This blocklist was last updated on Friday, 30-May-2008 17:41:55 MDT order deny,allow # Nigerian/African 419 Scammers IP addresses follow: deny from 12.166.96.32/27 41.202.0.0/17 41.202.128.0/19 41.204.0.0/17 41.204.128.0/18 41.204.224.0/19 41.205.160.0/19 41.207.0.0/19 41.207.192.0/19 41.208.128.0/18 41.210.0.0/18 41.211.0.0/19 41.211.192.0/18 41.219.192.0/18 41.220.0.0/16 41.222.24.0/21 41.222.40.0/21 41.222.64.0/21 41.223.24.0/22 41.223.248.0/22 41.248.0.0/16 41.250.0.0/16 61.11.230.112/29 62.56.128.0/17 62.56.235.0/24 62.56.236.0/24 62.56.244.0/22 62.56.248.0/24 62.128.160.0/20 62.173.32.0/19 62.192.128.0/19 62.192.140.250 62.193.160.0/19 63.70.178.0/24 63.73.58.0/24 63.100.193.0/24 63.103.138.0/24 63.103.139.64/26 63.103.140.0/22 63.109.245.168/29 63.109.247.0/24 63.109.248.128/25 63.122.154.0/24 64.14.48.128/26 62.24.96.0/19 64.86.155.0/24 64.86.210.0/23 64.110.30.0/24 64.110.31.0/24 64.110.64.16/28 64.110.76.0/23 64.110.81.0/24 64.110.93.16/28 64.110.93.176/28 64.110.147.0/24 64.201.33.0/24 65.209.91.0/24 65.209.92.0/24 66.18.64.0/19 66.110.31.0/24 66.178.0.0/17 66.199.241.82 66.205.20.0/24 deny from 77.70.128.0/24 77.70.129.0/26 77.70.137.0/25 77.70.138.0/23 77.73.184.0/21 77.220.0.0/20 78.138.2.0/24 80.78.16.168/29 80.78.16.176/28 80.78.16.192/28 80.78.17.0/24 80.78.18.88/29 80.78.18.96/27 80.78.18.128/29 80.78.19.16/29 80.78.19.104/29 80.78.19.112/28 80.78.23.16/28 80.87.64.0/19 80.88.128.0/20 80.88.129.0/24 80.88.130.0/24 80.88.131.0/24 80.88.132.0/26 80.88.132.64/27 80.88.132.104/29 80.88.132.128/26 80.88.132.192/27 80.88.132.224/28 80.88.132.240/29 80.88.133.0/25 80.88.134.0/26 80.88.134.64/29 80.88.135.0/24 80.88.136.0/24 80.88.137.0/24 80.88.138.0/25 80.88.138.128/26 80.88.138.192/27 80.88.139.0/25 80.88.139.128/26 80.88.139.192/27 80.88.139.224/28 80.88.140.0/24 80.88.141.0/25 80.88.141.128/27 80.88.142.0/24 80.88.143.128/24 80.88.144.0/23 80.88.146.0/24 80.88.147.0/24 80.88.148.0/24 80.88.149.0/25 80.88.149.128/26 80.88.149.192/28 80.88.150.0/24 80.88.151.0/24 80.88.152.0/24 80.88.153.0/24 80.88.154.32/27 80.88.154.72/29 80.88.154.80/29 80.88.154.96/28 80.88.155.0/25 80.88.155.128/27 80.88.155.160/29 80.89.176.0/24 deny from 80.179.102.0/24 80.179.107.64/27 80.179.107.224/29 80.179.128.0/17 80.231.4.0/23 80.240.192.0/20 80.247.136.0/24 80.247.137.0/24 80.247.141.32/27 80.247.141.64/26 80.247.141.128/25 80.247.142.0/24 80.247.147.16/28 80.247.147.32/29 80.247.147.64/27 80.247.147.96/28 80.247.151.0/24 80.247.153.0/24 80.247.156.0/26 80.247.156.128/28 80.247.157.0/24 80.247.159.0/24 80.248.0.0/20 80.248.64.0/23 80.248.70.0/20 80.248.64.0/20 80.250.32.0/20 80.255.40.48/28 80.255.40.96/29 80.255.40.112/28 80.255.40.128/28 80.255.40.192/28 80.255.40.224/27 80.255.40.240/28 80.255.41.160/28 80.255.43.0/24 80.255.46.0/29 80.255.46.16/28 80.255.46.64/29 80.255.58.160/27 80.255.58.192/26 80.255.59.19 80.255.59.0/24 80.255.61.0/25 81.18.32.0/20 81.18.40.0/24 81.18.42.0/24 81.23.194.0/27 81.23.194.64/27 81.23.194.128/25 81.23.195.0/24 81.23.196.0/25 81.23.196.128/29 81.23.200.0/21 81.24.0.0/20 81.91.224.0/20 81.199.0.0/16 82.128.0.0/17 82.205.242.0/23 83.137.59.8/29 83.137.61.0/24 83.138.167.40/29 83.229.0.0/17 84.254.188.3 84.254.128.0/18 deny from 155.239.0.0/16 192.116.64.0/18 192.116.128.0/18 192.116.152.0/21 192.118.71.0/24 193.95.0.0/17 193.110.2.0/23 193.189.0.0/18 193.189.64.0/23 193.189.128.0/24 193.194.64.0/19 193.219.192.0/18 193.220.0.0/16 193.220.26.0/24 193.220.30.0/26 193.220.30.64/27 193.220.31.0/26 193.220.31.64/27 193.220.45.0/25 193.220.47.0/25 193.220.77.0/26 193.220.187.0/26 193.220.187.128/27 195.8.22.0/24 195.10.109.192/26 195.24.192.0/19 195.44.168.0/21 195.44.176.0/21 195.137.13.0/24 195.137.14.0/24 195.166.224.0/19 195.214.240.0/21 195.219.176.0/24 195.225.62.0/23 195.245.108.0/23 196.0.0.0/16 196.1.176.0/20 196.3.60.0/22 196.20.0.0/19 196.29.216.0/21 196.29.224.0/20 196.44.96.0/19 196.45.192.0/18 196.128.0.0/10 196.192.0.0/12 196.208.0.0/14 196.220.0.0/19 198.54.0.0/16 204.118.170.0/24 208.70.0.0/21 208.78.56.0/21 209.88.163.0/24 209.101.84.0/24 209.159.160.0/20 209.198.240.0/23 209.198.242.16/28 209.198.242.96/29 209.198.242.104/30 209.198.242.108/31 209.198.242.128/27 209.198.246.240/28 212.49.64.0/19 212.60.64.0/19 212.85.192.0/19 212.96.0.0/19 212.100.64.0/19 212.165.128.0/17 212.165.132.64/27 212.165.135.0/24 212.165.140.16/29 212.165.140.64/26 212.165.140.128/25 212.165.141.0/24 212.165.147.0/26 212.165.147.128/26 212.165.183.0/24 212.199.108.0/24 212.199.251.0/24 212.247.93.0/24 deny from 213.136.96.0/19 213.140.62.0/23 213.150.192.0/23 213.154.64.0/19 213.166.160.0/19 213.181.64.0/19 213.185.96.0/21 213.185.106.0/24 213.185.112.0/24 213.185.113.0/26 213.185.113.64/27 213.185.113.96/27 213.185.118.192/26 213.185.124.0/24 213.187.135.0/24 213.187.145.0/24 213.211.128.0/18 213.211.188.0/24 213.232.96.0/24 213.255.193.0/24 213.255.194.0/24 213.255.195.0/24 213.255.198.0/24 213.255.199.0/24 216.72.104.0/21 216.74.187.0/24 216.118.252.0/24 216.118.253.0/24 216.118.254.0/24 216.129.147.128/28 216.129.159.0/24 216.133.174.0/24 216.139.160.0/19 216.147.132.144/28 216.147.132.160/28 216.147.134.0/24 216.147.159.0/24 216.185.79.0/24 216.236.200.96/28 216.236.202.96/28 216.236.205.0/24 216.236.222.128/26 216.250.195.0/27 216.250.195.64/26 216.250.221.0/24 216.250.222.0/24 216.252.176.0/24 216.252.177.0/24 216.252.231.0/25 216.252.245.0/24 217.10.163.128/26 217.10.163.192/27 217.10.163.224/27 217.10.166.0/26 217.10.166.64/28 217.10.169.0/24 217.10.170.0/24 217.10.171.0/24 217.10.173.0/26 217.10.182.0/27 217.10.184.0/24 217.14.80.0/20 217.15.124.0/25 217.20.240.0/20 217.20.241.0/25 217.20.241.128/29 217.20.241.136/29 217.20.241.144/28 217.20.241.160/29 217.20.241.168/29 217.20.241.176/29 217.20.241.184/29 217.20.241.192/29 217.20.241.200/29 217.20.241.208/29 217.20.242.0/24 217.20.243.16/28 217.20.243.32/27 217.21.64.0/19 217.78.64.0/20 217.117.0.0/20 217.146.3.144/28 217.146.3.160/28 217.146.3.176/29 217.146.3.224/27 217.146.4.64/26 217.146.5.0/24 217.146.6.0/25 217.146.6.160/27 217.146.7.0/24 217.146.8.0/25 217.146.9.0/24 217.146.10.128/25 217.146.11.0/25 217.146.12.0/24 217.146.13.0/24 217.146.14.0/25 217.146.15.0/25 217.146.16.0/27 217.146.16.32/29 217.168.112.0/20 217.194.140.0/22 217.194.144.0/20 217.199.144.0/20 217.212.242.0/23 # Pretoria Z.A. Used by some lottery scammers. Block these CIDRs if you get scammers from Pretoria, but no legit visitors! deny from 41.241.0.0/16 41.242.0.0/16 41.243.0.0/16 41.246.0.0/16 # Johannesburg Telekom, ZA. deny from 165.146.0.0/18 # Algeria deny from 41.200.0.0/15 193.194.64.0/19 # Added Goldenlines.net.il (Israel) because of Open Proxies used by Nigerian scammers deny from 80.179.244.0/24 # Amsterdam, The Netherlands Versatel Nederland DSL-NAT Customers - Lottery and 419 scammers deny from 62.59.36.0/22 62.59.40.0/21 62.59.48.0/22 82.93. 82.168.0.0/14 87.249.104.0/23 # Freenet in Germany (freenet.de); Used as spam relay by many Nigerian scammers, in March, 2008. # Choose one of the following CIDRs: # Narrow freenet.de CIDR, used by recent scammers: deny from 195.4.92.0/23 # Full Freenet.de CIDR: deny from 195.4.0.0/16 # ISPs in Spain, France and Italy, used by many expatriot Nigerian lottery and 419 scammers (Cableuropa, Ibercom, Ono.com, Telefonica) deny from 80.25.0.0/16 80.36.0.0/14 81.34.0.0/16 84.120.0.0/13 85.91.64.0/19 88.14.0.0/16 88.202.124.0/27 147.83.0.0/16 193.252.22.0/24 195.53.0.0/16 213.194.128.0/18 213.194.144.0/20 # 193.252.22.0/24 = orange.fr, in Paris, France. Constant 419 scams coming from their email servers! # Costa Rica exceptions: allow from 196.40.0.0/18 196.40.64.0/19 # Newest Nigerian/African ISP additions/subtractions below: # Jan 4, 2008; Added 41.211.0.0/19 (Ghana scammers) # Jan 8, 2008: Added 77.70.128.0/24 77.70.129.0/26 77.70.138.0/23 (NG) # Jan 10, 2008: Changed the CIDR 80.255.41.160/29 to 80.255.41.160/28 to include 8 new IPs, assigned to Lagos NG. # Jan 13, 2008: Added 80.78.23.16/28 (NG), 83.137.59.8/29 and 196.44.96.0/19 (Ghana scammers) # Jan 15, 2008: Added 196.3.61.0/24 (Starcomms Nigeria Limited) # Jan 27, 2008: Added 196.29.216.0/21 (DirectonPC Nigeria) and moved Turkish IP list to the Russian Blocklist # Feb 02, 2008: Added 196.45.192.0/18 (Q-kon Pty Ltd, Lagos, NG) # Feb 15, 2008: Added 196.1.176.0/20 (Nigerian Telecommunications Ltd.) # Feb 17, 2008: Added 80.255.61.0/25 (INTELSAT-CUST-globalcom-NG) # Feb 25, 2008: Added 195.10.109.192/26 (Ghana) # Mar 26, 2008: Added; 80.78.19.104/29 (NG), 80.78.19.112/28 (NG and GH) # Mar 28, 2008: Added ISPs in Spain, below, due to Nigerian 419 lottery scammers living there # Apr 03, 2008: Added 217.21.64.0/19 (Gilat Satcom IPPlanet satellite service to Nigeria and Africa) # Apr 07, 2008: Added 195.214.240.0/21 waycom.net in France, for Nigerian 419 scam emails # Apr 07, 2008: Added 213.194.128.0/18 and 213.194.144.0/20 in Spain, due to Nigerian 419 scammers # Apr 11, 2008: Added 196.29.224.0/20 (GH) # May 04, 2008: Added 87.249.104.0/23 (Amsterdam, NL, JR Online) # May 05, 2008: Added 196.208.0.0/14 (Johannesburg, Gauteng, South Africa) # May 06, 2008: Added 63.109.247.0/24 New Skies Satellite Service used by Nigerian 419 scammers # May 06, 2008: Added 88.202.124.0/27 below. Skylogic.net satellite service, Italy; used by Nigerian 419 scammers # May 06, 2008: Added 80.78.19.16/29 Nigeria (ConstellationCorp) # May 09, 2008: Expanded 196.3.61.0/24 to 196.3.60.0/22 to include full CIDR for Starcomms of Lagos, Nigeria # May 12, 2008: Added 147.83.0.0/16 in Spain, for spamming my contact form. # May 17, 2008: Added Algeria group; 41.200.0.0/15 193.194.64.0/19 # May 20, 2008: Added 81.34.0.0/16 RIMA in Spain, for spamming # May 21, 2008: Added 216.118.254.0/24 Ironlinks, because of Nigerian scammers using the ISP # May 27, 2008: Added 192.118.71.0/24 an Israeli satellite service used by Nigerian scammers today. # May 27, 2008: Added 85.91.64.0/19 in Santiago De Compostela, Galicia, Spain; due to Nigerian scammers # May 29, 2008: Replaced all the following IpPlanet CIDRs with 81.199.0.0/16 - 81.199.6.0/24 81.199.7.0/24 81.199.48.0/20 81.199.72.0/22 81.199.76.0/24 81.199.82.0/23 81.199.84.0/22 81.199.84.0/24 81.199.85.0/24 81.199.86.0/24 81.199.87.0/24 81.199.88.0/24 81.199.89.0/24 81.199.90.0/24 81.199.94.0/23 81.199.108.0/22 81.199.124.0/22 81.199.172.160/27 81.199.240.0/21 # End Nigerian/African blocklist # Add other blocked domain names or IP addresses here, starting with "deny from " without quotes # If you find that you need to poke a hole in the blocklist, for legitimate visitors, follow this example: allow from 123.456.789.0 # Real life example: Some forums have legitimate DSL customers in Mauritius, which is blocked by 196.0.0.0/9, in my blocklist. # To allow 8192 of these folks in Mauritius into your forums, just add the following directive: allow from 196.27.64.0/19 # Add "allow from" IP addresses, or CIDR Ranges, after all of the "deny from" items, just before the closing Files tag. # Everything not included within these deny from ranges is PERMITTED by the allow portion of the directive. # This prevents web browsers or spiders from seeing your .htaccess directives: deny from all # End of file