific.php
2600:9000:20ac::/47 Run rules_specific.php
2600:9000:20b0::/48 Run rules_specific.php
2600:9000:20b5::/48 Run rules_specific.php
2600:9000:20b9::/48 Run rules_specific.php
2600:9000:20ba::/47 Run rules_specific.php
2600:9000:20bc::/47 Run rules_specific.php
2600:9000:20be::/48 Run rules_specific.php
2600:9000:20c0::/47 Run rules_specific.php
2600:9000:20c3::/48 Run rules_specific.php
2600:9000:20c5::/48 Run rules_specific.php
2600:9000:20c6::/47 Run rules_specific.php
2600:9000:20cb::/48 Run rules_specific.php
2600:9000:20cc::/47 Run rules_specific.php
2600:9000:20d0::/45 Run rules_specific.php
2600:9000:20d8::/47 Run rules_specific.php
2600:9000:20da::/48 Run rules_specific.php
2600:9000:20de::/48 Run rules_specific.php
2600:9000:20e0::/48 Run rules_specific.php
2600:9000:20e9::/48 Run rules_specific.php
2600:9000:20eb::/48 Run rules_specific.php
2600:9000:20ec::/47 Run rules_specific.php
2600:9000:20f2::/48 Run rules_specific.php
2600:9000:20f4::/48 Run rules_specific.php
2600:9000:20f7::/48 Run rules_specific.php
2600:9000:20f8::/46 Run rules_specific.php
2600:9000:20fc::/47 Run rules_specific.php
2600:9000:20fe::/48 Run rules_specific.php
2600:9000:2101::/48 Run rules_specific.php
2600:9000:2102::/47 Run rules_specific.php
2600:9000:2104::/46 Run rules_specific.php
2600:9000:2108::/46 Run rules_specific.php
2600:9000:210e::/48 Run rules_specific.php
2600:9000:2110::/48 Run rules_specific.php
2600:9000:2114::/47 Run rules_specific.php
2600:9000:2116::/48 Run rules_specific.php
2600:9000:2119::/48 Run rules_specific.php
2600:9000:211a::/47 Run rules_specific.php
2600:9000:211c::/46 Run rules_specific.php
2600:9000:2120::/45 Run rules_specific.php
2600:9000:2128::/48 Run rules_specific.php
2600:9000:212a::/48 Run rules_specific.php
2600:9000:212c::/46 Run rules_specific.php
2600:9000:2130::/45 Run rules_specific.php
2600:9000:2139::/48 Run rules_specific.php
2600:9000:213a::/48 Run rules_specific.php
2600:9000:213c::/46 Run rules_specific.php
2600:9000:2143::/48 Run rules_specific.php
2600:9000:2144::/47 Run rules_specific.php
2600:9000:2146::/48 Run rules_specific.php
2600:9000:214a::/48 Run rules_specific.php
2600:9000:214c::/47 Run rules_specific.php
2600:9000:2151::/48 Run rules_specific.php
2600:9000:2152::/47 Run rules_specific.php
2600:9000:2156::/48 Run rules_specific.php
2600:9000:2159::/48 Run rules_specific.php
2600:9000:215a::/47 Run rules_specific.php
2600:9000:215c::/48 Run rules_specific.php
2600:9000:215e::/47 Run rules_specific.php
2600:9000:2160::/47 Run rules_specific.php
2600:9000:2164::/46 Run rules_specific.php
2600:9000:2168::/45 Run rules_specific.php
2600:9000:2170::/48 Run rules_specific.php
2600:9000:2172::/47 Run rules_specific.php
2600:9000:2174::/47 Run rules_specific.php
2600:9000:2176::/48 Run rules_specific.php
2600:9000:217a::/48 Run rules_specific.php
2600:9000:217c::/48 Run rules_specific.php
2600:9000:217f::/48 Run rules_specific.php
2600:9000:2180::/46 Run rules_specific.php
2600:9000:2184::/47 Run rules_specific.php
2600:9000:2187::/48 Run rules_specific.php
2600:9000:2188::/45 Run rules_specific.php
2600:9000:2191::/48 Run rules_specific.php
2600:9000:2195::/48 Run rules_specific.php
2600:9000:2196::/48 Run rules_specific.php
2600:9000:2199::/48 Run rules_specific.php
2600:9000:219a::/47 Run rules_specific.php
2600:9000:219c::/46 Run rules_specific.php
2600:9000:21a0::/48 Run rules_specific.php
2600:9000:21a2::/47 Run rules_specific.php
2600:9000:21a4::/46 Run rules_specific.php
2600:9000:21a8::/48 Run rules_specific.php
2600:9000:21ab::/48 Run rules_specific.php
2600:9000:21ac::/46 Run rules_specific.php
2600:9000:21b0::/45 Run rules_specific.php
2600:9000:21b8::/48 Run rules_specific.php
2600:9000:21bc::/46 Run rules_specific.php
2600:9000:21c0::/48 Run rules_specific.php
2600:9000:21c6::/48 Run rules_specific.php
2600:9000:21d1::/48 Run rules_specific.php
2600:9000:21d2::/47 Run rules_specific.php
2600:9000:21d4::/47 Run rules_specific.php
2600:9000:21d8::/48 Run rules_specific.php
2600:9000:21da::/48 Run rules_specific.php
2600:9000:21dd::/48 Run rules_specific.php
2600:9000:21e0::/48 Run rules_specific.php
2600:9000:21ea::/47 Run rules_specific.php
2600:9000:21ec::/48 Run rules_specific.php
2600:9000:21f2::/47 Run rules_specific.php
2600:9000:21f8::/48 Run rules_specific.php
2600:9000:5300::/45 Run rules_specific.php
2600:9000:f110::/48 Run rules_specific.php
2600:9000:f140::/48 Run rules_specific.php
2600:9000:f150::/48 Run rules_specific.php
2600:9000:f211::/48 Run rules_specific.php
2600:9000:f213::/48 Run rules_specific.php
2600:9000:f530::/47 Run rules_specific.php
2620:107:300f::/48 Run rules_specific.php
2620:108:7000::/44 Run rules_specific.php
2620:108:d000::/44 Run rules_specific.php
2a01:578::/32 Run rules_specific.php
Origin: US
Tag: Amazon.com, Inc


# ASN 62282 ("UAB Rakrejus").
# %Listed, Google Malware Dashboard: 0.24%.
# Stop Forum Spam (SFS) listings: 17,042.
# Updated: 2016.10.01 / Checked: 2019.06.20

2a01:41a0::/32 Deny Cloud
2a02:7b40::/32 Deny Cloud
Origin: LT
Tag: UAB Rakrejus


# ASNs 22611, 54641 ("InMotion Hosting, Inc").
# %Listed, Google Malware Dashboard: 0.25% (AS22611), 0.18% (AS54641).
# Stop Forum Spam (SFS) listings: 1 (AS22611).
# Updated: 2017.11.29 / Checked: 2019.06.28

2605:f400:2::/47 Deny Cloud
Origin: US
Tag: InMotion Hosting, Inc


# ASN 45638 ("SYNERGY WHOLESALE PTY LTD").
# %Listed, Google Malware Dashboard: 0.17%.
# Updated: 2019.09.05

2400:8f80::/47 Deny Cloud
2400:b800::/46 Deny Cloud
2400:b800:4::/47 Deny Cloud
2400:b800:6::/48 Deny Cloud
Origin: AU
Tag: SYNERGY WHOLESALE


# ASN 45538 ("Online data services").
# %Listed, Google Malware Dashboard: 0.06%.
# Stop Forum Spam (SFS) listings: 356.
# Updated: 2016.12.05 / Checked: 2019.04.18

2405:9d80::/32 Deny Cloud
Origin: VN
Tag: AS45538


# ASN 37963 ("Hangzhou Alibaba Advertising Co.,Ltd.").
# %Listed, Google Malware Dashboard: 0.71%.
# Stop Forum Spam (SFS) listings: 2,821.
# Updated: 2018.10.14 / Checked: 2019.08.22

2400:3200::/32 Deny Cloud
2400:b200::/32 Deny Cloud
2401:2e00::/32 Deny Cloud
2401:b180::/32 Deny Cloud
2405:e000::/32 Deny Cloud
2407:bc00::/32 Deny Cloud
2408:4000::/22 Deny Cloud
Origin: CN
Tag: Alibaba Advertising


# ASN 45090 ("Shenzhen Tencent Computer Systems Company Limited").
# %Listed, Google Malware Dashboard: 0.78%.
# Stop Forum Spam (SFS) listings: 1,597.
# Updated: 2016.11.25 / Checked: 2019.05.19

2402:4e00::/32 Deny Cloud
Origin: CN
Tag: Shenzhen Tencent


# ASN 24413 ("ShenZhen Sunrise Technology Co.,Ltd").
# %Listed, Google Malware Dashboard: 4.17%.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2018.08.05 / Checked: 2019.08.01

2402:33c0::/32 Deny Cloud
Origin: CN
Tag: ShenZhen Sunrise


# ASN 39572 ("DataWeb Global Group B.V").
# %Listed, Google Malware Dashboard: 0.07%.
# Stop Forum Spam (SFS) listings: 508.
# Updated: 2019.08.13

2a02:b48::/31 Deny Cloud
2a02:b4a::/32 Deny Cloud
2a02:b4b::/48 Deny Cloud
Origin: NL
Tag: DataWeb Global


# ASN 44112 ("SpaceWeb Ltd").
# %Listed, Google Malware Dashboard: 0.16%.
# Stop Forum Spam (SFS) listings: 2.
# Updated: 2016.04.29 / Checked: 2019.09.06

2a02:408:7722::/48 Deny Cloud
Origin: RU
Tag: SpaceWeb Ltd


# ASN 43391 ("Netdirekt A.S").
# %Listed, Google Malware Dashboard: 0.16%.
# Stop Forum Spam (SFS) listings: 58.
# Updated: 2016.04.29 / Checked: 2019.07.04

2a01:aac0::/32 Deny Cloud
Origin: TR
Tag: Netdirekt A.S


# ASN 42730 ("EVANZO e-commerce GmbH").
# %Listed, Google Malware Dashboard: 0.63%.
# Stop Forum Spam (SFS) listings: 171.
# Updated: 2016.04.29 / Checked: 2019.09.15

2a00:6800::/32 Deny Cloud
Origin: DE
Tag: EVANZO GmbH


# ASN 38478 ("SunnyVision Limited").
# %Listed, Google Malware Dashboard: 1.46%.
# Stop Forum Spam (SFS) listings: 136.
# Updated: 2016.05.01 / Checked: 2019.05.19

2400:f100::/47 Deny Cloud
2400:f100:2::/48 Deny Cloud
Origin: HK
Tag: SunnyVision Limited


# ASN 37943 ("ZhengZhou GIANT Computer Network Technology Co., Ltd").
# %Listed, Google Malware Dashboard: 1.82%.
# Stop Forum Spam (SFS) listings: 10.
# Updated: 2016.05.01 / Checked: 2019.09.01

2400:a480::/32 Deny Cloud
Origin: CN
Tag: ZhengZhou GIANT


# ASN 34233 ("Superior B.V").
# %Listed, Google Malware Dashboard: 0.30%.
# Updated: 2016.12.10 / Checked: 2019.04.29

2a00:a0c0::/32 Deny Cloud
2a06:f700::/29 Deny Cloud
Origin: NL
Tag: Superior B.V


# ASN 27715 ("Locaweb Servios de Internet S/A").
# %Listed, Google Malware Dashboard: 0.18%.
# Stop Forum Spam (SFS) listings: 760.
# Updated: 2016.05.01 / Checked: 2019.07.04

2804:218::/32 Deny Cloud
Origin: BR
Tag: Locaweb


# ASN 24446 ("NetRegistry Pty Ltd").
# %Listed, Google Malware Dashboard: 0.28%.
# Updated: 2016.05.01 / Checked: 2019.09.08

2403:1400::/32 Deny Cloud
Origin: AU
Tag: NetRegistry Pty Ltd


# ASN 22552 ("eSited Solutions").
# %Listed, Google Malware Dashboard: 2.67%.
# Stop Forum Spam (SFS) listings: 422.
# Updated: 2017.08.25 / Checked: 2019.05.02

2604:4480::/32 Deny Cloud
Origin: US
Tag: eSited Solutions


# ASN 21155 ("ProServe B.V").
# %Listed, Google Malware Dashboard: 0.07%.
# Updated: 2019.05.22

2001:678:10c::/48 Deny Cloud
2001:67c:2d0::/48 Deny Cloud
2001:67c:2390::/48 Deny Cloud
2001:67c:23c4::/48 Deny Cloud
2001:828::/32 Deny Cloud
2a03:3b00::/32 Deny Cloud
Origin: NL
Tag: ProServe B.V


# ASN 39326 ("HighSpeed Office Limited").
# Stop Forum Spam (SFS) listings: 249.
# Updated: 2019.05.22

2a03:f80:33::/48 Deny Cloud
2a03:f80:441::/48 Deny Cloud
Origin: AT
2001:a08::/32 Deny Cloud
2a01:348::/32 Deny Cloud
2a03:94c0::/40 Deny Cloud
Origin: GB
2a03:f80:44::/48 Deny Cloud
Origin: IM
Tag: HighSpeed Office Ltd


# ASN 47447 ("23Media GmbH").
# %Listed, Google Malware Dashboard: 0.33%.
# Stop Forum Spam (SFS) listings: 2,385.
# Updated: 2019.06.02

2a03:f80:49::/48 Deny Cloud
Origin: AT
2a05:3c80::/29 Deny Cloud
Origin: CZ
2a00:f48::/32 Deny Cloud
2a05:cc00::/29 Deny Cloud
2a06:8781::/48 Deny Cloud
2a09:4ec0::/48 Deny Cloud
2a0c:2040::/29 Deny Cloud
2a0d:6940::/29 Deny Cloud
Origin: DE
2a02:2da0::/32 Deny Cloud
2a07:a347::/32 Deny Cloud
Origin: GB
2a07:3b80:1::/48 Deny Cloud
Origin: GI
2a0c:ef02::/32 Deny Cloud
Origin: NL
2a0a:6c0::/29 Deny Cloud
Origin: US
Tag: 23Media GmbH


# ASN 49544 ("i3d B.V").
# %Listed, Google Malware Dashboard: 0.08%.
# Stop Forum Spam (SFS) listings: 284.
# Updated: 2019.05.07

2403:1480:9000::/36 Deny Cloud
Origin: AU
2a06:7a00::/48 Deny Cloud
Origin: EU
2402:c080::/31 Deny Cloud
Origin: JP
2a00:1630::/29 Deny Cloud
2a00:1708::/32 Deny Cloud
2a00:1d20::/32 Deny Cloud
2a03:3a60::/32 Deny Cloud
2a04:c600::/29 Deny Cloud
2a05:6440::/29 Deny Cloud
2a09:4f80:1::/48 Deny Cloud
2a0a:5980::/29 Deny Cloud
2a0b:1b00::/29 Deny Cloud
2a0b:d9c0:164::/47 Deny Cloud
2a0b:f380::/48 Deny Cloud
2a0b:f380:3e8::/48 Deny Cloud
Origin: NL
2402:b180:9000::/36 Deny Cloud
Origin: SG
Tag: i3d B.V


# ASN 50673 ("Serverius Holding B.V").
# %Listed, Google Malware Dashboard: 0.21%.
# Stop Forum Spam (SFS) listings: 4,222.
# Updated: 2019.08.01

2001:67c:b0::/48 Deny Cloud
2001:7f8:e::/48 Deny Cloud
2a00:1ca8::/32 Deny Cloud
2a00:8ee0::/31 Deny Cloud
2a00:dfa0::/32 Deny Cloud
2a01:74e0::/32 Deny Cloud
2a02:1680::/32 Deny Cloud
2a02:40c0:1000::/48 Deny Cloud
2a03:3f40::/32 Deny Cloud
2a05:e1c0::/29 Deny Cloud
2a06:8000::/29 Deny Cloud
2a09:e40::/32 Deny Cloud
2a09:aa80::/32 Deny Cloud
2a0a:3f40::/32 Deny Cloud
2a0a:6f80::/32 Deny Cloud
2a0a:aa40::/32 Deny Cloud
2a0c:a340::/29 Deny Cloud
2a0c:f200::/29 Deny Cloud
Origin: NL
2a07:c800::/29 Deny Cloud
Origin: UA
Tag: Serverius Holding


# ASN 20857 ("Transip B.V").
# %Listed, Google Malware Dashboard: 0.24%.
# Stop Forum Spam (SFS) listings: 113.
# Updated: 2017.11.12 / Checked: 2019.08.22

2a01:7c8::/32 Deny Cloud
Origin: NL
Tag: Transip B.V


# ASN 207083 ("HostSlim BV").
# Stop Forum Spam (SFS) listings: 546.
# Updated: 2019.03.13 / Checked: 2019.07.18

2a06:a006:f3::/48 Deny Cloud
Origin: IS
2a06:4140::/29 Deny Cloud
2a06:5b80::/32 Deny Cloud
2a06:5b87::/32 Deny Cloud
2a09:3c00:1::/48 Deny Cloud
2a0d:7fc0::/29 Deny Cloud
Origin: NL
Tag: HostSlim BV


# ASN 43350 ("NForce Entertainment B.V").
# Ranges change frequently / Should update often.
# %Listed, Google Malware Dashboard: 0.31%.
# Stop Forum Spam (SFS) listings: 265,456.
# Updated: 2019.05.21

2a04:b040::/47 Deny Cloud
2a04:b040:2::/48 Deny Cloud
2a0b:8400::/47 Deny Cloud
Origin: EE
2a02:2ca0::/32 Deny Cloud
2a07:9942:39d8::/48 Deny Cloud
Origin: EU
2a0d:f802:2f2::/48 Deny Cloud
Origin: GB
2a00:1768::/34 Deny Cloud
2a00:1768:4000::/35 Deny Cloud
2a00:1768:6000::/36 Deny Cloud
2a03:3740::/32 Deny Cloud
2a05:840::/48 Deny Cloud
2a05:f080::/29 Deny Cloud
2a07:bd80::/29 Deny Cloud
2a07:be80::/29 Deny Cloud
2a0d:ea80::/29 Deny Cloud
Origin: NL
2a0e:2281::/32 Deny Cloud
Origin: RU
2a06:e80::/36 Deny Cloud
Origin: SC
Tag: NForce Entertainment


# ASN 55990 ("Huawei Cloud Service data center").
# %Listed, Google Malware Dashboard: 0.86%.
# Stop Forum Spam (SFS) listings: 5.
# Updated: 2018.12.06 / Checked: 2019.09.10

2407:c080::/36 Deny Cloud
2407:c080:1000::/37 Deny Cloud
Origin: CN
Tag: Huawei Cloud Service


# ASN 38001 ("NewMedia Express Pte Ltd. Singapore Web Hosting Service Provider").
# Caught trying to DDoS SFS.
# %Listed, Google Malware Dashboard: 0.31%.
# Stop Forum Spam (SFS) listings: 370.
# Updated: 2019.08.11

2402:2f80:1::/48 Deny Cloud
2402:2f80:8::/48 Deny Cloud
Origin: AU
2401:df40:2::/48 Deny Cloud
Origin: GI
2403:fa40:1::/48 Deny Cloud
Origin: NL
2406:f400::/32 Deny Cloud
2407:2f00:103::/48 Deny Cloud
Origin: SG
Tag: NewMedia Express


# ASN 3842 ("RamNode LLC").
# %Listed, Google Malware Dashboard: 0.24%.
# Stop Forum Spam (SFS) listings: 82.
# Updated: 2017.12.28 / Checked: 2019.05.04

2604:180::/46 Deny Cloud
2604:180:9::/48 Deny Cloud
2604:180:a::/47 Deny Cloud
2604:180:c::/48 Deny Cloud
Origin: US
Tag: RamNode LLC


# ASN 198203 ("RouteLabel V.O.F").
# %Listed, Google Malware Dashboard: 0.88%.
# Stop Forum Spam (SFS) listings: 269.
# Updated: 2018.04.03 / Checked: 2019.06.03

2a00:d880::/32 Deny Cloud
2a02:50e0::/32 Deny Cloud
2a03:afe0::/29 Deny Cloud
Origin: NL
Tag: RouteLabel V.O.F


# ASN 42632 ("MnogoByte LLC").
# %Listed, Google Malware Dashboard: 0.10%.
# Stop Forum Spam (SFS) listings: 17.
# Updated: 2018.08.05 / Checked: 2019.05.28

2001:67c:1688::/48 Deny Cloud
2a02:878:1::/48 Deny Cloud
2a02:878:2::/48 Deny Cloud
2a02:878:a::/48 Deny Cloud
2a02:878:10::/48 Deny Cloud
2a02:878:a801::/48 Deny Cloud
2a02:878:a80e::/48 Deny Cloud
Origin: RU
Tag: MnogoByte LLC


# ASN 29014 ("ScaleUp Technologies GmbH & Co. KG").
# %Listed, Google Malware Dashboard: 0.38%.
# Updated: 2019.07.13

2a00:12e8::/32 Deny Cloud
2a00:1c38::/47 Deny Cloud
2a00:1c39::/32 Deny Cloud
2a0b:2a40::/29 Deny Cloud
2a0b:f080::/32 Deny Cloud
2a0e:7b80::/32 Deny Cloud
Origin: DE
Tag: ScaleUp Technologies


# ASN 13213 ("UK-2 Limited").
# %Listed, Google Malware Dashboard: 0.10%.
# Stop Forum Spam (SFS) listings: 2,917.
# Updated: 2018.01.08 / Checked: 2019.07.21

2a02:2498::/32 Deny Cloud
Origin: GB
2a04:76c7:200::/48 Deny Cloud
Origin: NL
2602:ff84::/48 Deny Cloud
2605:a80:1::/48 Deny Cloud
2a01:5a80::/32 Deny Cloud
Origin: US
Tag: UK-2 Limited


# ASN 25525 ("Reasonnet IP Networks B.V").
# %Listed, Google Malware Dashboard: 0.29%.
# Updated: 2016.05.30 / Checked: 2019.05.04

2001:67c:2b44::/48 Deny Cloud
2001:16f8::/32 Deny Cloud
2001:4198::/32 Deny Cloud
Origin: NL
Tag: Reasonnet IP


# ASN 25820 ("IT7 Networks Inc").
# %Listed, Google Malware Dashboard: 0.77%.
# Stop Forum Spam (SFS) listings: 593.
# Updated: 2019.06.01

2607:8700:101::/48 Deny Cloud
2607:8700:102::/48 Deny Cloud
2607:8700:105::/48 Deny Cloud
2607:8700:106::/48 Deny Cloud
2607:8700:108::/47 Deny Cloud
2607:8700:110::/46 Deny Cloud
2607:8700:114::/48 Deny Cloud
Origin: CA
Tag: IT7 Networks Inc


# ASN 27843 ("OPTICAL TECHNOLOGIES S.A.C").
# Stop Forum Spam (SFS) listings: 63.
# Updated: 2017.12.24 / Checked: 2019.05.04

2800:120::/32 Deny Cloud
2803:1b40::/32 Deny Cloud
2803:3140::/32 Deny Cloud
2803:4220::/32 Deny Cloud
2803:8220::/32 Deny Cloud
2803:8e20::/32 Deny Cloud
Origin: PE
Tag: OPTICAL TECHNOLOGIES


# ASNs 29302, 32780 ("Hosting Services Inc").
# %Listed, Google Malware Dashboard: 0.04% (AS32780).
# Stop Forum Spam (SFS) listings: 96 (AS29302), 6,120 (AS32780).
# Updated: 2017.09.22 / Checked: 2019.08.13

2607:5880::/48 Deny Cloud
Origin: CA
2400:bb40:1100::/40 Deny Cloud
Origin: PA
2606:2e00:8000::/48 Deny Cloud
2606:2e00:8002::/47 Deny Cloud
Origin: US
Tag: Hosting Services Inc


# ASNs 48337, 63949 ("Linode, LLC").
# Stop Forum Spam (SFS) listings: 4,701 (AS63949).
# Updated: 2019.04.21 / Checked: 2019.09.08

2a01:7e00::/31 Deny Cloud
Origin: GB
2400:8901::/32 Deny Cloud
Origin: SG
2400:8902::/31 Deny Cloud
2400:8904::/31 Deny Cloud
2400:8906::/32 Deny Cloud
2600:3c00::/30 Deny Cloud
2600:3c04::/32 Deny Cloud
Origin: US
Tag: Linode, LLC


# ASN 22653 ("Cyber Wurx LLC").
# %Listed, Google Malware Dashboard: 0.15%.
# Stop Forum Spam (SFS) listings: 251.
# Updated: 2018.02.04 / Checked: 2019.05.19

2607:1a00::/32 Deny Cloud
2a0c:8600::/29 Deny Cloud
Origin: US
Tag: Cyber Wurx LLC


# ASN 60117 ("Host Sailor Ltd").
# %Listed, Google Malware Dashboard: 0.55%.
# Stop Forum Spam (SFS) listings: 198.
# Updated: 2019.08.11

2a04:dd00::/31 Deny Cloud
Origin: AE
2a03:660::/32 Deny Cloud
2a05:9340::/31 Deny Cloud
2a06:3d80::/29 Deny Cloud
Origin: NL
Tag: Host Sailor Ltd


# ASNs 61317, 61440 ("Digital Energy Technologies").
# Ranges change frequently / Should update often.
# %Listed, Google Malware Dashboard: 0.06% (AS61317), 0.23% (AS61440).
# Stop Forum Spam (SFS) listings: 23,061 (AS61317), 5,040 (AS61440).
# Updated: 2019.05.22

2803:80::/36 Deny Cloud
2803:80:1004::/48 Deny Cloud
2803:80:2000::/35 Deny Cloud
2803:80:4000::/34 Deny Cloud
2803:80:8000::/46 Deny Cloud
Origin: CL
2a00:d1a0::/48 Deny Cloud
2a03:a960::/32 Deny Cloud
2a03:fbc0::/29 Deny Cloud
2a06:2b80::/29 Deny Cloud
2a0a:7a05::/32 Deny Cloud
2a0a:7e05::/32 Deny Cloud
2a0a:8606::/31 Deny Cloud
2a0a:9e00::/29 Deny Cloud
2a0a:a600::/48 Deny Cloud
2a0a:ae00::/29 Deny Cloud
2a0c:fa40::/29 Deny Cloud
2a0d:5c0::/29 Deny Cloud
2a0d:4b40::/29 Deny Cloud
2a0d:4c40::/29 Deny Cloud
Origin: DE
2a09:4b40::/29 Deny Cloud
Origin: GB
2a0e:1c04::/48 Deny Cloud
Origin: LT
2602:ff62::/39 Deny Cloud
2602:ff62:200::/40 Deny Cloud
2602:ff62:ffc::/48 Deny Cloud
2602:ff62:fff::/48 Deny Cloud
Origin: US
2c0f:ee78::/32 Deny Cloud
2c0f:f738:2000::/35 Deny Cloud
Origin: ZA
Tag: D.E.Tech


# ASN 29873 ("The Endurance International Group, Inc").
# %Listed, Google Malware Dashboard: 0.19%.
# Updated: 2016.06.17 / Checked: 2019.05.19

2605:f300:ffff::/48 Deny Cloud
Origin: US
Tag: Endurance Int


# ASN 17819 ("Equinix Asia Pacific").
# Include "Upright Inc", "Equinix", and everything in HK. Ignore the rest.
# ^(HK\t.*|.*Upright.*|.*Equinix.*)\x01$
# Stop Forum Spam (SFS) listings: 29.
# Updated: 2019.04.23 / Checked: 2019.09.10

2404:4f00::/32 Deny Cloud
Origin: AU
2404:6900::/32 Deny Cloud
Origin: HK
2407:b000::/32 Deny Cloud
Origin: JP
Tag: Equinix Asia Pacific


# ASN 16397 ("EQUINIX BRASIL SP").
# Exclude any RoA invalid entries; Include the rest.
# %Listed, Google Malware Dashboard: 0.30%.
# Stop Forum Spam (SFS) listings: 298.
# Updated: 2019.05.02 / Checked: 2019.09.15

2001:12e8::/34 Deny Cloud
Origin: BR
2001:504:0:7::/64 Deny Cloud
Origin: US
Tag: EQUINIX BRASIL SP


# ASN 6364 ("Atlantic.net, Inc").
# %Listed, Google Malware Dashboard: 0.14%.
# Stop Forum Spam (SFS) listings: 20.
# Updated: 2016.07.02 / Checked: 2019.08.22

2607:f170::/32 Deny Cloud
Origin: US
Tag: Atlantic.net, Inc


# ASN 43333 ("NEPHAX Spolka jawna Arkadiusz Kawalec Michal Podsiadly").
# %Listed, Google Malware Dashboard: 0.11%.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2016.07.10 / Checked: 2019.05.19

2a02:ee0::/32 Deny Cloud
Origin: PL
Tag: NEPHAX


# ASN 52284 ("Panamaserver.com").
# Stop Forum Spam (SFS) listings: 16.
# Updated: 2016.07.10 / Checked: 2019.05.17

2803:200::/32 Deny Cloud
Origin: PA
Tag: Panamaserver.com


# ASN 19624 ("Data Room, Inc").
# Stop Forum Spam (SFS) listings: 1,226.
# Updated: 2019.09.10

2a01:4ce0:61::/48 Deny Cloud
2a01:4ce0:161::/48 Deny Cloud
Origin: RO
2607:f710:35::/48 Deny Cloud
2607:f710:47::/48 Deny Cloud
2607:f710:60::/48 Deny Cloud
2607:f710:85::/48 Deny Cloud
Origin: US
Tag: Data Room, Inc


# ASN 7151 ("vXchnge Operating, LLC").
# Updated: 2016.07.20 / Checked: 2019.05.27

2607:fce0::/32 Deny Cloud
Origin: US
Tag: vXchnge


# ASN 30870 ("Trans-IX B.V").
# %Listed, Google Malware Dashboard: 0.12%.
# Updated: 2019.05.13

2001:16f8:15::/48 Deny Cloud
2001:16f8:666::/48 Deny Cloud
2a01:4d60::/32 Deny Cloud
2a06:4a80::/29 Deny Cloud
Origin: NL
Tag: Trans-IX B.V


# ASN 31103 ("Keyweb AG").
# %Listed, Google Malware Dashboard: 0.09%.
# Stop Forum Spam (SFS) listings: 10,585.
# Updated: 2018.05.05 / Checked: 2019.08.05

2001:1b60::/29 Deny Cloud
Origin: DE
2a0c:eb80::/29 Deny Cloud
Origin: RU
Tag: Keyweb AG


# ASN 10929 ("Netelligent Hosting Services Inc").
# %Listed, Google Malware Dashboard: 0.05%.
# Stop Forum Spam (SFS) listings: 3.
# Updated: 2016.08.19 / Checked: 2019.05.10

2605:6f00:9000::/36 Deny Cloud
2605:9000::/32 Deny Cloud
Origin: CA
Tag: Netelligent Hosting


# ASN 9925 ("Powerbase DataCenter Services (HK) Ltd").
# (Slowly improving, but still has a few residual reports at MegaRBL).
# Updated: 2016.08.19 / Checked: 2019.09.15

2401:9f00::/32 Deny Cloud
Origin: HK
Tag: Powerbase DataCenter


# ASNs 135511, 136565, 136566 ("CyberWorld Data Center").
# Updated: 2019.05.10

2405:2500:5::/48 Deny Cloud
2405:2500:11::/48 Deny Cloud
2405:2500:25::/48 Deny Cloud
2405:2500:26::/48 Deny Cloud
2405:2500:65::/48 Deny Cloud
Origin: TH
Tag: CyberWorld


# ASN 12637 ("Seeweb S.r.l").
# (Can omit anything under 44../8; clean).
# %Listed, Google Malware Dashboard: 0.10% (AS12637).
# Stop Forum Spam (SFS) listings: 33 (AS12637).
# Updated: 2019.05.28

2a0b:fd40::/29 Deny Cloud
Origin: CH
2a05:b6c0::/31 Deny Cloud
2a09:dd80::/31 Deny Cloud
2a09:dd82::/32 Deny Cloud
2a0b:ee40::/32 Deny Cloud
Origin: HR
2001:4b78::/29 Deny Cloud
2a04:2700::/29 Deny Cloud
2a05:be80::/29 Deny Cloud
2a07:50c0::/29 Deny Cloud
2a0d:b000::/29 Deny Cloud
Origin: IT
2a02:e9::/32 Deny Cloud
2a02:ea::/31 Deny Cloud
Origin: SI
Tag: Seeweb S.r.l


# ASN 50837 ("Cloud Sigma").
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2019.01.29 / Checked: 2019.05.27

2a01:9980:1::/48 Deny Cloud
2a01:9980:2::/47 Deny Cloud
2a01:9980:a::/47 Deny Cloud
2a01:9980:c::/48 Deny Cloud
Origin: CH
Tag: Cloud Sigma


# ASN 30217 ("Desync Networks").
# No recent reports or bad activity detected. Possible candidate for future removal.
# Updated: 2019.08.29

2607:f178::/48 Deny Cloud
2607:f178:4::/47 Deny Cloud
2607:f178:10::/48 Deny Cloud
Origin: US
Tag: Desync Networks


# ASN 3064 ("Affinity Internet, Inc").
# %Listed, Google Malware Dashboard: 0.30%.
# Stop Forum Spam (SFS) listings: 48.
# Updated: 2017.10.23 / Checked: 2019.05.06

2407:2080::/32 Deny Cloud
Origin: AU
2602:ff82::/48 Deny Cloud
2606:7e00:ff00::/40 Deny Cloud
Origin: US
Tag: Affinity Internet, Inc


# ASNs 52048, 60567, 202920, 203557 ("DataClub S.A").
# Updated: 2019.05.22

2a02:4840::/47 Deny Cloud
2a02:4840:2::/48 Deny Cloud
2a02:4840:200::/47 Deny Cloud
2a02:4840:1000::/48 Deny Cloud
Origin: LV
Tag: DataClub S.A


# ASN 30962 ("comtrance GmbH").
# %Listed, Google Malware Dashboard: 0.17%.
# Stop Forum Spam (SFS) listings: 5.
# Updated: 2019.06.30

2001:678:94c::/48 Deny Cloud
2001:67c:208::/48 Deny Cloud
2a00:f70::/32 Deny Cloud
Origin: DE
Tag: comtrance GmbH


# ASN 6724 ("Strato AG").
# %Listed, Google Malware Dashboard: 0.13%.
# Stop Forum Spam (SFS) listings: 180.
# Updated: 2016.09.10 / Checked: 2019.04.18

2a01:238::/32 Deny Cloud
Origin: DE
Tag: Strato AG


# ASN 8001 ("Net Access Corporation").
# %Listed, Google Malware Dashboard: 0.27%.
# Stop Forum Spam (SFS) listings: 27.
# Updated: 2016.09.10 / Checked: 2019.09.05

2001:518::/32 Deny Cloud
2620:4d:4002::/48 Deny Cloud
Origin: US
Tag: Net Access Corp


# ASN 19318 ("Interserver, Inc").
# %Listed, Google Malware Dashboard: 0.29%.
# Stop Forum Spam (SFS) listings: 1,189.
# Updated: 2018.06.09 / Checked: 2019.04.11

2604:a00::/32 Deny Cloud
Origin: US
Tag: Interserver, Inc


# ASNs 59349, 131392, 135161 ("GMO-Z.com USA, INC").
# Updated: 2019.08.29

2001:df6:b800::/48 Deny Cloud
2404:8680:1000::/36 Deny Cloud
Origin: SG
2404:f080::/32 Deny Cloud
Origin: VN
Tag: GMO-Z.com USA, INC


# ASN 201628 ("Internet Unie Services B.V").
# No recent reports or bad activity detected. Possible candidate for future removal.
# Updated: 2016.09.12 / Checked: 2019.08.29

2a00:1ac0:f1be::/48 Deny Cloud
Origin: NL
Tag: iu.nl


# ASN 49282 ("Ficolo Oy").
# Stop Forum Spam (SFS) listings: 52.
# Updated: 2016.11.02 / Checked: 2019.09.06

2a03:e580::/29 Deny Cloud
Origin: FI
Tag: Ficolo Oy


# ASN 31400 ("Accelerated IT Services GmbH").
# %Listed, Google Malware Dashboard: 0.45%.
# Stop Forum Spam (SFS) listings: 1,912.
# Updated: 2019.09.15

2001:1608::/32 Deny Cloud
2001:1638::/32 Deny Cloud
2a00:5080::/32 Deny Cloud
2a01:4d0::/32 Deny Cloud
2a01:7e0:aa00::/40 Deny Cloud
2a03:567::/32 Deny Cloud
2a03:2902::/32 Deny Cloud
2a05:ff01::/32 Deny Cloud
2a09:7900::/29 Deny Cloud
2a0a:51c0::/29 Deny Cloud
2a0d:c400::/29 Deny Cloud
Origin: DE
2a03:ebc0:1000::/36 Deny Cloud
2a03:ebc0:5000::/36 Deny Cloud
Origin: GB
2a0d:4f00::/29 Deny Cloud
Origin: RU
Tag: Accelerated IT


# ASN 20278 ("Nexeon Technologies, Inc").
# %Listed, Google Malware Dashboard: 0.32%.
# Stop Forum Spam (SFS) listings: 2,156.
# Updated: 2019.08.01

2a0d:f802::/32 Deny Cloud
2a0d:f803:8f00::/40 Deny Cloud
Origin: GB
2401:f500:4::/48 Deny Cloud
Origin: NZ
2a07:eb00::/29 Deny Cloud
2a0d:e9c0::/29 Deny Cloud
Origin: RU
2602:ffc8::/32 Deny Cloud
Origin: US
Tag: Nexeon Technologies


# ASN 48096 ("OOO IT-Grad").
# Stop Forum Spam (SFS) listings: 46.
# Updated: 2019.09.15

2a04:c900:1000::/36 Deny Cloud
2a04:c900:3000::/36 Deny Cloud
2a06:b800:1000::/36 Deny Cloud
Origin: RU
Tag: OOO IT-Grad


# ASN 55933 ("Cloudie Limited").
# %Listed, Google Malware Dashboard: 2.46%.
# Stop Forum Spam (SFS) listings: 441.
# Updated: 2019.05.21

2403:3a40::/32 Deny Cloud
2403:3b40::/32 Deny Cloud
2403:3bc0::/32 Deny Cloud
2404:3bc0::/32 Deny Cloud
2404:3c40::/32 Deny Cloud
Origin: CN
2a0c:f480::/29 Deny Cloud
Origin: CZ
2a0d:2480::/29 Deny Cloud
Origin: DE
2404:b8c0::/32 Deny Cloud
Origin: JP
Tag: Cloudie Limited


# ASNs 31727, 62401 ("Node4 Limited").
# %Listed, Google Malware Dashboard: 0.13% (AS31727).
# Stop Forum Spam (SFS) listings: 270 (AS31727).
# Updated: 2016.11.18 / Checked: 2019.05.06

2a00:5600::/32 Deny Cloud
2a00:f9c0::/32 Deny Cloud
2a07:7800::/29 Deny Cloud
Origin: GB
Tag: Node4 Limited


# ASN 200557 ("REGION40 LLC").
# Stop Forum Spam (SFS) listings: 92,453.
# Updated: 2018.12.15 / Checked: 2019.05.06

2a01:81a0::/48 Deny Cloud
2a02:d0c2:2::/48 Deny Cloud
2a02:ec41::/48 Deny Cloud
2a03:5a00:3c::/48 Deny Cloud
2a04:8680::/48 Deny Cloud
Origin: RU
2a04:bc40:fffc::/48 Deny Cloud
2a05:2e40::/48 Deny Cloud
2a05:d780::/48 Deny Cloud
Origin: UA
Tag: REGION40 LLC


# ASN 29757 ("Webline Services Inc").
# %Listed, Google Malware Dashboard: 1.46%.
# Stop Forum Spam (SFS) listings: 5.
# Updated: 2018.12.15 / Checked: 2019.05.06

2604:d680::/32 Deny Cloud
Origin: US
Tag: Webline Services Inc


# ASN 34549 ("meerfarbig GmbH & Co. KG").
# Stop Forum Spam (SFS) listings: 7.
# Updated: 2019.09.15

2a06:5000::/29 Deny Cloud
2a06:8100::/29 Deny Cloud
2a07:7340::/29 Deny Cloud
Origin: BG
2a06:1287:3000::/44 Deny Cloud
Origin: BY
2a0c:9a40:1::/48 Deny Cloud
Origin: CH
2a00:f820::/29 Deny Cloud
2a01:360::/29 Deny Cloud
2a06:5700::/29 Deny Cloud
2a06:6580::/29 Deny Cloud
2a07:6fc0::/29 Deny Cloud
2a07:7e00::/29 Deny Cloud
Origin: DE
2a06:5740::/29 Deny Cloud
Origin: GE
2a0e:5bc0::/29 Deny Cloud
2a0e:a800::/31 Deny Cloud
Origin: IE
2a06:f500::/29 Deny Cloud
Origin: IN
2a0b:b740::/32 Deny Cloud
Origin: RO
2a01:7120:f::/48 Deny Cloud
2a07:8740::/29 Deny Cloud
Origin: UA
Tag: meerfarbig


# ASN 29066 ("velia.net Internetdienste GmbH").
# Note when updating: Also contains "proxy" signatures.
# %Listed, Google Malware Dashboard: 0.22%.
# Stop Forum Spam (SFS) listings: 53,099.
# Updated: 2019.04.11 / Checked: 2019.08.22

2a01:7a0::/29 Deny Cloud
Origin: DE
2406:f380::/32 Deny Cloud
Origin: HK
2a0b:c2c0::/29 Deny Cloud
Origin: NL
2402:5780::/32 Deny Cloud
Origin: SG
2604:bc80::/32 Deny Cloud
2606:e180::/32 Deny Cloud
Origin: US
Tag: velia.net


# ASNs 38719, 135132 ("Dreamscape Networks Pty Ltd").
# %Listed, Google Malware Dashboard: 0.28% (AS38719).
# Stop Forum Spam (SFS) listings: 238 (AS38719).
# Updated: 2019.04.18 / Checked: 2019.09.05

2402:af00::/32 Deny Cloud
2402:cb40::/32 Deny Cloud
2404:8280::/32 Deny Cloud
2405:3f00::/31 Deny Cloud
2407:4c00::/32 Deny Cloud
Origin: AU
2a00:fd80::/32 Deny Cloud
Origin: GB
2405:df80::/32 Deny Cloud
Origin: PH
2a04:8b40::/29 Deny Cloud
Origin: RU
2400:8240::/32 Deny Cloud
Origin: SG
Tag: Dreamscape Networks


# ASN 22458 ("NetSource Communications, Inc").
# %Listed, Google Malware Dashboard: 0.35%.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2018.10.03 / Checked: 2019.09.15

2604:f80::/32 Deny Cloud
2a0b:1900::/44 Deny Cloud
Origin: US
Tag: NetSource


# ASN 197226 ('"SPRINT" S.A.').
# Ranges change frequently / Should update often.
# %Listed, Google Malware Dashboard: 0.14%.
# Stop Forum Spam (SFS) listings: 27,887.
# Updated: 2019.01.06 / Checked: 2019.05.21

2a0d:c740:3a::/48 Deny Cloud
2a0d:c740:3c::/48 Deny Cloud
Origin: NL
2a03:7940::/32 Deny Cloud
2a0c:5840::/32 Deny Cloud
Origin: PL
Tag: SPRINT


# ASN 55286 ("B2 Net Solutions Inc").
# Mark "Packet Flip", and other CIDRs identifying as proxies (e.g., Proxy6), as proxies.
# %Listed, Google Malware Dashboard: 0.02%.
# Stop Forum Spam (SFS) listings: 73,142.
# Updated: 2017.12.18 / Checked: 2019.05.20

2607:4300::/48 Deny Cloud
Origin: CA
Tag: B2 Net Solutions


# ASNs 24669, 34202, 35545, 42902, 62240, 202791, 202792, 206136, 206144 ("CloudSRV Limited" and "Clouvider Limited").
# Updated: 2019.03.01 / Checked: 2019.07.04

2a02:e00:ffe9::/48 Deny Cloud
Origin: DE
2a06:8ec0::/48 Deny Cloud
Origin: EU
2a04:6400::/29 Deny Cloud
2a04:92c0::/29 Deny Cloud
2a05:dfc7:6::/48 Deny Cloud
2a06:bdc0::/29 Deny Cloud
2a07:7ec2::/31 Deny Cloud
2a0a:54c0::/29 Deny Cloud
2a0b:b82::/64 Deny Cloud
2a0b:b86::/34 Deny Cloud
2a0b:1c00:1919::/48 Deny Cloud
2a0d:5080::/29 Deny Cloud
Origin: GB
2a07:3b80:2::/48 Deny Cloud
Origin: GI
2405:3580::/32 Deny Cloud
Origin: IN
2a06:a006:c2::/48 Deny Cloud
Origin: IS
2a0c:ef01::/32 Deny Cloud
Origin: NL
2404:b980::/35 Deny Cloud
Origin: SG
Tag: CloudSRV Limited


# ASN 61337 ("Electronic Communities Ltd").
# (Can omit anything under 44../8; clean).
# Updated: 2017.02.18 / Checked: 2019.05.04

2001:67c:504::/48 Deny Cloud
2001:67c:72c::/48 Deny Cloud
Origin: GB
Tag: ECOM-AS


# ASN 42831 ("UK Dedicated Servers Limited").
# %Listed, Google Malware Dashboard: 0.13%.
# Stop Forum Spam (SFS) listings: 3,952.
# Updated: 2018.07.28 / Checked: 2019.07.06

2a0a:4e83::/48 Deny Cloud
Origin: DE
2a01:a500::/32 Deny Cloud
2a03:9da0::/40 Deny Cloud
2a04:d180::/29 Deny Cloud
Origin: GB
2605:7900:1000::/48 Deny Cloud
Origin: US
Tag: UK Dedicated Servers


# ASN 44812 ("IT Expert LLC").
# Stop Forum Spam (SFS) listings: 364.
# Updated: 2018.08.13 / Checked: 2019.06.02

2a07:ac80::/29 Deny Cloud
2a0b:2d84::/32 Deny Cloud
Origin: RU
Tag: IT Expert LLC


# ASN 24806 ("INTERNET CZ, a.s").
# %Listed, Google Malware Dashboard: 0.05%.
# Stop Forum Spam (SFS) listings: 435.
# Updated: 2017.01.23 / Checked: 2019.09.15

2001:15e8::/32 Deny Cloud
Origin: CZ
Tag: INTERNET CZ, a.s


# ASN 202023 ("LLHost Inc").
# Updated: 2019.02.09 / Checked: 2019.06.10

2a04:bc40:1dc1::/48 Deny Cloud
2a04:bc40:1dc2::/47 Deny Cloud
2a04:bc40:1dc4::/46 Deny Cloud
2a04:bc40:2dc1::/48 Deny Cloud
2a04:bc40:2dc2::/47 Deny Cloud
Origin: UA
Tag: LLHost Inc


# ASN 51859 ("Mainstream doo").
# Updated: 2019.05.02 / Checked: 2019.09.15

2a04:2e40::/29 Deny Cloud
Origin: RS
Tag: Mainstream doo


# ASN 37692 ("NetStack Ltd").
# Stop Forum Spam (SFS) listings: 108.
# Updated: 2019.06.02

2c0f:ee78:8000::/48 Deny Cloud
2c0f:f738:2201::/48 Deny Cloud
2c0f:f738:3802::/48 Deny Cloud
Origin: ZA
Tag: NetStack Ltd


# ASNs 3595, 13354, 14313, 16626, 27325, 32952 ("zColo").
# Updated: 2019.04.21 / Checked: 2019.09.08

2604:9100:1001::/48 Deny Cloud
2606:4300:1::/48 Deny Cloud
2606:ef80:6::/48 Deny Cloud
2606:fe80:10::/44 Deny Cloud
2607:1400::/48 Deny Cloud
2607:f348::/32 Deny Cloud
2610:160::/32 Deny Cloud
Origin: US
Tag: zColo


# ASN 61138 ("Zappie Host LLC").
# Stop Forum Spam (SFS) listings: 64.
# Updated: 2019.08.18

2a07:1c40:1021::/48 Deny Cloud
Origin: AT
2a0c:b642:1a0e::/48 Deny Cloud
Origin: BE
2a06:1280::/32 Deny Cloud
Origin: BY
2a06:e881:6203::/48 Deny Cloud
Origin: CH
2a06:9f40::/29 Deny Cloud
Origin: NO
2c0f:f530::/44 Deny Cloud
2c0f:f530:20::/44 Deny Cloud
Origin: SC
Tag: Zappie Host LLC


# ASN 58923 ("InterCloud ltd").
# Stop Forum Spam (SFS) listings: 123.
# Updated: 2018.11.19 / Checked: 2019.04.19

2406:f100::/32 Deny Cloud
Origin: BD
Tag: InterCloud ltd


# ASN 197540 ("netcup GmbH").
# %Listed, Google Malware Dashboard: 0.17%.
# Stop Forum Spam (SFS) listings: 5,155.
# Updated: 2017.02.15 / Checked: 2019.07.21

2a04:b500::/32 Deny Cloud
Origin: CH
2a03:4000::/31 Deny Cloud
Origin: DE
Tag: netcup GmbH


# ASNs 19531, 43755 ("Nodes Direct").
# %Listed, Google Malware Dashboard: 0.88% (AS19531).
# Stop Forum Spam (SFS) listings: 307 (AS19531).
# Updated: 2018.09.14 / Checked: 2019.07.21

2604:4600::/28 Deny Cloud
Origin: US
Tag: Nodes Direct


# ASN 23352 ("Server Central Network").
# %Listed, Google Malware Dashboard: 0.27%.
# Stop Forum Spam (SFS) listings: 3.
# Updated: 2018.04.14 / Checked: 2019.07.13

2001:1838::/32 Deny Cloud
Origin: US
Tag: Server Central Network


# ASNs 30496, 36024 ("TierPoint, LLC" / "Colo4, LLC").
# %Listed, Google Malware Dashboard: 0.34% (AS30496), 0.43% (AS36024).
# Updated: 2017.08.31 / Checked: 2019.05.04

2605:7700::/47 Deny Cloud
2606:4300::/48 Deny Cloud
2607:f198::/32 Deny Cloud
2607:fdb8::/32 Deny Cloud
Origin: US
Tag: Colo4, LLC


# ASNs 15626, 21100, 50979, 59729 ("ITL Company").
# Significant source of forum/blog spam.
# FRIENDHOSTING L.P., ON-LINE DATA LTD, various data centers, etc.
# Also contains VPNs (VDS/VPS; should mark these accordingly).
# Updated: 2019.08.01

2001:67c:2f4c::/48 Deny Cloud
2001:67c:2f5c::/48 Deny Cloud
2001:67c:2f6c::/48 Deny Cloud
2a0a:8c40::/32 Deny Cloud
Origin: BG
2a02:27a8::/30 Deny Cloud
2a02:27ac::/32 Deny Proxy
2a0e:40c0:1::/48 Deny Cloud
2a0e:40c0:2::/48 Deny Cloud
Origin: UA
Tag: ITL Company


# ASN 395111 ("KVCHOSTING.COM LLC").
# %Listed, Google Malware Dashboard: 0.18%.
# Stop Forum Spam (SFS) listings: 1,816.
# Updated: 2017.03.11 / Checked: 2019.07.21

2602:ff3c::/36 Deny Cloud
Origin: US
Tag: KVCHOSTING.COM LLC


# ASN 49453 ("Global Layer B.V").
# %Listed, Google Malware Dashboard: 0.04%.
# Stop Forum Spam (SFS) listings: 15,597.
# Updated: 2019.08.01

2a00:1678::/48 Deny Cloud
2a00:1678:2221::/48 Deny Cloud
2a00:1678:2426::/48 Deny Cloud
2a00:1678:2437::/48 Deny Cloud
2a00:1678:2441::/48 Deny Cloud
2a00:1678:2470::/48 Deny Cloud
2a00:1678:2525::/48 Deny Cloud
2a00:1678:2641::/48 Deny Cloud
2a00:1678:2642::/47 Deny Cloud
2a00:1678:2644::/46 Deny Cloud
2a00:1678:2648::/47 Deny Cloud
2a00:1678:2650::/48 Deny Cloud
2a00:1678:7777::/48 Deny Cloud
2a00:1678:b055::/48 Deny Cloud
2a00:1678:b33f::/48 Deny Cloud
2a00:1678:da7a::/48 Deny Cloud
2a00:1678:dea1::/48 Deny Cloud
2a00:1678:effe::/48 Deny Cloud
Origin: NL
Tag: Global Layer B.V


# ASN 50113, 200740, 204154, 205125 ("MediaServicePlus LLC").
# %Listed, Google Malware Dashboard: 0.21% (AS50113).
# Stop Forum Spam (SFS) listings: 2,456 (AS50113), 21 (AS200740).
# Updated: 2019.09.05

2a0d:8340::/32 Deny Cloud
Origin: CZ
2a03:e2c0::/32 Deny Cloud
2a04:5200::/32 Deny Cloud
2a04:5201:1::/48 Deny Cloud
2a04:5201:2::/48 Deny Cloud
2a04:5202::/31 Deny Cloud
2a04:5204::/30 Deny Cloud
2a07:57c0::/32 Deny Cloud
2a07:9b83::/32 Deny Cloud
2a0a:981::/32 Deny Cloud
2a0a:f080::/29 Deny Cloud
Origin: RU
Tag: MediaServicePlus LLC


# ASN 200161 ('"DATAPRO" Limited Liability Company').
# Updated: 2018.02.25 / Checked: 2019.08.29

2a00:a960::/32 Deny Cloud
Origin: RU
Tag: DATAPRO


# ASN 12025 ("IO Capital Princess, LLC").
# When updating, mark "ExpressVPN" as "proxy". Everything else as cloud.
# Exclude (clean; don't need to list them): ^.*(Infinity|St Joseph|Brisbane Public|Decision North|Scholer LLP).*$\n
# %Listed, Google Malware Dashboard: 0.10%.
# Stop Forum Spam (SFS) listings: 7.
# Updated: 2019.04.23 / Checked: 2019.09.10

2a05:9800:ff00::/40 Deny Cloud
Origin: GB
2607:a500:4::/48 Deny Cloud
2607:a500:8::/48 Deny Cloud
2607:a500:c::/48 Deny Cloud
2607:a500:d000::/36 Deny Cloud
2607:a500:e000::/35 Deny Cloud
Origin: US
Tag: IO Capital Princess


# ASN 51765 ("Oy Creanova Hosting Solutions Ltd").
# Stop Forum Spam (SFS) listings: 8,877.
# Updated: 2019.09.15

2a0c:f040::/48 Deny Cloud
Origin: FI
Tag: Oy Creanova Hosting


# ASN 49505 ("Selectel Ltd").
# %Listed, Google Malware Dashboard: 0.09%.
# Stop Forum Spam (SFS) listings: 2,511.
# Updated: 2017.05.12 / Checked: 2019.07.06

2a00:ab00::/32 Deny Cloud
Origin: RU
Tag: Selectel Ltd


# ASN 60592 ("Gransy s.r.o.").
# %Listed, Google Malware Dashboard: 0.13%.
# Stop Forum Spam (SFS) listings: 2.
# Updated: 2019.05.02 / Checked: 2019.09.15

2a00:a160::/32 Deny Cloud
2a00:fea0::/32 Deny Cloud
2a03:6920::/32 Deny Cloud
Origin: CZ
Tag: Gransy s.r.o.


# ASN 35236 ("2 connect a.s.").
# %Listed, Google Malware Dashboard: 0.35%.
# Updated: 2019.09.15

2a00:1238::/32 Deny Cloud
2a09:500::/32 Deny Cloud
2a0b:640::/30 Deny Cloud
2a0e:25c0::/29 Deny Cloud
Origin: CZ
Tag: 2 connect a.s.


# ASNs 42570, 200584, 201365, 207161 ("Nagravision SA", A.K.A. "Kudelski Group").
# Caught hitting protected honeypot pages for unknown purposes. No problems otherwise. Provides digital cable and
# satellite television; Not expected to carry standard HTTP traffic from human endpoints normally. May remove if
# problems emerge, but adding them here for now as a precaution. Not currently listed on other known blacklists.
# Updated: 2018.09.09 / Checked: 2019.09.08

2a04:5c80::/32 Deny Generic
2a04:5c85::/35 Deny Generic
2a04:5c85:4000::/36 Deny Generic
2a04:5c87::/32 Deny Generic
Origin: CH
Tag: Nagravision SA


# ASN 63956 ("Colocation Australia Pty Ltd").
# %Listed, Google Malware Dashboard: 2.98%.
# Stop Forum Spam (SFS) listings: 90.
# Updated: 2019.07.10

2402:1b80::/32 Deny Cloud
2402:2f80:4::/48 Deny Cloud
2406:180:8000::/40 Deny Cloud
Origin: AU
2403:4f00:6000::/36 Deny Cloud
Origin: NZ
2402:1b80:3000::/40 Deny Cloud
Origin: SG
2402:1b80:1000::/36 Deny Cloud
Origin: US
Tag: Colocation Australia


# ASN 6295 ("Green House Data, Inc").
# Updated: 2018.08.13 / Checked: 2019.06.10

2607:8200:c000::/35 Deny Cloud
2607:8200:e000::/36 Deny Cloud
Origin: US
Tag: Green House Data


# ASN 20021 ("HostMySite").
# 100% hosting provider (generally considered safe to block), but may interfere with uptime monitoring service
# "InternetSeer.com". Users of this service should probably set an "ignore" rule for this signature section. I won't be
# mainlining a bypass for them though due to abuse reports from some users.
# %Listed, Google Malware Dashboard: 0.10%.
# Stop Forum Spam (SFS) listings: 3.
# Updated: 2018.08.05 / Checked: 2019.08.18

2600:1300::/32 Deny Cloud
2600:1304::/32 Deny Cloud
2600:1308::/32 Deny Cloud
2600:130c::/32 Deny Cloud
Origin: US
Tag: HostMySite


# ASN 40034 ("Confluence Networks Inc").
# %Listed, Google Malware Dashboard: 0.05%.
# Updated: 2019.08.21

2604:10c0::/48 Deny Cloud
2604:10c0:ffff::/48 Deny Cloud
Origin: VG
Tag: Confluence


# ASN 25369 ("Hydra Communications Ltd").
# %Listed, Google Malware Dashboard: 0.16%.
# Stop Forum Spam (SFS) listings: 7,780.
# Updated: 2019.01.06 / Checked: 2019.05.20

2a06:8dc6::/44 Deny Cloud
2a06:8dc7::/48 Deny Cloud
Origin: EU
2a00:1a30::/32 Deny Cloud
2a01:4020::/32 Deny Cloud
Origin: GB
2a05:6200:72::/48 Deny Cloud
Origin: NL
2a03:b000:a00::/40 Deny Cloud
Origin: SE
Tag: Hydra Communications


# ASN 55081 ("24 SHELLS").
# %Listed, Google Malware Dashboard: 0.53%.
# Stop Forum Spam (SFS) listings: 150.
# Updated: 2019.07.07

2a06:8640::/29 Deny Cloud
Origin: GB
2607:4f00::/32 Deny Cloud
Origin: US
Tag: 24 SHELLS


# ASNs 11588, 12989, 18607, 20446, 33438 ("Highwinds Network Group, Inc").
# Updated: 2019.08.25

2804:266c::/32 Deny Cloud
Origin: BR
2001:5c0:1400::/39 Deny Cloud
Origin: CA
2a03:efc0:200::/40 Deny Cloud
2a03:efc0:500::/40 Deny Cloud
2a03:efc0:700::/40 Deny Cloud
2a03:efc0:900::/40 Deny Cloud
2a03:efc0:1100::/40 Deny Cloud
2a03:efc0:1300::/40 Deny Cloud
2a03:efc0:1500::/40 Deny Cloud
2a03:efc0:1700::/40 Deny Cloud
2a03:efc0:1800::/39 Deny Cloud
2a03:efc0:ba5e::/48 Deny Cloud
Origin: GB
2403:f880:6000::/39 Deny Cloud
2403:f880:6300::/40 Deny Cloud
2404:5d80:6000::/39 Deny Cloud
2404:5d80:6300::/40 Deny Cloud
2404:5d80:6600::/40 Deny Cloud
Origin: JP
2001:4de0::/32 Deny Cloud
2a0a:e200:1100::/40 Deny Cloud
2a0a:e200:1300::/40 Deny Cloud
2a0a:e200:1400::/38 Deny Cloud
2a0a:e200:1800::/39 Deny Cloud
2a0a:e202:8000::/48 Deny Cloud
2a0a:e202:800b::/48 Deny Cloud
2a0a:e202:800e::/47 Deny Cloud
2a0a:e202:8010::/48 Deny Cloud
2a0a:e202:8013::/48 Deny Cloud
2a0a:e202:8014::/48 Deny Cloud
Origin: NL
2001:1938::/32 Deny Cloud
2407:1580:1100::/40 Deny Cloud
2407:1580:1200::/40 Deny Cloud
2407:1580:1400::/38 Deny Cloud
2604:6840:1200::/39 Deny Cloud
2604:6840:1400::/38 Deny Cloud
2604:6840:1800::/38 Deny Cloud
2604:6840:1c00::/39 Deny Cloud
2604:6840:1e00::/40 Deny Cloud
2604:c980::/32 Deny Cloud
2604:ea80::/32 Deny Cloud
2604:fc80::/32 Deny Cloud
2606:b300::/33 Deny Cloud
2606:ce80:6100::/40 Deny Cloud
2606:ce80:6200::/39 Deny Cloud
2606:ce80:6400::/38 Deny Cloud
2606:ce80:6900::/40 Deny Cloud
Origin: US
Tag: Highwinds


# ASNs 62, 19479, 20013 ("CyrusOne LLC").
# Some IPs on these ASNs caught probing for database dumps.
# Updated: 2018.01.12 / Checked: 2019.08.13

2605:9600::/38 Deny Cloud
2605:9600:400::/39 Deny Cloud
2605:9600:800::/40 Deny Cloud
2607:ff70::/32 Deny Cloud
2610:190::/38 Deny Cloud
2610:190:1c00::/38 Deny Cloud
2610:190:5e00::/39 Deny Cloud
2610:190:7c00::/38 Deny Cloud
2610:190:df00::/40 Deny Cloud
2620:f2:c000::/48 Deny Cloud
Origin: US
Tag: CyrusOne LLC


# Announcing as: "WEBSITEWELCOME".
# Various ASNs; Sourced from HE.
# Updated: 2017.09.25 / Checked: 2019.07.24

2605:f300:ffff::/48 Deny Cloud
Origin: US
Tag: WEBSITEWELCOME.COM


# ASN 18229 ("CtrlS Datacenters Ltd").
# Some IPs on this ASN caught probing for database dumps.
# %Listed, Google Malware Dashboard: 0.45%.
# Stop Forum Spam (SFS) listings: 830.
# Updated: 2019.08.04

2001:df0:fc00::/48 Deny Cloud
2001:df4:5100::/48 Deny Cloud
2400:3b00::/47 Deny Cloud
2400:3b00:2::/48 Deny Cloud
2400:3b00:20::/48 Deny Cloud
2400:3b00:40::/48 Deny Cloud
2400:3b00:50::/48 Deny Cloud
Origin: IN
Tag: CtrlS Datacenters


# ASN 25234 ("ACTIVE 24 Sp. z o.o.").
# Note when updating: Also contains "proxy" signatures.
# Some IPs on these ASNs caught probing for database dumps.
# %Listed, Google Malware Dashboard: 0.17%.
# Updated: 2017.09.25 / Checked: 2019.06.01

2a02:4a8::/32 Deny Cloud
Origin: CZ
Tag: ACTIVE 24


# ASN 29278 ("Deninet KFT").
# IPs on this ASN caught attempting to hack users; SQLi galore.
# %Listed, Google Malware Dashboard: 0.26%.
# Stop Forum Spam (SFS) listings: 1,431.
# Updated: 2017.10.29 / Checked: 2019.08.18

2a02:730::/32 Deny Cloud
Origin: HU
Tag: Deninet KFT


# ASN 32767 ("SAPIOTERRA, LLC").
# No recent reports or bad activity detected. Possible candidate for future removal.
# Updated: 2017.11.06 / Checked: 2019.09.06

2607:c080::/32 Deny Cloud
Origin: US
Tag: SAPIOTERRA, LLC


# Announcing as: "LogicWeb Inc".
# Various ASNs; Sourced from HE.
# Updated: 2019.05.02 / Checked: 2019.09.15

2606:f180:5::/48 Deny Cloud
Origin: US
Tag: LogicWeb Inc


# ASN 50297 ("Infium, UAB").
# %Listed, Google Malware Dashboard: 0.75%.
# Stop Forum Spam (SFS) listings: 157.
# Updated: 2018.03.14 / Checked: 2019.06.01

2001:67c:28f8::/48 Deny Cloud
Origin: LT
2a06:5600:28f8::/48 Deny Cloud
Origin: UA
Tag: Infium, UAB


# ASNs 30548, 31034, 199653, 199883, 200185, 205727.
# "Aruba S.p.A" / "Aruba SAS" / "ARUBA NETWORKS, INC" / "ArubaCloud Limited".
# Caught attempting to hack honeypots.
# Updated: 2018.02.24 / Checked: 2019.08.27

2a03:2c40::/32 Deny Cloud
2a03:a140::/32 Deny Cloud
Origin: FR
2a01:6e60::/32 Deny Cloud
Origin: GB
2a00:6d40::/31 Deny Cloud
2a00:6d42::/32 Deny Cloud
2a00:6d47::/36 Deny Cloud
2a01:5940::/35 Deny Cloud
2a01:5940:2000::/36 Deny Cloud
2a02:4ae0:a::/48 Deny Cloud
2a02:fd40::/31 Deny Cloud
2a03:cdc0::/35 Deny Cloud
2a04:e100::/31 Deny Cloud
Origin: IT
2620:11d:6000::/42 Deny Cloud
Origin: US
Tag: Aruba S.p.A


# ASN 45671 ("Wholesale Services Provider").
# %Listed, Google Malware Dashboard: 0.19%.
# Stop Forum Spam (SFS) listings: 151.
# Updated: 2019.01.07 / Checked: 2019.05.22

2001:df1:6800::/48 Deny Cloud
2400:5dc0::/48 Deny Cloud
2400:8100::/32 Deny Cloud
2400:d400:1::/48 Deny Cloud
2400:d400:2::/48 Deny Cloud
2400:d400:6::/48 Deny Cloud
2400:d400:9::/48 Deny Cloud
2400:d400:11::/48 Deny Cloud
2400:d400:12::/47 Deny Cloud
2400:d400:18::/48 Deny Cloud
2400:d400:b97::/48 Deny Cloud
2400:d400:d51::/48 Deny Cloud
2400:d400:1008::/48 Deny Cloud
2400:d400:1337::/48 Deny Cloud
2400:d400:1487::/48 Deny Cloud
2400:d400:9897::/48 Deny Cloud
2400:d400:9898::/48 Deny Cloud
2400:d400:b00b::/48 Deny Cloud
2400:d400:ffff::/48 Deny Cloud
2403:1540::/48 Deny Cloud
2403:b800:1000::/48 Deny Cloud
2405:1000::/32 Deny Cloud
2406:bf00:1::/48 Deny Cloud
2406:c500:fff3::/48 Deny Cloud
Origin: AU
2400:7180::/32 Deny Cloud
Origin: NZ
Tag: Servers Australia


# ASN 49981 ("WorldStream").
# (209.222.250.0 already listed in ipv4_other.dat; can omit from here).
# %Listed, Google Malware Dashboard: 0.07%.
# Stop Forum Spam (SFS) listings: 2,166.
# Updated: 2019.08.13

2a06:e881:6000::/44 Deny Cloud
Origin: CH
2a03:69c0:100::/40 Deny Cloud
Origin: FR
2a04:92c7:16::/48 Deny Cloud
Origin: GB
2001:16c0:fefe::/48 Deny Cloud
Origin: IR
2a00:7c80::/32 Deny Cloud
2a06:3880::/29 Deny Cloud
2a0a:1f41::/32 Deny Cloud
2a0c:ef00::/32 Deny Cloud
2a0d:3ec0::/32 Deny Cloud
Origin: NL
2a06:d641::/32 Deny Cloud
2a06:d645::/32 Deny Cloud
2a06:d646::/32 Deny Cloud
2a07:ca04::/32 Deny Cloud
2a09:9441::/32 Deny Cloud
2a0b:bd00::/31 Deny Cloud
2a0c:2f40::/32 Deny Cloud
Origin: RU
Tag: WorldStream


# ASN 11888 ("Television Internacional, S.A. de C.V.").
# Stop Forum Spam (SFS) listings: 676.
# Updated: 2017.12.18 / Checked: 2019.09.01

2806:230::/32 Deny Cloud
Origin: MX
Tag: TV Internacional


# ASN 198605 ("AVAST Software s.r.o.").
# Caught attempting to access sensitive parts of WP sites for unknown reasons.
# Stop Forum Spam (SFS) listings: 6,353.
# Updated: 2019.03.19 / Checked: 2019.08.01

2001:67c:284::/48 Deny Cloud
2a0b:e181:100::/40 Deny Cloud
2a0b:e181:200::/39 Deny Cloud
2a0b:e182:100::/40 Deny Cloud
2a0b:e182:200::/45 Deny Cloud
2a0b:e182:300::/40 Deny Cloud
2a0b:e182:400::/40 Deny Cloud
Origin: CZ
Tag: AVAST Software


# ASN 43317 ('OOO "Fishnet Communications"').
# Caught spamming while pretending to be Google.
# %Listed, Google Malware Dashboard: 0.40%.
# Stop Forum Spam (SFS) listings: 3,225.
# Updated: 2019.03.10 / Checked: 2019.07.10

2a00:1838::/32 Deny Cloud
2a0a:4784::/32 Deny Cloud
Origin: RU
Tag: Fishnet


# ASN 59504 ('LLC "CloudSol"').
# %Listed, Google Malware Dashboard: 2.01%.
# Stop Forum Spam (SFS) listings: 193.
# Updated: 2019.07.10

2a05:fb41::/32 Deny Cloud
2a05:fb42::/32 Deny Cloud
2a07:14c0::/47 Deny Cloud
2a07:14c0:100::/40 Deny Cloud
2a07:14c0:1000::/36 Deny Cloud
2a07:14c0:c000::/36 Deny Cloud
2a07:14c1::/32 Deny Cloud
2a07:14c2::/32 Deny Cloud
2a07:14c6::/31 Deny Cloud
2a0a:4780::/30 Deny Cloud
2a0a:4785::/32 Deny Cloud
2a0a:7743::/32 Deny Cloud
2a0a:7747::/32 Deny Cloud
2a0c:2101::/32 Deny Cloud
2a0c:2104::/32 Deny Cloud
2a0c:5245::/32 Deny Cloud
2a0c:5247:1000::/36 Deny Cloud
2a0c:5247:2000::/35 Deny Cloud
2a0c:5247:4000::/35 Deny Cloud
2a0c:5247:7000::/36 Deny Cloud
2a0c:5247:c000::/36 Deny Cloud
2a0c:5247:e000::/36 Deny Cloud
2a0c:f743::/32 Deny Cloud
2a0c:f745::/32 Deny Cloud
2a0d:60c0::/31 Deny Cloud
2a0d:60c3::/32 Deny Cloud
2a0d:7740::/32 Deny Cloud
2a0d:8180:1000::/36 Deny Cloud
2a0d:8180:5000::/36 Deny Cloud
2a0d:8180:8000::/36 Deny Cloud
2a0d:8180:a000::/36 Deny Cloud
2a0d:8181::/32 Deny Cloud
2a0d:e4c2::/31 Deny Cloud
2a0d:e4c4::/31 Deny Cloud
Origin: RU
Tag: CloudSol


# ASN 132839 ("POWER LINE (HK) CO., LIMITED").
# %Listed, Google Malware Dashboard: 0.96%.
# Stop Forum Spam (SFS) listings: 16.
# Updated: 2019.08.13

2401:f940::/32 Deny Cloud
Origin: HK
Tag: POWER LINE (HK) CO


# ASN 55720 ("Gigabit Hosting Sdn Bhd").
# %Listed, Google Malware Dashboard: 2.32%.
# Stop Forum Spam (SFS) listings: 729.
# Updated: 2019.08.11

2402:90c0::/32 Deny Cloud
Origin: HK
2400:5680::/32 Deny Cloud
2401:340::/32 Deny Cloud
2402:9500::/32 Deny Cloud
Origin: MY
Tag: Gigabit Hosting


# ASN 27435 ("Dimension Data Cloud Solutions, Inc").
# Actually quite a large cloud service with numerous ASNs, but most of their ASNs seem clean at the moment, so for now,
# I'm including just the one ASN (AS27435) that I've seen send unwanted/suspect requests to websites. May expand this
# section to include other ASNs in the future if similar traffic or problems emerge from those ASNs. Activity seen from
# the ASN in question includes spamming and probing.
# Stop Forum Spam (SFS) listings: 9.
# Updated: 2019.08.22

2402:9900::/48 Deny Cloud
2402:9900:100::/47 Deny Cloud
2402:9900:111::/48 Deny Cloud
2402:9900:200::/47 Deny Cloud
2402:9900:211::/48 Deny Cloud
2402:9900:311::/48 Deny Cloud
2402:9900:911::/48 Deny Cloud
2402:9900:b11::/48 Deny Cloud
2402:9900:c11::/48 Deny Cloud
2402:9900:d11::/48 Deny Cloud
2402:9900:e11::/48 Deny Cloud
Origin: AU
2a00:47c0:111::/48 Deny Cloud
2a00:47c0:211::/48 Deny Cloud
2a00:47c0:221::/48 Deny Cloud
2a00:47c0:311::/48 Deny Cloud
2a00:47c0:611::/48 Deny Cloud
2a00:47c0:711::/48 Deny Cloud
2a00:47c0:811::/48 Deny Cloud
Origin: GB
2404:c8:2::/48 Deny Cloud
Origin: ID
2001:418:9807::/48 Deny Cloud
2605:b800:787::/48 Deny Cloud
2607:f480::/46 Deny Cloud
2607:f480:4::/47 Deny Cloud
2607:f480:8::/47 Deny Cloud
2607:f480:11::/48 Deny Cloud
2607:f480:16::/48 Deny Cloud
2607:f480:24::/48 Deny Cloud
2607:f480:101::/48 Deny Cloud
2607:f480:111::/48 Deny Cloud
2607:f480:1ab::/48 Deny Cloud
2607:f480:201::/48 Deny Cloud
2607:f480:211::/48 Deny Cloud
2607:f480:300::/47 Deny Cloud
2607:f480:401::/48 Deny Cloud
2607:f480:411::/48 Deny Cloud
2607:f480:999::/48 Deny Cloud
2607:f480:1111::/48 Deny Cloud
2607:f480:1ab0::/44 Deny Cloud
2607:f480:f001::/48 Deny Cloud
Origin: US
2c0f:fc00:b004::/48 Deny Cloud
Origin: ZA
Tag: Dimension Data


# ASN 60868 ("Runtime Collective Limited").
# Trademark protection organisation; Scans websites looking for potential infringements in order to send legal notices
# on behalf of clients. Serves no benefit to the websites being scanned.
# Updated: 2018.02.25 / Checked: 2019.08.01

2a00:77e0::/32 Deny Cloud
Origin: GB
Tag: Brandwatch


# ASN 63018 ("US Dedicated").
# %Listed, Google Malware Dashboard: 0.80%.
# Stop Forum Spam (SFS) listings: 34.
# Updated: 2018.12.11 / Checked: 2019.09.15

2605:9f80::/33 Deny Cloud
2605:9f80:8000::/35 Deny Cloud
2605:9f80:c000::/34 Deny Cloud
Origin: US
Tag: US Dedicated


# ASN 201848 ("Trader soft LLC").
# Stop Forum Spam (SFS) listings: 74.
# Updated: 2016.12.04 / Checked: 2019.09.08

2a04:ac00:1::/48 Deny Cloud
2a04:ac00:4::/48 Deny Cloud
Origin: RU
Tag: Trader soft LLC


# ASN 51395 ("SOFTplus Entwicklungen GmbH").
# Stop Forum Spam (SFS) listings: 29,222.
# Updated: 2019.01.16 / Checked: 2019.05.25

2001:67c:2f0::/48 Deny Cloud
2a00:bd80::/32 Deny Cloud
2a05:6a00::/29 Deny Cloud
2a05:ad00::/29 Deny Cloud
2a0a:5dc0::/29 Deny Cloud
2a0b:ee80::/29 Deny Cloud
2a0c:e740::/32 Deny Cloud
Origin: CH
Tag: SOFTplus


# ASN 263735 ("SOCIEDAD BUENA HOSTING, S.A").
# Stop Forum Spam (SFS) listings: 1,183.
# Updated: 2018.04.06 / Checked: 2019.09.15

2803:9f80::/32 Deny Cloud
Origin: HN
Tag: SOCIEDAD BUENA


# ASN 63199 ("Capitalonline Data Service Co.,LTD").
# Source of forum spam and other unwanted traffic.
# %Listed, Google Malware Dashboard: 0.65%.
# Stop Forum Spam (SFS) listings: 293.
# Updated: 2019.07.04

2400:5280::/36 Deny Cloud
2400:5280:1000::/37 Deny Cloud
2400:5280:1800::/38 Deny Cloud
2400:5280:2000::/38 Deny Cloud
2400:5280:fc00::/38 Deny Cloud
Origin: CN
2001:550:2801::/48 Deny Cloud
Origin: US
Tag: Capitalonline


# ASN 37560 ("Cyberdyne S.A").
# Lots of spam from here.
# Stop Forum Spam (SFS) listings: 20,885.
# Updated: 2019.08.27

2001:67c:1350::/48 Deny Cloud
2a02:6f8::/32 Deny Cloud
Origin: CY
2c0f:f930::/32 Deny Cloud
Origin: LR
2a0a:3840::/29 Deny Cloud
2a0e:d9c0::/29 Deny Cloud
Origin: SE
Tag: Cyberdyne S.A


# ASN 2635 ("Automattic, Inc").
# Unwanted requests first detected by ModSecurity, mostly in 192.0.64.0/18. Low chance of false positives AFAICT. Added
# here by user request. May potentially block mShot (deprecated WordPress plugin). Shouldn't block humans though. ASN
# also announces bogons via 10.12.*.* (these should be removed from the final aggregate when updating). Signatures run
# through rules_specific.php to avoid mistakenly blocking JetPack (WordPress plugin; still actively used throughout).
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2019.05.06

2403:6b80::/45 Run rules_specific.php
2403:6b80:8::/47 Run rules_specific.php
2403:6b80:a::/48 Run rules_specific.php
2403:6b80:ffff::/48 Run rules_specific.php
Origin: AU
2801:80:1610::/48 Run rules_specific.php
Origin: BR
2a04:fa80::/48 Run rules_specific.php
2a04:fa80:2::/47 Run rules_specific.php
2a04:fa80:4::/46 Run rules_specific.php
2a04:fa80:8::/48 Run rules_specific.php
2a04:fa87:fffd::/48 Run rules_specific.php
2a04:fa87:fffe::/47 Run rules_specific.php
Origin: IE
2620:115:c000::/46 Run rules_specific.php
2620:115:c008::/45 Run rules_specific.php
Origin: US
2001:43f8:bf0::/48 Run rules_specific.php
Origin: ZA
Tag: Automattic


# ASN 22612 ("Namecheap, Inc").
# %Listed, Google Malware Dashboard: 0.17%.
# Stop Forum Spam (SFS) listings: 61.
# Updated: 2018.04.22 / Checked: 2019.04.18

2606:5b80::/32 Deny Cloud
Origin: US
Tag: Namecheap, Inc


# ASN 49349 ("Dotsi, Unipessoal Lda").
# %Listed, Google Malware Dashboard: 0.74%.
# Stop Forum Spam (SFS) listings: 423.
# Updated: 2018.04.23 / Checked: 2019.07.21

2a00:1c60::/32 Deny Cloud
Origin: PT
2a02:7a60::/32 Deny Cloud
Origin: UA
Tag: Dotsi


# ASN 263179 ("Webline Services, S.A").
# Stop Forum Spam (SFS) listings: 1,440.
# Updated: 2018.04.23 / Checked: 2019.06.01

2803:c880::/32 Deny Cloud
Origin: HN
Tag: Webline Services


# ASN 197071 ("Dennis Rainer Warnholz trading as active-servers.com").
# %Listed, Google Malware Dashboard: 0.32%.
# Stop Forum Spam (SFS) listings: 187.
# Updated: 2019.08.01

2001:678:5e8::/48 Deny Cloud
2a00:f826:4::/48 Deny Cloud
2a02:d40:3::/48 Deny Cloud
2a02:d40:7::/48 Deny Cloud
2a02:d40:8::/48 Deny Cloud
2a05:bec0::/29 Deny Cloud
2a0c:3580::/29 Deny Cloud
Origin: DE
Tag: active-servers.com


# ASN 7979 ("Servers.com, Inc").
# Some IPs here caught scraping website content without permission.
# Stop Forum Spam (SFS) listings: 13.
# Updated: 2019.03.19 / Checked: 2019.07.24

2406:380::/31 Deny Cloud
Origin: HK
2a05:93c0::/30 Deny Cloud
Origin: NL
2604:8240::/32 Deny Cloud
2605:f480::/31 Deny Cloud
Origin: US
Tag: Servers.com


# ASN 48635 ("Astralus B.V").
# %Listed, Google Malware Dashboard: 0.17%.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2019.08.01

2a05:1500:600::/40 Deny Cloud
2a05:1500:ff00::/40 Deny Cloud
Origin: DE
2001:67c:28fc::/48 Deny Cloud
2001:1460::/32 Deny Cloud
2a00:f10::/32 Deny Cloud
2a00:9b60::/40 Deny Cloud
2a01:b940::/36 Deny Cloud
2a01:b944::/32 Deny Cloud
2a02:13b0:1::/48 Deny Cloud
2a02:13b0:100::/40 Deny Cloud
2a03:3060:a::/48 Deny Cloud
2a04:6bc0::/36 Deny Cloud
2a05:a280::/29 Deny Cloud
2a05:c580::/29 Deny Cloud
2a07:ae80::/29 Deny Cloud
2a0b:7280::/29 Deny Cloud
2a0b:8f80::/48 Deny Cloud
Origin: NL
Tag: Astralus B.V


# ASN 205406 ("Hostio Solutions B.V").
# Caught by honeypots.
# Stop Forum Spam (SFS) listings: 319.
# Updated: 2019.09.15

2a0b:3c40:1::/48 Deny Cloud
2a0b:3c40:a::/48 Deny Cloud
2a0b:3c40:11::/48 Deny Cloud
2a0b:3c40:12::/48 Deny Cloud
2a0b:3c40:15::/48 Deny Cloud
2a0c:9e00::/29 Deny Cloud
2a0c:fe00::/29 Deny Cloud
2a0e:5540::/29 Deny Cloud
2a0e:a940::/29 Deny Cloud
2a0e:cac0::/29 Deny Cloud
2a0e:cbc0::/29 Deny Cloud
2a0e:eb40::/29 Deny Cloud
Origin: NL
2a03:401::/32 Deny Cloud
Origin: TR
Tag: Hostio Solutions B.V


# ASN 23338 ("DCS Pacific Star, LLC").
# %Listed, Google Malware Dashboard: 2.77%.
# Stop Forum Spam (SFS) listings: 35.
# Updated: 2018.05.18 / Checked: 2019.08.13

2606:b680::/32 Deny Cloud
Origin: US
Tag: DCS Pacific Star


# ASN 5602 ("KPNQWest Italia S.p.a").
# %Listed, Google Malware Dashboard: 0.29%.
# Stop Forum Spam (SFS) listings: 121.
# Updated: 2018.05.25 / Checked: 2019.08.22

2001:1450::/32 Deny Cloud
2a01:9300::/32 Deny Cloud
2a02:5c80::/32 Deny Cloud
Origin: IT
Tag: KPNQWest Italia


# ASN 41564 ("Packet Exchange Limited").
# Caught XRumer operating on this network.
# %Listed, Google Malware Dashboard: 0.08%.
# Stop Forum Spam (SFS) listings: 9,002.
# Updated: 2018.05.25 / Checked: 2019.08.29

2a02:5740::/46 Deny Cloud
2a02:5740:4::/47 Deny Cloud
2a02:5740:6::/48 Deny Cloud
Origin: EE
Tag: Packet Exchange Limited


# ASN 42926 ("Radore Veri Merkezi Hizmetleri A.S").
# %Listed, Google Malware Dashboard: 0.07%.
# Stop Forum Spam (SFS) listings: 1,040.
# Updated: 2019.08.21

2a00:56a0::/32 Deny Cloud
2a01:790::/32 Deny Cloud
2a05:88c0::/29 Deny Cloud
2a05:a740::/29 Deny Cloud
2a06:f7c0::/29 Deny Cloud
2a09:cfc0::/29 Deny Cloud
2a0b:5ec0::/29 Deny Cloud
2a0c:f500::/29 Deny Cloud
Origin: TR
Tag: Radore Veri Merkezi


# ASN 204655 ("Novogara LTD").
# Spam tolerant network.
# Stop Forum Spam (SFS) listings: 38.
# Updated: 2019.08.27

2a0b:b7c0::/30 Deny Cloud
Origin: NL
Tag: Novogara LTD


# ASNs 44066, 203833 ("First Colo GmbH").
# Malware detected on network; Future C&C risk.
# %Listed, Google Malware Dashboard: 0.09% (AS44066).
# Stop Forum Spam (SFS) listings: 148 (AS44066), 80 (AS203833).
# Updated: 2019.09.05

2a00:11c0:38::/48 Deny Cloud
Origin: AT
2001:67c:1591::/48 Deny Cloud
2001:67c:15a2::/48 Deny Cloud
Origin: CZ
2a00:5fc0::/32 Deny Cloud
2a01:7e0::/32 Deny Cloud
2a02:fb00::/29 Deny Cloud
2a05:8b80::/29 Deny Cloud
2a07:b800::/29 Deny Cloud
2a09:71c0::/29 Deny Cloud
2a0a:7bc0::/32 Deny Cloud
2a0a:7bc7::/32 Deny Cloud
2a0c:4ac0:1100::/40 Deny Cloud
2a0c:75c0::/45 Deny Cloud
2a0d:3580::/32 Deny Cloud
2a0d:5940::/29 Deny Cloud
2a0e:cb80::/29 Deny Cloud
Origin: DE
2a02:6b40::/32 Deny Cloud
Origin: ES
2a0b:b87:ffef::/48 Deny Cloud
Origin: NL
Tag: First Colo GmbH


# ASN 62088 ("Sinarohost LTD").
# Malware detected on network; Future C&C risk.
# Stop Forum Spam (SFS) listings: 936.
# Updated: 2019.08.29

2a01:9520::/31 Deny Cloud
2a01:9522::/32 Deny Cloud
Origin: GB
2a09:7c44::/32 Deny Cloud
Origin: MD
Tag: Sinarohost LTD


# ASN 197695 ("Domain names registrar REG.RU").
# Malware detected on network; Future C&C risk.
# %Listed, Google Malware Dashboard: 0.11%.
# Stop Forum Spam (SFS) listings: 438.
# Updated: 2018.06.19 / Checked: 2019.08.29

2a00:1b48::/32 Deny Cloud
2a00:f940:1::/48 Deny Cloud
2a00:f940:2::/47 Deny Cloud
2a00:f940:4::/46 Deny Cloud
2a00:f940:8::/47 Deny Cloud
Origin: RU
Tag: REG.RU


# ASNs 4769, 46015, 55405, 136170 ("Exa Bytes Network Sdn.Bhd").
# Careful when updating; Also contains some proxies and VPNs (should be marked differently).
# Malware detected on network; Future C&C risk.
# Updated: 2018.06.19 / Checked: 2019.04.18

2402:6c00::/32 Deny Cloud
Origin: MY
Tag: Exa Bytes Network


# ASN 45731 ("ARDH GLOBAL INDONESIA, PT").
# Malware detected on network; Future C&C risk.
# %Listed, Google Malware Dashboard: 0.90%.
# Stop Forum Spam (SFS) listings: 39.
# Updated: 2018.06.19 / Checked: 2019.05.10

2001:df0:bc::/48 Deny Cloud
Origin: ID
Tag: ARDH GLOBAL


# ASN 24971 ("Master Internet s.r.o").
# %Listed, Google Malware Dashboard: 0.30%.
# Stop Forum Spam (SFS) listings: 85.
# Updated: 2019.04.16 / Checked: 2019.08.29

2001:678:a50::/48 Deny Cloud
2001:67c:68::/48 Deny Cloud
2a00:a5a0::/32 Deny Cloud
2a01:430::/32 Deny Cloud
2a03:3b40::/38 Deny Proxy
2a03:7460::/32 Deny Cloud
2a06:8200::/32 Deny Cloud
2a07:4880::/29 Deny Cloud
2a0b:3240::/32 Deny Cloud
2a0c:6380::/29 Deny Cloud
Origin: CZ
2a04:16c0:200::/48 Deny Cloud
Origin: NL
Tag: Master Internet


# ASN 200651 ("Flokinet Ltd").
# %Listed, Google Malware Dashboard: 0.99%.
# Stop Forum Spam (SFS) listings: 19,019.
# Updated: 2018.06.25 / Checked: 2019.09.08

2a06:1700::/47 Deny Cloud
2a06:1700:2::/48 Deny Cloud
Origin: RO
Tag: Flokinet Ltd


# ASN 45753 ("Unit 1205-1207").
# Confirmed data hosters: "Simcentric", "DATAPLUGS.COM", "Ethr.Net", "CLOUD LIMITED", "NETSEC", "Lighting Hosting".
# ^.*(Simcentric|DATAPLUGS\.COM|Ethr\.Net|CLOUD LIMITED|NETSEC|Hosting).*$\n
# Confirmed data hosters split to the cloud services signature files.
# Everything else remains in the ISPs signature files.
# %Listed, Google Malware Dashboard: 2.02%.
# Stop Forum Spam (SFS) listings: 9.
# Updated: 2018.06.30 / Checked: 2019.09.03

2401:4c00::/32 Deny Cloud
Origin: HK
Tag: Unit 1205-1207


# ASN 42237 ("ICME LIMITED").
# Stop Forum Spam (SFS) listings: 265.
# Updated: 2019.04.30 / Checked: 2019.09.15

2a0b:c040::/31 Deny Cloud
2a0d:8980::/29 Deny Cloud
Origin: SE
Tag: ICME LIMITED


# ASN 49855 ("PLUTEX GmbH").
# Tor exit node + webhosting company. Users caught caught spamming via their network.
# Stop Forum Spam (SFS) listings: 1,731.
# Updated: 2018.07.25 / Checked: 2019.06.30

2001:678:3b4::/48 Deny Cloud
2001:678:3b8::/48 Deny Cloud
2a02:16d0::/32 Deny Cloud
2a04:cac3::/32 Deny Cloud
Origin: DE
Tag: PLUTEX GmbH


# ASN 29017 ("Gyron Internet Ltd").
# Cloud/hosting network. Caught attempting unauthorised access to sensitive parts of websites.
# %Listed, Google Malware Dashboard: 0.17%.
# Updated: 2018.08.06 / Checked: 2019.08.18

2a00:14f0::/32 Deny Cloud
2a04:84c1::/32 Deny Cloud
Origin: GB
Tag: Gyron Internet Ltd


# ASN 55229 ("White Sands Hosting").
# Stop Forum Spam (SFS) listings: 29.
# Updated: 2018.09.01 / Checked: 2019.09.01

2606:3980::/48 Deny Cloud
Origin: US
Tag: White Sands Hosting


# ASN 64267 ("Sprious LLC").
# Ranges change frequently / Should update often.
# Stop Forum Spam (SFS) listings: 21,740.
# Updated: 2018.09.07 / Checked: 2019.05.21

2602:fefa::/32 Deny Cloud
Origin: US
Tag: Sprious LLC


# ASN 60144 ("3W Infra B.V").
# Caught attempting to hack honeypots.
# Stop Forum Spam (SFS) listings: 132.
# Updated: 2019.07.13

2a02:5060::/32 Deny Cloud
2a0c:ef03::/32 Deny Cloud
Origin: NL
Tag: 3W Infra B.V


# ASN 58073 ("YISP B.V").
# Stop Forum Spam (SFS) listings: 3,205.
# Updated: 2018.09.15 / Checked: 2019.07.24

2a02:2a38::/32 Deny Cloud
Origin: NL
Tag: YISP B.V


# ASN 39790 ("Web4U s.r.o").
# Caught trying to hack WordPress sites.
# Updated: 2018.09.17 / Checked: 2019.09.10

2001:1568::/32 Deny Cloud
Origin: CZ
Tag: Web4U s.r.o


# ASN 13768 ("Cogeco Peer 1").
# Multi-play network, primarily offers infrastructure for webhosting services. Some unwanted traffic seen from their
# ASN, probing for secure pages, spam attempts, etc. Also contains some broadband providers (should remove these when
# updating): "Kijoma Broadband", "Fairleigh Dickinson University"; ^.*(?:Kijoma|University).*$\n
# %Listed, Google Malware Dashboard: 0.14%.
# Stop Forum Spam (SFS) listings: 373.
# Updated: 2018.10.05 / Checked: 2019.08.13

2001:1978:202::/48 Deny Cloud
2001:1978:1000::/39 Deny Cloud
2001:1978:1300::/40 Deny Cloud
2001:1978:1400::/38 Deny Cloud
2001:1978:1800::/38 Deny Cloud
2001:1978:1c00::/40 Deny Cloud
2001:1978:1e00::/40 Deny Cloud
2001:1978:2000::/40 Deny Cloud
2001:1978:2300::/40 Deny Cloud
2001:1978:2400::/40 Deny Cloud
2605:9300:1::/48 Deny Cloud
2607:d500:300::/40 Deny Cloud
2607:d500:600::/40 Deny Cloud
2607:d500:d00::/40 Deny Cloud
2620:11c:c001::/48 Deny Cloud
Origin: CA
2a03:8a00::/36 Deny Cloud
Origin: GB
2605:6c80:3::/48 Deny Cloud
2606:be00::/40 Deny Cloud
2607:f170:20::/44 Deny Cloud
Origin: US
Tag: Cogeco Peer 1


# ASNs 3267, 48693 ("The federal state autonomous educational establishment of
# additional professional education Center of Realization of State Educational
# Policy and Informational Technologies").
# Caught trying to hack WordPress sites.
# %Listed, Google Malware Dashboard: 0.31% (AS3267).
# Stop Forum Spam (SFS) listings: 1 (AS3267), 1 (AS48693).
# Updated: 2019.03.27 / Checked: 2019.08.04

2001:b08::/32 Deny Cloud
2a07:a6c0::/29 Deny Cloud
Origin: RU
Tag: TakeWYN


# ASN 206898 ("Server Hosting Pty Ltd").
# %Listed, Google Malware Dashboard: 3.21%.
# Stop Forum Spam (SFS) listings: 901.
# Updated: 2018.11.02 / Checked: 2019.08.27

2a05:9f06::/31 Deny Cloud
Origin: PT
Tag: AS206898


# ASNs 51862, 54548 ("ProfitBricks, Inc").
# Added by user request. Dedicated hosting provider.
# %Listed, Google Malware Dashboard: 0.07%.
# Updated: 2018.12.31 / Checked: 2019.05.10

2a02:2478::/32 Deny Cloud
2a02:247a::/32 Deny Cloud
Origin: DE
Tag: ProfitBricks


# ASN 44901 ("BelCloud Hosting Corporation").
# %Listed, Google Malware Dashboard: 0.17%.
# Stop Forum Spam (SFS) listings: 563.
# Updated: 2019.01.06 / Checked: 2019.05.20

2a07:1c44:3980::/41 Deny Cloud
Origin: AT
2a07:5740::/31 Deny Cloud
Origin: BG
Tag: BelCloud


# ASN 34867 ("Cosmonova LLC").
# Caught spamming while pretending to be Google.
# Stop Forum Spam (SFS) listings: 507.
# Updated: 2019.02.07 / Checked: 2019.09.06

2a00:17a0::/32 Deny Cloud
Origin: UA
Tag: Cosmonova LLC


# ASN 54456 ("CloudAccess.net, LLC").
# %Listed, Google Malware Dashboard: 0.06%.
# Updated: 2019.02.08 / Checked: 2019.06.10

2607:1b00:1::/48 Deny Cloud
2607:1b00:2::/47 Deny Cloud
2607:1b00:10::/48 Deny Cloud
2607:1b00:93b2::/48 Deny Cloud
Origin: US
Tag: CloudAccess.net


# ASN 202053 ("UpCloud Ltd").
# %Listed, Google Malware Dashboard: 0.07%.
# Stop Forum Spam (SFS) listings: 268.
# Updated: 2019.06.10

2a04:3540::/30 Deny Cloud
2a04:3544::/31 Deny Cloud
Origin: FI
2a09:51c0::/29 Deny Cloud
Origin: NL
Tag: UpCloud Ltd


# ASN 21769 ("Colocation America Corporation").
# %Listed, Google Malware Dashboard: 0.94%.
# Stop Forum Spam (SFS) listings: 394.
# Updated: 2019.06.10 / Checked: 2019.09.15

2a09:1e80::/29 Deny Cloud
2a0a:1f47::/32 Deny Cloud
Origin: NL
2a0b:2a86::/32 Deny Cloud
2a0c:2f44::/30 Deny Cloud
Origin: RU
2602:fed3:6::/48 Deny Cloud
2602:fed3:b::/48 Deny Cloud
2602:fed3:11::/48 Deny Cloud
2606:9a80::/32 Deny Cloud
2607:f188::/32 Deny Cloud
Origin: US
Tag: Colo America Corp


# ASN 136557 ("Host Universal Pty Ltd").
# %Listed, Google Malware Dashboard: 0.41%.
# Stop Forum Spam (SFS) listings: 5,939.
# Updated: 2019.06.14

2402:7340:1::/48 Deny Cloud
2402:7340:2::/48 Deny Cloud
2404:f780:2::/48 Deny Cloud
2404:f780:4::/47 Deny Cloud
2404:f780:8::/48 Deny Cloud
2406:d500:4::/48 Deny Cloud
2406:d500:6::/48 Deny Cloud
2406:d500:9::/48 Deny Cloud
2406:d500:12::/48 Deny Cloud
2406:d500:14::/48 Deny Cloud
2406:d500:ee::/48 Deny Cloud
2406:d501::/32 Deny Cloud
Origin: AU
2a09:54c0::/48 Deny Cloud
Origin: CY
2a0d:7f47::/48 Deny Cloud
Origin: GB
2402:9e80:6::/48 Deny Cloud
Origin: HK
2400:9f40::/32 Deny Cloud
2402:bd80::/32 Deny Cloud
2403:42c0::/32 Deny Cloud
2405:f180::/32 Deny Cloud
2407:3b80::/32 Deny Cloud
Origin: IN
2001:df4:fc00::/48 Deny Cloud
2402:bd82::/31 Deny Cloud
Origin: NZ
Tag: Host Universal Pty Ltd


# ASN 15083 ("Infolink Global Corporation").
# %Listed, Google Malware Dashboard: 0.34%.
# Stop Forum Spam (SFS) listings: 129.
# Updated: 2019.02.27 / Checked: 2019.06.24

2a06:8e40::/29 Deny Cloud
Origin: DK
2607:1680::/32 Deny Cloud
2607:feb8::/32 Deny Cloud
Origin: US
Tag: Infolink Global Corporation


# ASN 63473 ("HostHatch LLC").
# Caught spamming while pretending to be Google.
# %Listed, Google Malware Dashboard: 0.30%.
# Stop Forum Spam (SFS) listings: 339.
# Updated: 2019.07.09

2a01:6f0:ffff::/48 Deny Cloud
2a04:bdc7:100::/48 Deny Cloud
Origin: DE
2a0e:dc0:3::/48 Deny Cloud
Origin: NL
2605:4840:3::/48 Deny Cloud
2a0d:5600:30::/47 Deny Cloud
2a0d:5600:33::/48 Deny Cloud
Origin: US
Tag: HostHatch LLC


# ASN 35913 ("DediPath").
# Dedicated hosting. Some listings on various DBs. Some announces suggest
# possible proxies (should mark accordingly).
# %Listed, Google Malware Dashboard: 0.10%.
# Stop Forum Spam (SFS) listings: 1,460.
# Updated: 2019.03.13 / Checked: 2019.07.18

2402:d0c0:2::/47 Deny Cloud
Origin: SG
2602:fe90:100::/40 Deny Cloud
2602:fe90:200::/39 Deny Cloud
Origin: US
Tag: DediPath


# ASNs 36444, 52924, 202521 ("NEXCESS.NET L.L.C").
# %Listed, Google Malware Dashboard: 1.83% (AS36444), 1.75% (AS202521).
# Stop Forum Spam (SFS) listings: 201 (AS36444), 15 (AS52924).
# Updated: 2019.03.19 / Checked: 2019.08.01

2a07:45c4::/40 Deny Cloud
Origin: GB
2607:f7c0::/32 Deny Cloud
Origin: US
Tag: NEXCESS.NET


# ASN 48282 ("McHost.Ru").
# %Listed, Google Malware Dashboard: 0.12%.
# Stop Forum Spam (SFS) listings: 836.
# Updated: 2019.03.24 / Checked: 2019.08.03

2a0d:8480::/47 Deny Cloud
Origin: RU
Tag: McHost.Ru


# ASN 13830 ("Nexril").
# Stop Forum Spam (SFS) listings: 9.
# Updated: 2019.08.04

2a07:1c40:1020::/48 Deny Cloud
Origin: AT
2a0c:b642:1a02::/48 Deny Cloud
Origin: BE
2a06:e881:620f::/48 Deny Cloud
Origin: CH
2a04:8802::/31 Deny Cloud
2a04:8804::/30 Deny Cloud
2a04:dd82::/31 Deny Cloud
2a04:dd84::/30 Deny Cloud
2a07:dec4::/30 Deny Cloud
2a0c:fe40::/29 Deny Cloud
Origin: RU
2001:506:30::/48 Deny Cloud
2602:fece::/36 Deny Cloud
2604:fbc0::/36 Deny Cloud
Origin: US
Tag: Nexril


# ASN 209299 ("VITOX TELECOM").
# Dedicated hosting provider and server leasing. SQLi and spam attempts caught.
# Updated: 2019.07.10

2a0d:a740::/47 Deny Cloud
Origin: EE
Tag: CLOUD STAR


# ASN 14987 ("Rethem Hosting LLC").
# Caught spamming.
# Updated: 2019.03.30 / Checked: 2019.08.11

2001:550:101::/48 Deny Cloud
2607:8500::/32 Deny Cloud
Origin: US
Tag: Rethem Hosting LLC


# ASN 44220 ("Parfumuri Femei.com SRL").
# Very high levels of spam originating from this network.
# %Listed, Google Malware Dashboard: 0.88%.
# Stop Forum Spam (SFS) listings: 60,107.
# Updated: 2019.08.18

2a09:a380::/29 Deny Cloud
Origin: RO
Tag: Parfumuri Femei


# ASN 18254 ("KLAYER LLC").
# %Listed, Google Malware Dashboard: 2.61% (AS18254).
# Stop Forum Spam (SFS) listings: 10 (AS18254), 1 (AS49466).
# Updated: 2019.04.18 / Checked: 2019.09.05

2401:1640:10::/48 Deny Cloud
Origin: HK
Tag: KLAYER LLC


# ASNs 42708, 43948 ("GleSYS AB"; formerly "Portlane AB").
# Exclude (carries human endpoints and seems clean):
# - "^.*Internetbolaget.*$\n"
# Mark as proxy:
# - "^(.*(?:VP[SN]|Tunnel|Edelino).*)$"
# Mark as cloud:
# - "^(.*(?:Host|Netelia|Sveaab|GleSYS|Webbplatsen|InfoGuard).*)$"
# Mark as spam (carries human endpoints, but also poses a spam risk):
# - "^(.*(?:Svenska).*)$"
# Everything else mark as generic.
# %Listed, Google Malware Dashboard: 0.13% (AS42708), 0.03% (AS43948).
# Stop Forum Spam (SFS) listings: 1,622 (AS42708).
# Updated: 2019.05.02 / Checked: 2019.09.18

2a01:8640:6::/48 Deny Cloud
Origin: GB
2a00:1a28::/32 Deny Cloud
2a02:750::/29 Deny Cloud
Origin: SE
Tag: Portlane Networks AB


# ASN 25780 ("HugeServer Networks, LLC").
# Caught trying to hack WordPress sites.
# Stop Forum Spam (SFS) listings: 139.
# Updated: 2019.05.02 / Checked: 2019.09.15

2a03:a3a0::/32 Deny Cloud
Origin: NL
2604:34c0::/32 Deny Cloud
2604:6b40::/32 Deny Cloud
2605:8680::/40 Deny Cloud
2605:8680:ff1::/48 Deny Cloud
2605:8680:ff2::/47 Deny Cloud
2605:8680:eeee::/48 Deny Cloud
2605:8680:efef::/48 Deny Cloud
2605:8680:fffe::/47 Deny Cloud
2605:8681::/32 Deny Cloud
Origin: US
Tag: HugeServer Networks


# ASN 9009 ("M247 Ltd").
# Multiplay network providing broadband connectivity, server leasing, line rental, webhosting services and others.
# Anything marked as "server" or "host", we'll move to the cloud/hosting signature files. ^(.*(?:Host|Server).*)\x01$
# Everything else can go in the ISPs signature files. When updating, to reduce the risk of false positives:
# - Remove all subordinates of 38.0.0.0/8 from final aggregate (already blocked elsewhere and don't want duplicates).
# - "Secure Internet LLC" mark as proxy (not generic).
# Stop Forum Spam (SFS) listings: 255,032.
# Updated: 2019.05.13 / Checked: 2019.09.15

2001:ac8:44::/48 Deny Cloud
Origin: GB
Tag: M247 Ltd


# ASN 3728 ("Onramp Access LLC").
# Caught trying to hack WordPress sites.
# Stop Forum Spam (SFS) listings: 22.
# Updated: 2019.05.21

2604:a400:8000::/36 Deny Cloud
Origin: US
Tag: Onramp Access LLC


# ASN 1764 ("Next Layer Telekommunikationsdienstleistungs- und Beratungs GmbH").
# Caught trying to hack WordPress sites + huge amounts of spam originating from this ASN. Appears to be a cloud
# infrastructure provider. No evidence of human endpoints currently, but should keep a close eye on this in case of
# possible future false positives (large range of provided services; could be something in there that I've missed).
# Re-check when updating.
# %Listed, Google Malware Dashboard: 0.23%.
# Stop Forum Spam (SFS) listings: 32,441.
# Updated: 2019.05.21

2001:4b60:100::/48 Deny Cloud
2a01:190::/29 Deny Cloud
2a03:e600::/32 Deny Cloud
2a05:dd80::/29 Deny Cloud
2a07:3740::/29 Deny Cloud
2a07:4080::/29 Deny Cloud
2a07:a980::/32 Deny Cloud
2a0b:5a40::/29 Deny Cloud
2a0c:4e40::/29 Deny Cloud
2a0d:4d80::/29 Deny Cloud
Origin: AT
Tag: Next Layer


# ASN 62744 ("Quintex Alliance Consulting").
# Caught probing honeypots for vulnerabilities.
# Stop Forum Spam (SFS) listings: 59,743.
# Updated: 2019.05.25

2620:7:6000::/47 Deny Cloud
Origin: US
Tag: Quintex


# ASN 63996 ("Mazeda Networks Limited").
# Caught XRumer operating on this network. Primarily a server leasing and webhosting company, but marking for use with
# reCAPTCHA, due to that they're multiplay, and also offer corporate internet connectivity (possible human endpoints).
# Not sure how to distinguish which ranges belong to which service within the network.
# Stop Forum Spam (SFS) listings: 241.
# Updated: 2019.05.28

2400:3240::/32 Deny Cloud
Origin: BD
Tag: Mazeda Networks
---
recaptcha:
 enabled: true


# ASN 29889 ("Fast Serv Networks, LLC").
# Dedicated host; evidence of unauthorised access attempts; spam events.
# Stop Forum Spam (SFS) listings: 158.
# Updated: 2019.06.10

2602:fffa::/36 Deny Cloud
2620:100:5007::/48 Deny Cloud
Origin: US
Tag: Fast Serv Networks


# ASN 24768 ("ALMOUROLTEC SERVICOS DE INFORMATICA E INTERNET LDA").
# Significant source of spam.
# %Listed, Google Malware Dashboard: 0.22%.
# Stop Forum Spam (SFS) listings: 9,190.
# Updated: 2019.06.15

2a06:5700::/29 Deny Cloud
Origin: DE
2a07:ba00::/29 Deny Cloud
Origin: GR
2a06:5800::/29 Deny Cloud
Origin: IN
2a00:1650::/32 Deny Cloud
Origin: PT
Tag: ALMOUROLTEC


# ASN 51048 ("Next Connex Ltd").
# Some reports of weird access attempts. Cloud provider. Added for the moment and will monitor for a while.
# Stop Forum Spam (SFS) listings: 1.
# Updated: 2019.06.23

2a03:4300::/29 Deny Cloud
Origin: GB
Tag: Next Connex Ltd
---
recaptcha:
 enabled: true


# ASN 61272 ("Informacines sistemos ir technologijos, UAB").
# Caught trying to flood/spam honeypots.
# Stop Forum Spam (SFS) listings: 1,225.
# Updated: 2019.06.24

2a02:e00:ffe7::/48 Deny Cloud
Origin: DE
2a04:2180::/32 Deny Cloud
2a04:2181:c010::/48 Deny Cloud
2a09:140::/29 Deny Cloud
Origin: LT
2a0a:1f40::/32 Deny Cloud
Origin: NL
Tag: AS61272


# ASN 43160 ("Mdc Datacenter S.L").
# Source of forum spam. (When updating, omit invalids; marked with recaptcha
# to reduce the risk of false positives; interaces with some ISPs).
# Stop Forum Spam (SFS) listings: 65.
# Updated: 2019.07.02

2a01:b5c0::/32 Deny Cloud
Origin: ES
Tag: Mdc Datacenter S.L


# ASN 64236 ("Accuserv Inc").
# Source of forum spam.
# Stop Forum Spam (SFS) listings: 11.
# Updated: 2019.07.02

2604:abc0::/32 Deny Cloud
2a09:4bc7:d010::/44 Deny Cloud
Origin: US
Tag: Accuserv Inc


# ASN 31463 ("4D Data Centres Limited").
# Source of forum spam.
# %Listed, Google Malware Dashboard: 0.38%.
# Updated: 2019.07.02

2a0d:98c0::/29 Deny Cloud
Origin: DE
2a00:1c18::/29 Deny Cloud
2a03:9ba0:100::/40 Deny Cloud
2a07:45c2::/40 Deny Cloud
2a0c:bc80::/32 Deny Cloud
2a0d:4140::/32 Deny Cloud
Origin: GB
2607:8b00:1::/48 Deny Cloud
Origin: US
Tag: 4D Data


# ASN 134094 ("Serverfield Co., Ltd.").
# Evidence of spamming at some RBLs.
# Stop Forum Spam (SFS) listings: 604.
# Updated: 2019.07.09

2a0a:40:100::/40 Deny Cloud
Origin: FR
2402:1780:3::/48 Deny Cloud
2402:1780:4::/46 Deny Cloud
2402:1780:8::/47 Deny Cloud
2402:1780:10::/46 Deny Cloud
2402:1780:14::/48 Deny Cloud
2a0c:5201::/32 Deny Cloud
Origin: TW
Tag: Serverfield


# ASNs 7160, 31898, 43894 ("Oracle Corporation").
# Listing here due to reports from some users of spam events, brute-force
# attempts, probing, and other unwanted traffic from their ASNs, plus various
# RBL listings at various RBLs. Example: abuseipdb.com/check/129.213.67.237
# They own a very large number of ASNs though, and most of them seem clean at
# the moment, and blocking more than needed reduces maintainability (i.e.,
# discourages regular updates), so I'm opting to list only those ASNs directly
# connected to any currently available reports. Quite a massive network, so
# should monitor for a while, for potential false positives and potential
# future additions alike.
# %Listed, Google Malware Dashboard: 0.03% (AS7160).
# Stop Forum Spam (SFS) listings: 84 (AS7160), 189 (AS31898).
# Updated: 2019.07.13

2801:1:8800::/48 Deny Cloud
2801:1:8805::/48 Deny Cloud
Origin: CR
2405:ba00:8800::/48 Deny Cloud
2405:ba00:8804::/48 Deny Cloud
2405:ba00:8808::/48 Deny Cloud
2405:ba00:8810::/48 Deny Cloud
Origin: IN
2a02:6900:8804::/48 Deny Cloud
2a02:6900:8808::/48 Deny Cloud
2a02:6900:880c::/48 Deny Cloud
2a02:6900:8810::/48 Deny Cloud
2a02:6900:8814::/48 Deny Cloud
2a02:6900:8818::/48 Deny Cloud
2a02:6900:881c::/48 Deny Cloud
2a02:6900:8820::/48 Deny Cloud
2a02:6900:8824::/48 Deny Cloud
Origin: SE
2603:c000:800::/40 Deny Cloud
2603:c000:a00::/40 Deny Cloud
2603:c001:1000::/39 Deny Cloud
2603:c001:1400::/39 Deny Cloud
2603:c002:800::/40 Deny Cloud
2603:c002:a00::/40 Deny Cloud
2603:c002:8800::/40 Deny Cloud
2603:c002:8a00::/40 Deny Cloud
2603:c011::/36 Deny Cloud
2603:c011:4000::/36 Deny Cloud
2603:c022::/35 Deny Cloud
2603:c022:8000::/35 Deny Cloud
2606:b400:8804::/48 Deny Cloud
2606:b400:8808::/48 Deny Cloud
2606:b400:880c::/48 Deny Cloud
2606:b400:8814::/48 Deny Cloud
2606:b400:881c::/48 Deny Cloud
2606:b400:8820::/48 Deny Cloud
2606:b400:8824::/47 Deny Cloud
2606:b400:882b::/48 Deny Cloud
2606:b400:8830::/47 Deny Cloud
2606:b400:8832::/48 Deny Cloud
Origin: US
Tag: Oracle Corporation


# ASN 60355 ("KV Solutions B.V").
# Evidence of spamming at some RBLs.
# Updated: 2019.07.13

2a0c:e640::/29 Deny Cloud
2a0d:2580::/29 Deny Cloud
2a0d:2680::/29 Deny Cloud
Origin: NL
Tag: KV Solutions B.V


# ASN 202448 ("MVPS LTD").
# Mirai detected on this network.
# Stop Forum Spam (SFS) listings: 3.
# Updated: 2019.07.16

2a05:8280::/32 Deny Cloud
2a0c:b9c0::/32 Deny Cloud
Origin: DE
2a09:cd40::/32 Deny Cloud
Origin: NL
Tag: MVPS LTD


# ASN 134113 ("Kazi Sazzad Hossain T/A Millennium Computers & Networking").
# Caught trying to hack WordPress sites.
# Stop Forum Spam (SFS) listings: 8.
# Updated: 2019.07.21

2403:140::/32 Deny Cloud
Origin: BD
Tag: Kazi Sazzad Hossain


# ASNs 39535, 62217 ("VooServers Ltd").
# Cloud provider; Source of spam and other unwanted traffic.
# %Listed, Google Malware Dashboard: 0.33% (AS62217).
# Stop Forum Spam (SFS) listings: 27 (AS62217).
# Updated: 2019.07.22

2a06:1287:2600::/44 Deny Cloud
Origin: BY
2a0b:4040::/29 Deny Cloud
Origin: DE
2001:67c:2e68::/47 Deny Cloud
Origin: FR
2a00:1c10:103::/48 Deny Cloud
2a00:1c10:104::/48 Deny Cloud
2a01:6c60::/30 Deny Cloud
2a07:a340::/32 Deny Cloud
2a0b:3880::/32 Deny Cloud
Origin: GB
2a04:a140::/32 Deny Cloud
2a05:2d00::/32 Deny Cloud
2a06:3e80::/32 Deny Cloud
Origin: NL
2605:45c0::/35 Deny Cloud
2607:6980::/43 Deny Cloud
Origin: US
2c0f:f7e8::/47 Deny Cloud
Origin: ZA
Tag: VooServers Ltd


# ASNs 12406, 134204 ("Business Network Ltd").
# Cloud provider; Source of spam and other unwanted traffic.
# Stop Forum Spam (SFS) listings: 1,326 (AS12406), 93 (AS134204).
# Updated: 2019.07.24

2400:4d40::/32 Deny Cloud
Origin: BD
2a00:6440::/32 Deny Cloud
2a06:1287:40::/48 Deny Cloud
Origin: BY
Tag: Business Network Ltd
About us
Advertise on this site
For more information send a message to info at phpclasses dot org.
File: vault/ipv6.dat

Contents
