Skip to content

Instantly share code, notes, and snippets.

@tyabus
Last active June 17, 2024 15:46
Show Gist options
  • Save tyabus/cc290f2321c5accc99dd1dedbd1619f0 to your computer and use it in GitHub Desktop.
Save tyabus/cc290f2321c5accc99dd1dedbd1619f0 to your computer and use it in GitHub Desktop.
Bad IP Subnets (IPv4 only)
# static ingoing traffic blocklist
# CENSYS https://support.censys.io/hc/en-us/articles/360043177092-Opt-Out-of-Scanning
-A INPUT -s 162.142.125.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 167.94.138.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 167.94.145.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 167.94.146.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 167.248.133.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 199.45.154.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 199.45.155.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 206.168.32.0/22 -j REJECT --reject-with icmp-host-unreachable
# CENSYS Unlisted
-A INPUT -s 192.35.168.0/23 -j REJECT --reject-with icmp-host-unreachable
# Expanse, a Palo Alto Networks Company. https://www.weaverconsulting.ca/banned.html
-A INPUT -s 34.96.130.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 34.77.162.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 34.86.35.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 205.210.31.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 198.235.24.0/24 -j REJECT --reject-with icmp-host-unreachable
# Shodan LLC
-A INPUT -s 207.90.244.0/24 -j REJECT --reject-with icmp-host-unreachable
# CariNet LLC (shodan)
-A INPUT -s 135.84.216.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 209.126.128.0/17 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 216.75.0.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 216.98.128.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 66.240.192.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 71.6.128.0/17 -j REJECT --reject-with icmp-host-unreachable
# Chang Way Technologies Co. Limited
-A INPUT -s 45.93.20.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 62.122.184.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 62.233.50.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 85.209.11.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 87.247.158.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 91.240.118.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 91.241.19.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 152.89.198.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 176.111.174.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.11.61.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.81.68.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.122.204.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.198.69.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.234.216.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 188.119.66.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.26.135.0/24 -j REJECT --reject-with icmp-host-unreachable
# PPTechnology Limited
-A INPUT -s 45.148.10.0/24 -j REJECT --reject-with icmp-host-unreachable
# Constantine Cybersecurity Ltd.
-A INPUT -s 87.236.176.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 193.163.125.0/24 -j REJECT --reject-with icmp-host-unreachable
# Securitytrails LLC
-A INPUT -s 193.3.53.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 195.230.103.0/24 -j REJECT --reject-with icmp-host-unreachable
# Red Byte LLC
-A INPUT -s 109.196.166.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 213.109.202.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 2.57.149.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 83.97.73.0/24 -j REJECT --reject-with icmp-host-unreachable
# Academy for Internet Research LLC
-A INPUT -s 104.156.155.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 195.96.137.0/24 -j REJECT --reject-with icmp-host-unreachable
# Alsycon B.V.
-A INPUT -s 2.56.167.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.80.36.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.81.21.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.81.22.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.95.144.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.95.146.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.95.147.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.140.222.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.83.240.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.116.202.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.190.156.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.190.159.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 169.239.130.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.142.130.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.224.128.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.50.16.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.50.17.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 212.107.12.0/24 -j REJECT --reject-with icmp-host-unreachable
# FiberXpress BV
-A INPUT -s 91.202.208.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.173.235.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.216.140.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.216.143.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.225.112.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.237.100.0/24 -j REJECT --reject-with icmp-host-unreachable
# VF Services Inc (with unlisted)
-A INPUT -s 167.64.0.0/16 -j REJECT --reject-with icmp-host-unreachable
# IP Volume Inc
-A INPUT -s 45.148.144.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 80.82.64.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 80.82.68.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 80.82.70.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 80.82.76.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.248.160.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.248.168.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.248.172.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.248.174.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 92.63.196.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 93.174.88.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 94.102.48.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 145.249.104.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.242.226.0/24 -j REJECT --reject-with icmp-host-unreachable
# Hong Kong Zhengxing Technology Ltd.
-A INPUT -s 185.233.19.0/24 -j REJECT --reject-with icmp-host-unreachable
# Miti 2000 EOOD
-A INPUT -s 78.128.113.0/24 -j REJECT --reject-with icmp-host-unreachable
# Cat Technologies Co. Ltd.
-A INPUT -s 31.41.244.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 176.113.115.0/24 -j REJECT --reject-with icmp-host-unreachable
# 4Media Ltd.
-A INPUT -s 78.128.112.0/24 -j REJECT --reject-with icmp-host-unreachable
# Amarutu Technology Ltd.
-A INPUT -s 5.183.209.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 31.220.0.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 31.220.40.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.226.231.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.243.160.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.243.163.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.74.3.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.74.41.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.115.25.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.129.84.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.139.122.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 80.251.152.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 85.202.80.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.249.49.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 93.123.72.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 94.156.33.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.28.88.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.46.141.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.47.145.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.47.147.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.55.8.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.55.10.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.109.100.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.173.225.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 104.243.250.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 122.254.117.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 149.57.22.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 172.94.21.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 172.111.168.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 172.111.192.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 172.111.220.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 172.111.234.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 172.111.252.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 183.81.168.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.169.253.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.191.124.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.192.98.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 192.253.240.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 192.253.242.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 192.253.252.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 198.144.120.0/23 -j REJECT --reject-with icmp-host-unreachable
# Sia Socks
-A INPUT -s 195.3.144.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 195.3.147.0/24 -j REJECT --reject-with icmp-host-unreachable
# Bangladesh Research and Education Network (BdREN)
-A INPUT -s 103.28.120.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.140.181.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.147.242.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.147.243.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.157.134.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.157.135.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.159.2.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 163.47.36.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.96.188.0/22 -j REJECT --reject-with icmp-host-unreachable
# James Freeman (SircrosarNET)
-A INPUT -s 147.78.103.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.216.70.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 93.123.39.0/24 -j REJECT --reject-with icmp-host-unreachable
# PT. Uninet Media Sakti
-A INPUT -s 103.155.250.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.155.251.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.158.56.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.158.57.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.174.234.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.174.235.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 202.145.0.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 202.145.1.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 202.145.2.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 202.145.3.0/24 -j REJECT --reject-with icmp-host-unreachable
# Telkom Internet LTD
-A INPUT -s 31.43.191.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 92.63.197.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.156.73.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.156.74.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.193.88.0/24 -j REJECT --reject-with icmp-host-unreachable
# FastBit AB
-A INPUT -s 2.57.244.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 83.223.0.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.14.47.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.71.192.0/22 -j REJECT --reject-with icmp-host-unreachable
# BlackHOST LTD.
-A INPUT -s 185.30.233.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.142.236.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.142.238.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.142.239.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.165.188.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.165.190.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.165.191.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 195.144.21.0/24 -j REJECT --reject-with icmp-host-unreachable
# Emanuel Hosting Ltd.
-A INPUT -s 79.110.62.0/24 -j REJECT --reject-with icmp-host-unreachable
# UAB Host Baltic
-A INPUT -s 91.224.92.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 141.98.8.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 141.98.10.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 141.98.11.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.36.81.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.169.4.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 193.31.6.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.169.175.0/24 -j REJECT --reject-with icmp-host-unreachable
# AS216246 Aeza Group Ltd.
-A INPUT -s 45.15.158.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.142.122.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 85.192.56.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.17.0.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.112.83.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.174.136.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.229.66.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.26.229.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 194.67.201.0/24 -j REJECT --reject-with icmp-host-unreachable
# AS210644 AEZA INTERNATIONAL LTD
-A INPUT -s 5.42.72.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 5.42.80.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 5.42.94.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 5.42.99.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 5.42.100.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 5.42.104.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 5.182.86.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 5.252.118.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.15.157.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.15.159.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.138.74.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 46.226.160.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.73.131.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.91.70.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.91.78.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.91.84.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.105.146.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.105.166.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.221.136.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.221.148.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.221.152.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 77.232.142.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 78.153.130.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 79.137.194.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 79.137.196.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 79.137.202.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 79.137.204.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 79.137.248.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 80.85.241.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 81.19.137.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 85.192.40.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 85.192.56.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 85.192.63.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.185.85.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.208.103.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 89.208.104.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 91.103.252.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 91.108.240.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 92.246.136.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 94.142.138.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 94.228.162.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 94.228.164.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 94.228.168.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 95.181.173.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 109.107.181.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 109.107.189.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 109.107.190.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 109.120.184.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 147.45.40.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 147.45.68.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 147.45.72.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 176.124.198.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 176.124.220.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 178.236.246.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.106.93.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.106.94.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.174.137.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.217.197.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.225.200.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 185.229.65.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 193.233.133.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 193.233.232.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 212.113.106.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 212.113.116.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 212.113.119.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 217.196.98.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 217.196.103.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 217.196.106.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 217.197.107.0/24 -j REJECT --reject-with icmp-host-unreachable
# AS132203 Tencent Building, Kejizhongyi Avenue
-A INPUT -s 1.12.0.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 1.12.34.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 1.201.184.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 1.201.188.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.128.0.0/15 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.130.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.131.0.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.131.224.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.132.0.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.132.68.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.132.96.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.132.128.0/17 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.133.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.134.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.135.0.0/17 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.135.128.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.135.192.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.152.64.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.152.80.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.152.90.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.152.92.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.152.96.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.152.112.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.152.192.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.153.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.154.0.0/15 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.156.0.0/15 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.158.0.0/17 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.158.192.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.159.0.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.159.128.0/17 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.160.0.0/17 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.160.128.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.160.192.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.161.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.162.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.163.0.0/17 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 43.163.192.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.40.216.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.113.68.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 45.146.112.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.0.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.32.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.48.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.62.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.64.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.96.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.104.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.108.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.128.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.192.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.224.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.228.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.232.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 49.51.240.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.32.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.0.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.4.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.10.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.17.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.18.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.26.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.30.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.32.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.41.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.42.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.44.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.48.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.64.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 101.33.128.0/18 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.7.28.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.52.216.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 103.238.16.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 119.28.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 119.29.29.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 120.53.52.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 120.88.56.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 121.4.4.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 124.156.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 129.226.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 150.109.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 156.240.88.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.14.0.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.14.32.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.14.48.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.10.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.14.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.42.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.48.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.64.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.80.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.96.0/19 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.128.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.132.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.136.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.144.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.160.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.168.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.208.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 162.62.224.0/20 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 170.106.0.0/16 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 182.254.116.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 182.254.118.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.128.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.134.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.136.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.144.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.155.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.156.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.159.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.188.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.191.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.192.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.218.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.220.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.224.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.232.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.240.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.242.0/24 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 203.205.248.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 210.171.232.0/21 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 210.180.74.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 211.56.92.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 211.152.128.0/22 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 211.152.132.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 211.152.148.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 211.152.154.0/23 -j REJECT --reject-with icmp-host-unreachable
-A INPUT -s 211.152.158.0/23 -j REJECT --reject-with icmp-host-unreachable
# Last Update: 17/05/2024 00:22 (GMT+5)
@tyabus
Copy link
Author

tyabus commented Jun 17, 2024

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment