Permalink
Switch branches/tags
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
1614 lines (1299 sloc) 33.1 KB
#
# This file is comprised of blacklisted IPs based on honeypot site visits by various bots.
#
#
# INSTALLATION INSTRUCTIONS
#
# To use it, copy it to your Apache http's conf.d dir:
# <ServerRoot>/conf.d/ip_blacklist.conf
#
# Ensure that it is included from the httpd.conf file. Look for the following line:
# Include conf.d/*.conf
#
# If it isn't present, you can explicitly include this file with the following line:
# Include conf.d/ip_blacklist.conf
#
# This file applies the blacklisted IPs to every single server request, regardless of what
# location the user agent requests. It will also override the access rules defined in
# directives such as <Directory> and <Files>. The following Apache documentation is helpful
# to understand how these directives are merged and override each other.
# http://httpd.apache.org/docs/2.2/sections.html#mergin
#
# You might also include this file from an .htaccess file, but this is not quite as
# efficient as having httpd load the configuration on startup because it will read the
# .htaccess file every time a request is made to the server.
#
#
# LICENSE AND COPYRIGHT
#
# Copyright (c) 2012 Pushing Inertia
# http://pushinginertia.com
#
# Released under the MIT license.
#
# Permission is hereby granted, free of charge, to any person obtaining a copy of this
# software and associated documentation files (the "Software"), to deal in the Software
# without restriction, including without limitation the rights to use, copy, modify, merge,
# publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons
# to whom the Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all copies or
# substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
# INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
# PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE
# FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
# OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
# DEALINGS IN THE SOFTWARE.
#
# The latest version of this file is available on GitHub:
# https://github.com/pushinginertia/ip-blacklist
#
<Location />
order allow,deny
# AWS: http://www.forumpostersunion.com/showthread.php?t=10490
deny from 23.20.0.0/14
deny from 46.51.128.0/17
deny from 46.137.0.0/16
deny from 50.16.0.0/14
deny from 50.19.0.0/16
deny from 52.0.0.0/10
deny from 52.64.0.0/12
deny from 52.80.0.0/14
deny from 52.84.0.0/14
deny from 52.88.0.0/13
deny from 52.192.0.0/11
deny from 54.64.0.0/12
deny from 54.80.0.0/12
deny from 54.160.0.0/12
deny from 54.176.0.0/12
deny from 54.192.0.0/12
deny from 54.208.0.0/13
deny from 54.216.0.0/14
deny from 54.220.0.0/15
deny from 54.224.0.0/12
deny from 54.240.0.0/12
deny from 67.202.0.0/18
deny from 72.44.32.0/19
deny from 75.101.128.0/17
deny from 79.125.0.0/17
deny from 103.4.8.0/21
deny from 107.20.0.0/14
deny from 122.248.192.0/18
deny from 174.129.0.0/16
deny from 175.41.128.0/17
deny from 176.32.64.0/18
deny from 176.34.0.0/16
deny from 184.72.0.0/15
deny from 204.236.128.0/17
deny from 216.182.224.0/20
# Rackspace Cloud Servers: http://www.encoding.com/what_is_the_ip_range_of_your_system_so_i_may_restrict_access_on_a_firewall
deny from 50.56.0.0/15
deny from 162.209.0.0/17
deny from 173.203.194.0/19
deny from 174.143.0.0/16
deny from 184.106.0.0/16
deny from 204.232.192.0/18
deny from 209.114.32.0/19
# reliablehosting
deny from 66.151.32.0/22
deny from 68.68.32.0/20
deny from 98.158.112.0/20
deny from 207.204.224.0/19
deny from 216.131.64.0/18
deny from 216.151.176.0/20
# AS47142 steephost.com
deny from 91.207.4.0/22
deny from 91.207.8.0/23
deny from 195.190.13.0/24
# egihosting.com AS18779
deny from 23.27.0.0/16
deny from 50.117.0.0/17
deny from 64.145.82.0/23
deny from 68.68.96.0/20
deny from 69.46.64.0/19
deny from 173.245.64.0/19
deny from 205.164.0.0/18
deny from 209.73.128.0/19
deny from 216.151.191.0/24
deny from 216.172.128.0/19
# datacom bulgaria
deny from 213.91.181.0/24
# snelserver.com
deny from 77.95.224.0/21
deny from 78.41.200.0/21
deny from 89.207.128.0/21
deny from 128.204.192.0/20
deny from 178.255.198.0/23
deny from 193.34.166.0/23
# everhost.ro
deny from 94.60.152.0/21
deny from 94.60.160.0/19
deny from 94.60.192.0/21
deny from 94.63.0.0/19
deny from 94.63.32.0/20
deny from 94.63.56.0/21
deny from 94.63.64.0/21
deny from 94.177.4.0/23
deny from 188.215.32.0/22
# AS35662 redstation.co.uk
deny from 31.3.224.0/19
deny from 80.84.48.0/20
deny from 80.243.176.0/20
deny from 88.150.128.0/17
deny from 88.150.136.0/22
deny from 88.150.192.0/22
deny from 109.73.64.0/20
deny from 109.200.0.0/19
deny from 149.3.128.0/20
deny from 176.227.192.0/20
deny from 188.227.160.0/19
# softlayer
deny from 50.22.0.0/15
deny from 50.97.0.0/16
deny from 52.116.0.0/15
deny from 52.118.0.0/16
deny from 66.228.112.0/20
deny from 67.228.0.0/16
deny from 74.86.0.0/16
deny from 75.126.0.0/16
deny from 108.168.128.0/17
deny from 119.81.0.0/16
deny from 158.85.0.0/16
deny from 159.8.170.0/24
deny from 159.253.0.0/16
deny from 161.202.0.0/16
deny from 168.1.0.0/16
deny from 169.54.0.0/16
deny from 173.192.0.0/15
deny from 174.36.0.0/15
deny from 174.127.64.0/18
deny from 184.172.0.0/15
deny from 198.23.64.0/18
deny from 198.58.80.0/20
deny from 208.43.0.0/16
deny from 208.101.0.0/18
# nexcess.net
deny from 69.160.48.0/20
# ubiquity / nobis technology group AS15003
deny from 23.19.0.0/16
deny from 23.80.0.0/15
deny from 23.82.0.0/16
deny from 23.83.0.0/17
deny from 23.83.128.0/18
deny from 23.83.192.0/20
deny from 23.104.0.0/14
deny from 23.108.0.0/15
deny from 23.110.0.0/16
deny from 23.111.0.0/18
deny from 64.120.0.0/17
deny from 69.147.224.0/19
deny from 108.62.0.0/16
deny from 173.208.0.0/17
deny from 173.234.0.0/16
deny from 174.34.128.0/18
deny from 216.6.224.0/20
# AS8551 bzqint-dc
deny from 62.219.0.0/20
deny from 62.219.16.0/22
deny from 62.219.20.0/23
deny from 79.176.0.0/15
deny from 79.179.0.0/16
deny from 79.180.0.0/14
deny from 81.218.192.0/17
deny from 82.80.0.0/15
deny from 84.108.0.0/14
deny from 85.130.128.0/17
deny from 109.64.0.0/15
deny from 192.114.64.0/20
# AS6724 STRATO-RZG-MNT http://www.strato.de/
deny from 81.169.128.0/17
deny from 85.214.0.0/16
# NTT PC Communications,Inc. www.nttpc.co.jp/english/
deny from 119.245.0.0/16
# AS49335 nconnect.ru/hostkey.com
deny from 146.0.72.0/22
deny from 31.192.104.0/21
deny from 46.17.96.0/21
deny from 91.210.104.0/22
deny from 141.105.64.0/21
deny from 158.255.0.0/21
deny from 195.162.68.0/23
# AS30633 leaseweb.com (previously netdirekt)
deny from 46.165.192.0/18
deny from 62.212.64.0/19
deny from 78.159.96.0/19
deny from 83.149.64.0/18
deny from 85.17.0.0/16
deny from 89.149.192.0/18
deny from 91.109.16.0/20
deny from 95.168.166.0/23
deny from 103.254.152.0/22
deny from 108.59.0.0/20
deny from 130.185.76.0/23
deny from 162.210.192.0/21
deny from 178.162.128.0/17
deny from 185.17.144.0/22
deny from 192.96.200.0/21
deny from 198.7.56.0/21
deny from 199.58.84.0/22
deny from 199.115.112.0/21
deny from 207.244.64.0/18
deny from 209.58.128.0/18
# AS23033 Wowrack.com WOW-IPV4-NET2
deny from 208.115.96.0/19
# AS40676 psychz.net
deny from 74.117.56.0/21
deny from 107.160.0.0/16
deny from 173.224.208.0/20
deny from 199.15.112.0/21
deny from 199.83.88.0/21
deny from 199.119.200.0/21
deny from 208.87.240.0/22
deny from 216.24.192.0/20
deny from 216.24.240.0/20
# AS5577 netdedicated.ru, root.lu
deny from 46.166.143.0/24
deny from 91.212.226.0/24
deny from 94.242.192.0/18
deny from 212.117.160.0/19
# AS197043 exetel.de
deny from 31.214.133.0/24
deny from 46.251.224.0/20
deny from 109.230.208.0/20
deny from 109.230.240.0/20
# solutionpro.com - Boise, Idaho
deny from 206.80.96.0/19
deny from 206.206.0.0/15
deny from 207.70.0.0/18
deny from 209.19.128.0/18
# AS41079 SuperHost.pl
deny from 178.250.40.0/21
deny from 193.218.152.0/22
# bluecoat.com
deny from 103.246.36.0/22
deny from 65.46.48.192/30
deny from 65.160.238.176/28
deny from 199.19.248.0/21
deny from 199.116.168.0/21
deny from 204.246.128.0/20
deny from 208.115.138.0/23
deny from 216.16.247.0/28
deny from 217.169.46.96/28
# peakwebhosting.com
deny from 204.11.216.0/21
# AS46475 limestonenetworks.com
deny from 64.31.0.0/18
deny from 69.162.64.0/18
deny from 74.63.192.0/18
deny from 208.115.192.0/18
deny from 216.245.192.0/19
# AS8737 planet.nl
deny from 77.166.0.0/16
# AS24961 fast IT Colocation fibre1.net
deny from 85.114.128.0/20
# AS11274 Adhost Internet Advertising, LLC adhost.com
deny from 67.212.128.0/20
deny from 96.31.160.0/20
deny from 173.240.48.0/20
deny from 199.21.64.0/21
deny from 199.193.176.0/22
deny from 216.182.80.0/20
deny from 216.211.128.0/20
# AS46844 sharktech.net
deny from 204.188.192.0/18
# AS13448 websense
deny from 66.194.6.0/24
deny from 67.117.201.128/28
deny from 91.194.158.0/23
deny from 192.132.210.0/24
deny from 204.15.64.0/21
deny from 208.80.192.0/21
# twtelecom.com, possibly used by websense
deny from 207.114.128.0/17
# savvis is the host for the attributor stealth bot
deny from 64.41.128.0/17
# cogentco.com - used by cyveillance stealth bot
deny from 65.213.208.128/27
deny from 65.222.176.96/27
deny from 65.222.185.72/29
deny from 151.173.0.0/16
# AS8551 bezeqint hosting
deny from 82.80.224.0/20
deny from 82.80.240.0/21
deny from 82.80.248.0/21
# AS3255 Ukrainian Academic and Research Network
deny from 192.162.19.0/24
# AS31148 FREENET dial-up service in New Zealand
deny from 89.252.58.0/24
# Silknet
deny from 149.3.87.0/24
# AS57232/AS15936 spammer in the Ukraine
deny from 82.193.96.0/19
deny from 91.231.40.0/22
deny from 109.106.0.0/19
# AS16276 OVH SAS ovh.com
deny from 5.135.0.0/16
deny from 37.59.0.0/16
deny from 46.105.0.0/16
deny from 62.210.0.0/16
deny from 87.98.128.0/17
deny from 91.121.0.0/16
deny from 94.23.0.0/16
deny from 149.56.0.0/16
deny from 158.69.0.0/16
deny from 163.172.0.0/16
deny from 167.114.0.0/16
deny from 176.31.0.0/16
deny from 178.32.0.0/15
deny from 188.165.0.0/16
deny from 192.95.0.0/18
deny from 192.99.0.0/16
deny from 198.27.64.0/18
deny from 198.50.128.0/17
deny from 198.100.144.0/20
deny from 198.245.48.0/20
deny from 213.186.32.0/19
deny from 213.251.128.0/18
# AS24940 Hetzner Online AG hetzner.de
deny from 5.9.0.0/16
deny from 46.4.0.0/16
deny from 78.46.0.0/15
deny from 88.198.0.0/16
deny from 136.243.0.0/16
deny from 144.76.0.0/16
deny from 148.251.0.0/16
deny from 176.9.0.0/16
deny from 188.40.0.0/16
# AS32875 Virpus Network Operations
deny from 199.180.128.0/21
# AS53264, AS15003 Continuum Data Centers
deny from 216.231.128.0/20
# compass communications: used by domaintools.com spider
deny from 216.145.0.0/19
deny from 64.246.160.0/19
# endurance international: this is an umbrella company for dozens of hosting companies
deny from 66.249.0.0/19
# random subnets that generate a lot of spam
deny from 176.119.0.0/24
# AS20473 choopa: network ahrefs bot runs under
deny from 45.32.0.0/16
deny from 45.63.0.0/17
deny from 45.76.0.0/15
deny from 64.237.32.0/19
deny from 66.55.128.0/19
deny from 68.232.160.0/19
deny from 104.156.224.0/19
deny from 104.238.128.0/18
deny from 108.61.0.0/16
deny from 173.199.64.0/18
deny from 208.167.224.0/19
deny from 209.222.0.0/19
deny from 216.155.128.0/19
# AS16124 utel datacenter networks
deny from 213.186.112.0/20
# AS58049 Telecom Tekhpodderzhka Ltd
deny from 91.237.249.0/24
# AS43391 Netdirekt: ISP in Turkey
deny from 77.223.128.0/19
# AS47143 todayhost: host of WBSearchBot
deny from 195.42.102.0/23
# AS44050 Russia IzydorSymanski-net
deny from 188.143.232.0/23
# Chinanet non-portable www.fjtelecom.com
deny from 220.160.0.0/15
deny from 220.162.0.0/16
# AS20860 IOmart Hosting
deny from 78.129.128.0/17
deny from 95.154.192.0/18
# AS10316 Codero codero.com
deny from 64.150.176.0/20
deny from 66.226.72.0/21
deny from 68.168.96.0/20
deny from 69.64.64.0/19
deny from 162.244.64.0/22
deny from 206.225.80.0/21
deny from 206.225.92.0/22
deny from 216.55.128.0/22
deny from 216.55.136.0/21
deny from 216.55.160.0/21
deny from 216.55.168.0/22
deny from 216.55.176.0/21
deny from 216.55.184.0/22
# AS29073 Ecatel Dedicated Hosting (Netherlands)
deny from 93.174.88.0/21
# rebelhosting.net
deny from 199.33.120.0/21
# AS12260 colostore.com
deny from 67.214.160.0/19
# AS30152 beyondhosting.net
deny from 8.29.136.0/21
# uk2group.com Hosting Services, Inc., westhost.com
deny from 98.158.176.0/20
deny from 107.182.224.0/20
deny from 206.130.96.0/19
deny from 209.95.32.0/19
# AS13601 peer1.net
deny from 76.74.128.0/17
deny from 216.157.0.0/18
deny from 216.157.64.0/19
deny from 216.157.96.0/20
# AS51559 netinternet in Turkey
deny from 94.102.0.0/20
deny from 95.173.160.0/19
# sanitytechnology.com.au
deny from 103.1.216.0/22
deny from 122.99.112.0/21
# Japan tsukaeru.net
deny from 27.112.104.0/21
deny from 175.45.136.0/21
# VPNTUNNEL-INET vpntunnel.se
deny from 5.254.144.0/24
# AS8972 plusserver.de
deny from 188.138.0.0/17
# godaddy
deny from 50.62.0.0/15
deny from 166.62.0.0/17
deny from 184.168.0.0/16
deny from 216.69.128.0/18
# AS50673 serverius
deny from 46.249.32.0/19
# AS8708 RCS & RDS Business Romania
deny from 81.196.0.0/16
# scanner from evuln.com comes from this class C
deny from 78.158.11.0/24
# webair.com
deny from 174.137.128.0/18
# FiberMax USA
deny from 178.18.16.0/22
# AT&T enterprise ip group
deny from 192.20.240.0/20
# dacentec.com
deny from 199.241.184.0/21
# AS14061 digitalocean.com, cloudflare.com
deny from 45.55.0.0/16
deny from 46.101.0.0/16
deny from 80.240.128.0/20
deny from 104.131.0.0/16
deny from 104.236.0.0/16
deny from 107.170.0.0/16
deny from 128.199.0.0/16
deny from 139.59.0.0/16
deny from 146.185.176.0/21
deny from 159.203.0.0/16
deny from 162.243.0.0/16
deny from 173.245.48.0/20
deny from 178.62.0.0/16
deny from 192.34.56.0/21
deny from 192.241.128.0/17
deny from 198.41.128.0/17
deny from 198.199.64.0/18
deny from 198.211.96.0/19
deny from 208.68.36.0/22
# AS4436 nLayer nlayer.com
deny from 63.141.192.0/19
deny from 69.22.128.0/18
deny from 198.144.96.0/19
deny from 204.93.32.0/19
# AS19194 DME Hosting dmehosting.com
deny from 74.221.208.0/23
# netriplex.com aka microglobe
deny from 208.69.228.0/22
deny from 216.59.0.0/18
# AS39572 advancedhosters.com
deny from 46.229.160.0/20
deny from 192.243.48.0/20
# AS593-AP web24.com.au
deny from 111.67.0.0/19
deny from 125.214.64.0/20
deny from 203.16.60.0/23
deny from 223.27.0.0/19
# steadfast.net
deny from 50.31.0.0/17
deny from 69.162.128.0/18
# AS32475 singlehop.com
deny from 69.175.0.0/17
deny from 96.127.128.0/18
deny from 108.163.192.0/18
deny from 108.178.0.0/18
deny from 184.154.0.0/16
deny from 198.143.128.0/18
# continuumdatacenters.com
deny from 199.192.200.0/21
deny from 216.107.144.0/20
# wholesaleinternet.com
deny from 69.30.192.0/18
deny from 69.197.128.0/18
deny from 173.208.128.0/17
deny from 204.12.192.0/18
deny from 208.110.64.0/19
# iweb.com
deny from 209.172.32.0/19
deny from 64.15.128.0/19
deny from 72.55.128.0/18
deny from 67.205.64.0/18
deny from 70.38.0.0/17
deny from 174.142.0.0/16
deny from 184.107.0.0/16
deny from 198.72.96.0/19
deny from 198.50.96.0/19
# xlhost.com
deny from 64.79.64.0/19
deny from 173.45.64.0/18
deny from 173.244.160.0/19
deny from 207.182.128.0/19
deny from 209.190.0.0/17
# AS33139 canaca.com
deny from 66.49.128.0/17
deny from 67.55.0.0/18
deny from 69.171.128.0/19
deny from 173.248.192.0/18
# pegtechinc petaexpress.com
deny from 142.0.128.0/20
deny from 142.4.96.0/19
deny from 192.74.224.0/19
deny from 198.2.192.0/18
deny from 198.200.32.0/19
deny from 199.180.100.0/22
# crucialp.com, secureip.net.au
deny from 203.98.64.0/19
# areti internet, alentus.co.uk, alentus.com
deny from 85.237.192.0/19
deny from 204.14.72.0/21
deny from 216.185.32.0/19
# anchorfree.com web proxy
deny from 74.115.0.0/21
deny from 199.255.208.0/21
# fastq.com
deny from 65.39.64.0/19
# americanis.net
deny from 204.68.96.0/19
# AS44050 Russian data centre pinroute
deny from 31.184.238.0/24
deny from 46.161.41.0/24
deny from 188.143.232.0/23
deny from 188.143.234.0/23
# arrival.com
deny from 69.84.192.0/20
# colosseum.com
deny from 204.101.51.0/24
# fortinet.com
deny from 204.101.161.0/24
# virtbiz.com
deny from 208.77.216.0/21
# AS29017 gyron.net
deny from 89.145.64.0/18
# fdcservers.net
deny from 50.7.0.0/16
deny from 67.159.0.0/18
deny from 74.63.64.0/18
deny from 204.45.0.0/16
# tuliptel.com, tulip.net
deny from 110.234.0.0/15
# linode.com
deny from 23.239.0.0/19
deny from 45.33.0.0/17
deny from 45.79.0.0/16
deny from 69.164.192.0/19
deny from 96.126.96.0/19
deny from 104.237.128.0/19
deny from 106.184.0.0/20
deny from 106.185.24.0/21
deny from 106.185.32.0/21
deny from 106.185.40.0/21
deny from 106.185.48.0/21
deny from 106.185.56.0/21
deny from 106.186.16.0/19
deny from 106.186.112.0/21
deny from 106.186.120.0/21
deny from 106.187.32.0/21
deny from 106.187.40.0/21
deny from 106.187.48.0/21
deny from 106.187.88.0/21
deny from 106.187.96.0/21
deny from 139.162.0.0/16
deny from 162.216.16.0/22
deny from 173.230.128.0/19
deny from 192.81.128.0/21
deny from 192.155.80.0/20
# AS50245 serverel.com
deny from 173.214.240.0/20
# AS22439 perfectip.net
deny from 64.56.64.0/20
# AS40824 webazilla.com
deny from 199.80.52.0/22
# corenap.com
deny from 64.17.0.0/20
deny from 64.20.224.0/19
deny from 66.219.32.0/19
deny from 96.47.208.0/20
deny from 208.67.240.0/21
deny from 208.123.64.0/19
# AS24961 fastit.net, myloc.de
deny from 5.199.128.0/20
# AS11288 commercialmedia.com
deny from 198.74.228.0/22
# websitewelcome.com
deny from 192.254.128.0/17
# internap.com
deny from 212.118.224.0/19
# pacific.net.au
deny from 203.143.192.0/18
# custodiandc.com
deny from 5.102.168.0/21
# bahnhof.net
deny from 37.123.128.0/18
# source ranges of YisouSpider (ALISOFT)
deny from 42.156.128.0/17
# class Cs used by 360Spider, aka CollapsarTEXT, a content scraper from China
deny from 61.55.185.0/24
deny from 101.226.166.0/24
deny from 101.226.167.0/24
deny from 101.226.168.0/24
deny from 101.226.169.0/24
deny from 180.153.236.0/24
deny from 182.118.20.0/24
deny from 182.118.21.0/24
deny from 182.118.22.0/24
deny from 182.118.25.0/24
deny from 182.118.26.0/24
deny from 182.118.35.0/24
deny from 182.118.55.0/24
deny from 182.118.56.0/24
# alestra.net.mx
deny from 201.151.0.0/16
# inlink communications: primary.net
deny from 206.196.96.0/19
# AS33926 kaiaglobal.com
deny from 79.141.160.0/20
deny from 95.141.16.0/20
deny from 185.18.104.0/22
deny from 193.34.48.0/22
deny from 193.142.97.0/24
deny from 194.124.229.0/24
deny from 195.13.60.0/22
deny from 195.78.240.0/22
# resilans.se
deny from 192.121.0.0/16
deny from 193.180.0.0/16
# edis.at
deny from 151.236.19.0/24
# slaskdatacenter.pl
deny from 178.19.104.0/21
# colocrossing.com
deny from 23.94.0.0/15
deny from 75.127.0.0/20
deny from 96.8.112.0/20
deny from 107.172.0.0/14
deny from 108.174.48.0/20
deny from 172.245.0.0/16
deny from 192.3.0.0/16
deny from 192.210.128.0/17
deny from 192.227.128.0/17
deny from 198.12.64.0/18
deny from 198.23.128.0/17
deny from 198.46.128.0/17
deny from 198.144.176.0/21
deny from 199.21.112.0/22
deny from 199.188.100.0/22
deny from 206.217.128.0/20
# gnax.net
deny from 75.127.64.0/18
# he.net
deny from 65.49.0.0/17
# amanah.com
deny from 162.253.128.0/22
deny from 184.75.208.0/20
deny from 199.189.26.0/23
# centarra.com / avante
deny from 198.52.128.0/17
# dacentec.com
deny from 23.92.208.0/20
deny from 162.248.240.0/21
deny from 192.111.144.0/20
deny from 192.198.80.0/20
deny from 192.254.64.0/20
deny from 199.101.184.0/22
deny from 199.191.56.0/22
deny from 199.241.184.0/21
deny from 199.255.156.0/22
# quadranet.com
deny from 66.63.160.0/19
deny from 69.12.64.0/19
deny from 72.11.128.0/19
deny from 96.44.128.0/18
deny from 98.143.144.0/20
deny from 107.161.80.0/20
deny from 155.94.128.0/17
deny from 173.254.192.0/18
deny from 192.161.48.0/20
deny from 192.161.160.0/19
deny from 198.55.96.0/19
deny from 198.96.88.0/21
deny from 204.44.64.0/18
deny from 204.152.192.0/19
deny from 216.45.48.0/20
# krypt.com, vpls.net, kryptcolo.net
deny from 66.186.32.0/19
deny from 67.198.128.0/17
deny from 67.229.0.0/16
deny from 74.222.128.0/18
deny from 96.62.0.0/16
deny from 98.126.0.0/16
deny from 100.43.128.0/18
deny from 107.6.192.0/18
deny from 173.214.0.0/17
deny from 174.139.0.0/16
deny from 184.75.176.0/20
deny from 184.83.0.0/16
deny from 184.164.192.0/19
deny from 192.174.96.0/19
deny from 209.11.240.0/20
# gorillaservers.com
deny from 23.29.64.0/20
deny from 23.239.96.0/19
deny from 104.250.128.0/19
deny from 107.181.224.0/19
deny from 173.231.60.0/23
deny from 192.154.96.0/20
deny from 192.200.96.0/19
deny from 198.100.96.0/19
deny from 198.136.24.0/21
deny from 199.73.120.0/22
# google cloud hosting (GAE)
deny from 8.35.200.0/21
deny from 23.251.128.0/19
deny from 104.154.0.0/15
deny from 104.196.0.0/14
deny from 107.178.192.0/18
# freshstack.com.au
deny from 103.18.252.0/22
# coloat.com
deny from 107.181.160.0/19
# catalysthost.com
deny from 162.250.232.0/22
# noc4host.com
deny from 162.252.80.0/21
# securedservers.com
deny from 23.235.224.0/19
# ramnode.com
deny from 107.161.16.0/20
deny from 107.191.96.0/19
# inceronetwork.com, incero.com
deny from 23.29.112.0/20
deny from 23.227.160.0/19
deny from 192.211.48.0/20
# totalserversolutions.com, my-tss.com
deny from 104.200.128.0/19
deny from 107.152.96.0/20
deny from 162.216.44.0/22
deny from 172.98.64.0/19
deny from 198.8.80.0/20
# hostdime.com
deny from 109.73.168.0/24
deny from 107.161.176.0/20
deny from 198.49.64.0/20
# privatelayer.com
deny from 31.7.56.0/21
deny from 81.17.16.0/20
deny from 179.43.128.0/18
# worldstream.nl
deny from 93.190.140.0/22
# wansecurity.com
deny from 162.211.176.0/22
deny from 199.101.92.0/22
# wehostwebsites.com
deny from 192.199.240.0/20
# quickpacket.com
deny from 104.166.64.0/19
deny from 107.161.112.0/20
deny from 162.210.36.0/22
deny from 162.217.172.0/22
deny from 162.223.28.0/22
deny from 162.248.208.0/21
deny from 170.75.144.0/20
deny from 199.101.96.0/21
deny from 199.233.232.0/21
# packetflip.com
deny from 74.91.32.0/20
deny from 104.143.88.0/22
deny from 104.194.192.0/22
# aeori.com
deny from 23.249.144.0/20
deny from 68.234.0.0/19
deny from 162.221.64.0/21
deny from 198.8.72.0/21
deny from 198.91.44.0/22
# heartinternet.co.uk
deny from 79.170.40.0/21
# exigent
deny from 103.4.16.0/24
deny from 103.4.17.0/24
deny from 103.4.18.0/24
deny from 103.4.19.0/24
deny from 103.18.42.0/24
deny from 163.47.124.0/22
# psychz.net
deny from 23.238.128.0/17
# datashack
deny from 142.54.160.0/19
deny from 192.187.96.0/19
deny from 107.150.32.0/19
# versaweb.com
deny from 76.164.192.0/19
deny from 76.164.224.0/20
# fibercloud
deny from 216.145.0.0/19
# verisign
deny from 69.58.176.0/20
# corexchange.com
deny from 198.154.96.0/19
# multacom.com
deny from 104.194.224.0/19
deny from 198.52.96.0/19
deny from 204.13.152.0/22
# micfo.com
deny from 23.232.128.0/17
deny from 23.247.128.0/17
deny from 107.168.0.0/15
deny from 192.240.192.0/18
# techiemedia.net
deny from 199.80.56.0/21
# sprintdatacenter
deny from 185.38.248.0/22
# livenet, e-ring.pl
deny from 91.188.117.0/24
# turnkeyinternet.net
deny from 173.198.192.0/18
deny from 208.85.0.0/21
# cscprotectsbrands.com
deny from 165.160.10.0/24
# adtechnology
deny from 188.92.72.0/21
# poweruphosting.com
deny from 162.244.8.0/21
# portlane.com
deny from 46.246.0.0/17
# supremebytes.net
deny from 23.92.48.0/20
# wowrack.com
deny from 216.244.64.0/19
# enzu.com
deny from 23.88.0.0/15
deny from 23.244.0.0/15
deny from 104.202.0.0/15
# ipstrada.net
deny from 199.15.232.0/21
# xeex.com
deny from 216.152.240.0/20
# idealhosting.net.tr, used by buyurl
deny from 213.238.168.0/21
# pair.com
deny from 64.130.0.0/18
# hostus.us
deny from 216.189.144.0/20
# cloudradium
deny from 192.151.192.0/18
# AS24544 pangnet
deny from 43.240.12.0/22
deny from 43.252.228.0/22
deny from 43.254.216.0/22
deny from 45.64.74.0/23
deny from 45.64.112.0/23
deny from 103.21.139.0/24
deny from 103.30.40.0/22
deny from 103.224.80.0/22
deny from 103.229.124.0/22
deny from 103.238.224.0/22
deny from 103.240.200.0/22
deny from 103.240.200.0/24
deny from 103.241.48.0/22
deny from 103.242.132.0/22
deny from 103.243.24.0/22
deny from 103.243.128.0/22
deny from 103.244.88.0/22
deny from 103.246.244.0/22
deny from 122.10.80.0/20
deny from 122.10.112.0/21
deny from 123.108.108.0/22
deny from 123.254.104.0/21
deny from 182.237.0.0/22
deny from 192.225.230.0/23
# VolumeDrive
deny from 104.193.8.0/22
deny from 104.255.64.0/21
# NetInch
deny from 185.31.136.0/22
# fasthosts
deny from 88.208.252.0/23
# ghostnet.de
deny from 5.230.233.0/24
# colo4
deny from 72.29.96.0/19
deny from 72.249.0.0/17
deny from 72.249.128.0/18
# 9net.it
deny from 66.71.128.0/18
# hostpoint
deny from 217.26.48.0/21
# 24shells
deny from 108.175.160.0/20
# ladedicated
deny from 64.110.24.0/22
deny from 104.192.224.0/22
deny from 162.251.164.0/22
deny from 216.105.168.0/22
# bright house networks
deny from 75.112.0.0/14
# outofwall
deny from 192.169.96.0/19
# simplelink
deny from 45.56.128.0/18
deny from 104.238.32.0/19
# madeit
deny from 199.114.216.0/21
# dreamhost
deny from 66.33.192.0/19
deny from 69.163.128.0/17
deny from 75.119.192.0/19
deny from 173.236.128.0/17
deny from 208.113.128.0/17
# Unlimited Web Hosting UK LTD
deny from 149.255.56.0/21
# ecommerce hosting
deny from 98.130.0.0/15
# colocall
deny from 62.149.32.0/19
# piradius
deny from 101.99.64.0/19
# ogicom
deny from 93.157.96.0/21
# locaweb
deny from 200.234.192.0/20
# corporatecolo.com
deny from 74.124.192.0/19
# softcom
deny from 168.144.0.0/16
# tierra.net
deny from 216.104.160.0/19
# affinity.com, hostway
deny from 64.71.32.0/19
# rackspace
deny from 119.9.0.0/18
deny from 134.213.0.0/16
# netestate
deny from 81.209.128.0/17
# interserver
deny from 64.20.32.0/19
deny from 209.159.144.0/20
deny from 216.158.224.0/20
# vhoster.net
deny from 91.200.12.0/22
# zscaler
deny from 104.129.192.0/20
# c9bot, as29550.net, simply transit
deny from 31.193.128.0/20
deny from 94.76.192.0/18
deny from 151.236.32.0/19
# easynet
deny from 195.40.0.0/16
# a1colo
deny from 216.17.96.0/20
# ukservers, expressvpn
deny from 94.229.64.0/20
# xovi, First Colo
deny from 185.53.44.0/22
# liquidweb
deny from 72.52.128.0/17
deny from 209.59.128.0/18
# privax, hidemyass
deny from 5.62.0.0/18
deny from 31.7.187.0/24
deny from 185.25.84.0/22
# netelligent, privax
deny from 68.71.32.0/19
deny from 205.204.64.0/19
# azuria.net
deny from 62.233.32.0/19
# oplink.net
deny from 66.187.64.0/20
# axinet.com
deny from 62.73.0.0/19
# core-backbone.com
deny from 31.7.184.0/21
deny from 5.56.16.0/22
deny from 5.56.20.0/22
# deac.eu
deny from 178.16.16.0/20
# nephax.com
deny from 188.116.0.0/18
# netrouting.com
deny from 208.76.52.0/22
# yhsrv.com
deny from 104.207.32.0/19
# oppobox
deny from 107.190.160.0/20
# contina
deny from 107.181.64.0/20
deny from 167.160.96.0/19
# trendmicro.com JP
deny from 150.70.172.0/24
deny from 150.70.173.0/24
# infolink.com, serverpronto.net, syptec.com
deny from 69.60.96.0/19
# skiplink
deny from 66.55.64.0/20
# jchost.net
deny from 199.91.172.0/22
deny from 199.193.152.0/22
# voxility.net
deny from 5.254.64.0/20
# systemmetrics.com
deny from 66.135.224.0/19
# scalematrix.com
deny from 162.217.192.0/21
# senawave.com
deny from 162.218.216.0/21
# radiant.net
deny from 64.85.32.0/19
deny from 216.40.96.0/19
# barracuda.com
deny from 64.235.144.0/20
# astutehosting.com
deny from 162.213.156.0/22
deny from 162.245.144.0/22
deny from 199.196.6.0/23
# webslice.co.nz
deny from 103.250.232.0/24
deny from 103.250.233.0/24
deny from 103.250.234.0/24
deny from 103.250.235.0/24
# royahosting.com
deny from 45.42.128.0/17
deny from 45.59.128.0/18
deny from 104.224.0.0/18
# fastserv.com, fast-serv.com
deny from 74.115.208.0/21
deny from 198.241.44.0/22
deny from 199.58.160.0/21
# 3ds, agarik
deny from 178.255.208.0/21
# masergy.com
deny from 64.47.0.0/16
# cronomagic.com
deny from 108.161.160.0/20
# oBot http://filterdb.iss.net/crawler/
deny from 194.153.113.0/24
deny from 206.253.224.0/24
deny from 206.253.225.0/24
deny from 206.253.226.0/24
# ioflood.com
deny from 23.226.64.0/20
# bandcon.com, highwinds.com
deny from 64.145.64.0/19
deny from 81.171.32.0/19
# eweka.nl
deny from 81.171.64.0/20
deny from 81.171.80.0/21
deny from 81.171.88.0/21
deny from 81.171.96.0/19
# q9.com
deny from 67.210.208.0/20
deny from 69.46.96.0/19
deny from 98.158.80.0/20
# axxs.net, olm.net
deny from 65.18.128.0/18
deny from 65.18.192.0/19
# akn.ca
deny from 66.135.96.0/19
# questzones.com
deny from 64.66.16.0/20
# hoyos, spiralight
deny from 204.15.104.0/21
# vocus.co.nz, fx.net.nz
deny from 131.203.128.0/17
# pointtoserver.com, Secure Internet LLC, purevpn
deny from 104.243.240.0/20
deny from 172.111.128.0/17
deny from 192.253.240.0/20
# datafoundry.com YHC, vyprvpn
deny from 206.127.0.0/19
deny from 207.207.0.0/18
deny from 209.99.0.0/17
deny from 216.166.0.0/17
# globalfrag.com
deny from 104.223.128.0/17
deny from 192.200.192.0/19
# 1&1 1and1.com schlund
deny from 212.227.0.0/16
deny from 217.160.0.0/16
# hostwinds.com
deny from 23.254.128.0/17
deny from 104.168.128.0/17
# keyweb.de
deny from 62.141.48.0/20
# kionetworks.com
deny from 201.175.0.0/19
# iomart rapidswitch.com
deny from 82.145.32.0/19
# safehost.com
deny from 80.80.224.0/20
# namecheaphosting.com
deny from 68.65.120.0/22
# b2netsolutions.com, servermania.com
deny from 192.198.96.0/19
# carpathiahost.com
deny from 173.245.96.0/19
# level3.com
deny from 64.208.0.0/16
deny from 64.209.0.0/17
# gmw.cn, gmy, Guang Ming Cloud Computing
deny from 103.44.204.0/22
# VPNs under korea telecom (kt.com)
deny from 14.47.125.0/24
# syntax.net, syntax.com
deny from 192.12.0.0/24
# tzulo.com
deny from 206.226.64.0/18
# peak10.com
deny from 74.84.208.0/20
# fortunix.net
deny from 200.7.98.0/23
# arima.ca
deny from 66.196.32.0/20
# netcup.de
deny from 188.68.48.0/21
# instavps.com
deny from 104.143.64.0/20
# cloudie.hk
deny from 45.124.24.0/22
# heiyao-power.com
deny from 103.192.36.0/22
# syseleven.net
deny from 37.44.0.0/21
deny from 37.49.152.0/21
deny from 37.123.104.0/21
deny from 77.247.80.0/21
deny from 109.68.224.0/21
deny from 151.252.40.0/21
deny from 176.74.56.0/21
deny from 185.46.136.0/22
# esecuredata.com
deny from 71.19.240.0/20
# tier4dc.in, cloud4c.com
deny from 103.231.100.0/22
# queryfoundry.org, queryfoundry.com
deny from 104.152.212.0/22
# exponential-e.com, exponential-e.net
deny from 31.221.0.0/17
# ehostidc.co.kr
deny from 27.255.64.0/19
deny from 61.97.240.0/20
# freebit.com
deny from 36.54.32.0/24
# host1plus.com
deny from 191.101.224.0/20
# webzilla.com
deny from 188.42.164.0/22
# Petersburg Internet Network pinspb.ru
deny from 188.143.128.0/17
# flokinet.is
deny from 185.100.84.0/22
# virtuzo.com
deny from 104.222.128.0/19
# fevvo.com
deny from 172.86.224.0/20
# gulf-4host.com, nitrous-networks.com, hydra communications
deny from 77.81.191.0/24
# hostzors.com
deny from 52.128.0.0/20
# m247.com, cyberghostvpn.com
deny from 77.243.183.0/24
# xtom.com.hk
deny from 103.192.224.0/22
# durabledns.com
deny from 162.217.24.0/21
# onavo.com
deny from 147.75.208.0/20
deny from 185.89.216.0/22
# kwdatacenter.com
deny from 45.62.192.0/18
deny from 104.233.64.0/18
# surfcontrol, forcepoint.com, forcepoint.net
deny from 192.151.176.0/20
deny from 208.87.232.0/21
# ofidc.com
deny from 103.211.192.0/22
# park-web.ru
deny from 83.217.8.0/22
# mcafee vpn
deny from 161.69.0.0/16
# digitalfyre.com
deny from 104.145.224.0/20
# xirra.net, surfeasy.com
deny from 195.138.240.0/24
# logicweb.com
deny from 196.52.0.0/14
# hosteurope.de, bestsparks
deny from 92.42.104.0/21
# class C blocks that contain ip anonymizers
deny from 41.215.160.0/24
# Various problematic class Cs from China
deny from 1.202.219.0/24
deny from 14.17.18.0/24
deny from 14.17.29.0/24
deny from 14.17.34.0/24
deny from 42.62.37.0/24
deny from 101.226.33.0/24
deny from 101.226.51.0/24
deny from 101.226.65.0/24
deny from 101.226.66.0/24
deny from 101.226.89.0/24
deny from 101.226.102.0/24
deny from 110.53.183.0/24
deny from 110.75.171.0/24
deny from 110.75.172.0/24
deny from 110.75.173.0/24
deny from 110.75.174.0/24
deny from 110.75.175.0/24
deny from 111.161.56.0/24
deny from 111.161.62.0/24
deny from 112.64.235.0/24
deny from 112.65.193.0/24
deny from 113.108.81.0/24
deny from 123.180.227.0/24
deny from 125.39.240.0/24
deny from 180.153.114.0/24
deny from 180.153.160.0/24
deny from 180.153.161.0/24
deny from 180.153.163.0/24
deny from 180.153.201.0/24
deny from 180.153.205.0/24
deny from 180.153.206.0/24
deny from 180.153.211.0/24
deny from 180.153.212.0/24
deny from 180.153.213.0/24
deny from 180.153.214.0/24
deny from 180.153.240.0/24
deny from 183.60.244.0/24
deny from 220.181.158.0/24
deny from 222.73.76.0/24
deny from 222.73.77.0/24
# visafone ISP in Nigeria - source of scammers likely using vpnsecure.me
deny from 41.138.160.0/19
deny from 41.71.171.0/17
# spectranet ISP in Nigeria - source of scammers hiding behind anonymizers
deny from 197.242.0.0/16
deny from 197.255.0.0/16
# multilinks.com - Multilinks Telecommunications in Nigeria - source of scammers hiding behind anonymizers
deny from 82.128.0.0/20
# airtel.com - Nigerian scammers
deny from 196.46.240.0/21
# Etisalat and EMTS-Commercial Nigeria - more scammers
deny from 41.190.0.0/16
# emts commercial - source of scammers and anonymizers
deny from 41.190.0.0/19
# allow everyone else in
allow from all
</Location>