---
# vars file for roles/denyhost
# to add new bad actors to our deny list
# go the bottom of the file and add a new entry to the 'banned_ranges' variable
# like this:
# - name: other bad ISP
#   ip_range:
#     - ##.##.###.###/##
#     - ##.##.###.###/##
banned_ranges:
  - name: tencent cloud
    ip_range:
      - 1.12.0.0/15
      - 1.14.0.0/16
      - 1.15.0.0/32
      - 1.116.0.0/16
      - 1.117.0.0/32
      - 42.187.0.0/32
      - 42.192.0.0/16
      - 42.193.0.0/32
      - 42.194.0.0/32
      - 43.128.0.0/13
      - 43.153.0.0/16
      - 43.156.0.0/16
      - 43.163.3.166/32
      - 43.163.5.194/32
      - 45.40.0.0/32
      - 49.51.0.0/32
      - 49.232.0.0/15
      - 49.234.0.0/16
      - 49.235.0.0/32
      - 58.87.0.0/32
      - 62.234.0.0/32
      - 81.68.0.0/15
      - 81.70.0.0/16
      - 81.71.0.0/32
      - 82.156.0.0/16
      - 82.157.0.0/32
      - 101.244.0.0/32
      - 101.32.0.0/32
      - 101.33.0.0/32
      - 103.95.0.0/32
      - 103.234.0.0/32
      - 106.52.0.0/32
      - 106.55.0.0/32
      - 109.244.0.0/32
      - 111.229.0.0/32
      - 111.230.0.0/16
      - 111.231.0.0/32
      - 114.132.0.0/32
      - 115.159.0.0/32
      - 118.126.0.0/32
      - 118.195.0.0/32
      - 118.24.0.0/16
      - 118.25.0.0/32
      - 118.89.0.0/32
      - 119.27.0.0/32
      - 119.28.0.0/16
      - 119.29.0.0/32
      - 119.45.0.0/32
      - 121.4.0.0/16
      - 121.5.0.0/32
      - 122.152.0.0/32
      - 123.206.0.0/16
      - 123.207.0.0/32
      - 124.156.0.0/32
      - 124.220.0.0/15
      - 124.222.0.0/16
      - 124.223.0.0/32
      - 128.108.0.0/32
      - 129.28.0.0/32
      - 129.204.0.0/32
      - 129.211.0.0/32
      - 129.226.0.0/32
      - 132.232.0.0/32
      - 134.175.0.0/32
      - 139.155.0.0/32
      - 139.186.0.0/32
      - 139.199.0.0/32
      - 140.143.0.0/32
      - 146.56.0.0/32
      - 148.70.0.0/32
      - 150.109.0.0/32
      - 150.158.0.0/32
      - 152.136.0.0/32
      - 154.8.0.0/32
      - 159.14.0.0/32
      - 162.14.0.0/32
      - 162.62.0.0/32
      - 170.106.0.0/16
      - 172.81.0.0/32
      - 175.24.0.0/32
      - 175.27.0.0/32
      - 175.178.0.0/32
      - 182.254.0.0/32
      - 188.131.0.0/32
      - 192.144.0.0/32
      - 193.112.0.0/32
      - 203.195.0.0/32
      - 210.73.0.0/32
      - 211.159.0.0/32
      - 212.64.0.0/32
      - 212.129.0.0/32
      - 101.33.214.202

  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.153.0.0/17
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.159.128.0/18
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 49.51.0.0/16
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 170.106.168.0/21
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 170.106.176.0/20
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 170.106.192.0/18
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 162.62.208.0/20
  - name: Tencent Building, Kejizhongyi Avenue | (Description AS132203)
    ip_range:
      - 43.155.128.0/18
  - name: Shenzhen Tencent Computer Systems Company Limited | (Description AS45090)
    ip_range:
      - 1.14.128.0/18
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 170.106.0.0/17
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 170.106.128.0/19
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 170.106.160.0/21
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.130.0.0/18
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.135.128.0/18
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.134.64.0/18
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 129.226.144.0/20
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.128.0.0/14
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.132.0.0/15
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.134.0.0/16
  - name: Tencent Building, Kejizhongyi Avenue | (Description related to TASK0308130)
    ip_range:
      - 43.135.0.0/32
  - name: chinanet
    ip_range:
      - 42.187.0.0/18
      - 42.194.0.0/21
  - name: whisperisp
    ip_range:
      - 45.40.0.0/20
  - name: University of Massachusettes
    ip_range:
      - 69.16.0.0/16
  - name: Croatian Academic and Research Network
    ip_range:
      - 161.53.0.0/16
  - name: TPG Telecom Limited
    ip_range:
      - 203.87.0.0/16
  - name: TulsaConnect
    ip_range:
      - 65.38.0.0/16
  - name: Proximus NV
    ip_range:
      - 81.169.0.0/16
  - name: Jersollaine Com Internet Cafe
    ip_range:
      - 124.106.0.0/16
  - name: Rackspace Hosting
    ip_range:
      - 174.143.218.177/32
  - name: Rackspace Hosting
    ip_range:
      - 174.143.242.133/32
  - name: SoftLayer Technologies Inc. (SOFTL)
    ip_range:
      - 74.53.239.89/32
  - name: S&P Global Inc.
    ip_range:
      - 198.45.22.153/32
  - name: Sprint
    ip_range:
      - 65.163.15.186/32
  - name: Amazon.com, Inc.
    ip_range:
      - 174.129.199.56/32
  - name: Unified Layer
    ip_range:
      - 74.220.207.161/32
  - name: InMotion Hosting, Inc.
    ip_range:
      - 205.134.255.190/32
  - name: Telecom Argentina S.A.
    ip_range:
      - 186.137.97.16/32
  - name: China Unicom China169 Backbone | (Description related to TASK0308130)
    ip_range:
      - 162.62.224.0/20
  - name: China Unicom China169 Backbone
    ip_range:
      - 125.36.50.92/32
  - name: OVH SAS | (Description Dos Against Voyager)
    ip_range:
      - 198.50.204.209/32
  - name: Akamai Connected Cloud | (Description See Ticket 1923969)
    ip_range:
      - 162.216.17.37/32
  - name: OVH SAS | (Description DoS on Voyager Server)
    ip_range:
      - 176.31.241.43/32
  - name: Amazon.com, Inc. | (Description See Ticket 1953854)
    ip_range:
      - 54.208.172.180/32
  - name: Amazon.com, Inc. | (Description See Ticket 1953854)
    ip_range:
      - 54.208.10.206/32
  - name: Amazon.com, Inc. | (Description See Ticket 1953854)
    ip_range:
      - 54.208.213.60/32
  - name: Iran Cell Service and Communication Company | (Description See Ticket 1971045)
    ip_range:
      - 5.125.38.0/24
  - name: Iran Cell Service and Communication Company | (Description See Ticket 1971045)
    ip_range:
      - 5.126.154.0/24
  - name: Iran Telecommunication Company PJS | (Description See Ticket 1972642)
    ip_range:
      - 2.179.50.0/24
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | (Description related to TASK0307581)
    ip_range:
      - 47.76.99.127/32
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | (Description related to TASK0307581)
    ip_range:
      - 47.76.209.138/32
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | (Description related to TASK0307581)
    ip_range:
      - 47.76.209.138/32
  - name: AS24940 Hetzner Online GmbH | (Description related to TASK0307581)
    ip_range:
      - 5.9.95.188/32
  - name: FranTech Solutions (SYNDI-5) | (Description See Ticket TASK0267581)
    ip_range:
      - 104.244.75.185/32
  - name: RIPE Network Coordination Centre (RIPE) | (Description See Ticket TASK0267581)
    ip_range:
      - 151.115.34.124/32
  - name: AS213230 Hetzner Online GmbH | (Description See Ticket TASK0267581)
    ip_range:
      - 5.161.183.140/32
  - name: AS24940 Hetzner Online GmbH | (Description See Ticket TASK0267581)
    ip_range:
      - 148.251.176.103/32
  - name: AS14061 DigitalOcean, LLC | (Description See Ticket TASK0267581)
    ip_range:
      - 139.59.86.41/32
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | (Description related to TASK0307581)
    ip_range:
      - 47.76.99.127/32
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | (Description related to TASK0307581)
    ip_range:
      - 47.76.209.138/32
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | Catalog December
    ip_range:
      - 47.246.0.0/16
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | Catalog December
    ip_range:
      - 47.236.0.0/14
  - name: AS45102 Alibaba (US) Technology Co., Ltd. | Catalog December 2
    ip_range:
      - 47.240.0.0/14
  - name: AS45102 Alibaba (US) Technology Co., Ltd.
    ip_range:
      - 47.244.0.0/15
  - name: AS45102 Alibaba (US) Technology Co., Ltd.
    ip_range:
      - 47.235.0.0/16
  - name: ACEVILLEPTELTD-SG | Catalog 12/22/2025
    ip_range:
      - 43.160.0.0/12
  - name: China Unicom CHINA169 Network | 12/22/2025 Catalog Bot Traffic
    ip_range:
      - 116.128.0.0/10
  - name: AS24940 Hetzner Online GmbH | (Description related to TASK0307581)
    ip_range:
      - 5.9.95.188/32
  - name: AS44244 Iran Cell Service and Communication Company | (Description See Ticket 1972642)
    ip_range:
      - 2.147.48.0/24
  - name: AS35908 Krypt Technologies | (Description See Ticket 1973222)
    ip_range:
      - 98.126.12.0/24
  - name: AS26914 Synoptek, LLC | (Description See Ticket 1998772)
    ip_range:
      - 216.224.172.17/32
  - name: AS55967 Beijing Baidu Netcom Science and Technology Co., Ltd. | (Description See Ticket 2014812)
    ip_range:
      - 180.76.5.0/24
  - name: AS55967 Beijing Baidu Netcom Science and Technology Co., Ltd. | (Description See Ticket 2014812)
    ip_range:
      - 180.76.6.0/24
  - name: AS55967 Beijing Baidu Netcom Science and Technology Co., Ltd. | (Description See Ticket 2014812)
    ip_range:
      - 180.76.7.0/24
  - name: AS4808 China Unicom Beijing Province Network | (Description See Ticket 2014812)
    ip_range:
      - 123.125.71.0/24
  - name: AS23724 IDC, China Telecommunications Corporation | (Description See Ticket 2014812)
    ip_range:
      - 220.181.108.0/24
  - name: AS38627 Baidu, Inc. | (Description See Ticket 2014812)
    ip_range:
      - 119.63.192.0/21
  - name: AS9808 China Mobile Communications Group Co., Ltd. | (Description See Ticket 2117218)
    ip_range:
      - 117.150.138.193/32
      - 183.192.0.0/10
  - name: AS12975 Palestine Telecommunications Company (PALTEL) | (Description See Ticket 2293243)
    ip_range:
      - 43.245.208.200/32
  - name: AS4134 CHINANET-BACKBONE | (Description See Ticket 2313001)
    ip_range:
      - 106.36.0.0/14
  - name: AS4538 China Education and Research Network Center | (Description See Ticket 2323802)
    ip_range:
      - 202.120.0.0/16
  - name: AS16276 OVH SAS | (Description See Ticket 2346286)
    ip_range:
      - 91.121.141.219/32
  - name: AS25 University of California at Berkeley | (Description See Ticket 2346286)
    ip_range:
      - 169.229.202.227/32
  - name: China Unicom | (Description See Ticket 2360710)
    ip_range:
      - 124.205.215.178/32
  - name: China Unicom | (Description See Ticket 2361581)
    ip_range:
      - 58.247.30.222/32
  - name: OVH SAS | (Description See Ticket 2364773)
    ip_range:
      - 158.69.241.29/32
  - name: OVH SAS | (Description See SNAP Ticket TASK0031641)
    ip_range:
      - 37.187.167.187/32
  - name: Hangzhou Alibaba Advertising Co | (Description See SNAP Ticket TASK0031891)
    ip_range:
      - 121.199.10.214/32
  - name: AS4134 CHINANET-BACKBONE | (Description See SNAP Ticket TASK0158785)
    ip_range:
      - 218.94.0.0/16
  - name: AS4134 CHINANET-BACKBONE | (Description See SNAP Ticket TASK0158785)
    ip_range:
      - 218.92.0.0/15
  - name: AS4134 CHINANET-BACKBONE | (Description See SNAP Ticket TASK0158785)
    ip_range:
      - 218.90.0.0/15
  - name: AS4837 CHINA UNICOM China169 Backbone | (Description See SNAP Ticket TASK0160368)
    ip_range:
      - 60.8.0.0/15
  - name: AS8517 National Academic Network and Information Center | (Description See SNAP Ticket TASK0219936)
    ip_range:
      - 95.183.236.0/23
  - name: AS17506 ARTERIA Networks Corporation | (Description See SNAP Ticket TASK0219936)
    ip_range:
      - 115.125.173.2/32
  - name: AS8075 Microsoft Corporation | (Description is blank)
    ip_range:
      - 20.121.117.104/32
  - name: AS38631 LINE Corporation | (Description See SNAP Ticket TASK0249123)
    ip_range:
      - 147.92.128.0/17
  - name: AS29974 Wightman Telecom | (Description See SNAP Ticket TASK0263731)
    ip_range:
      - 68.69.149.17/32
  - name: AS4134 CHINANET-BACKBONE | (Description See SNAP Ticket TASK0031916)
    ip_range:
      - 113.119.17.67/32
  - name: AS39572 DataWeb Global Group B.V. | (Description See Ticket TASK0082792)
    ip_range:
      - 46.229.168.0/23
  - name: AS16276 OVH SAS | (Description See Ticket TASK0088569)
    ip_range:
      - 54.36.0.0/15
  - name: AS4134 CHINANET-BACKBONE | (Description is blank )
    ip_range:
      - 122.234.0.0/16
  - name: AS4134 CHINANET-BACKBONE | (Description See Ticket TASK0091305)
    ip_range:
      - 183.128.0.0/16
  - name: AS9299 Philippine Long Distance Telephone Company | (Description See Ticket TASK0122655)
    ip_range:
      - 122.52.0.0/13
  - name: AS17639 Converge ICT Solutions Inc. | (Description See Ticket TASK0126948)
    ip_range:
      - 121.58.252.0/22
  - name: AS4808 China Unicom Beijing Province Network | (Description See Ticket TASK0129270)
    ip_range:
      - 111.192.0.0/12
  - name: AS18 University of Texas at Austin | (Description is blank)
    ip_range:
      - 146.6.15.11/32
  - name: Yandex aggressive crawler
    ip_range:
      - 87.250.224.0/24
      - 213.180.203.0/24
      - 95.108.213.0/24
      - 5.255.231.0/24
  - name: Azure aggressive crawler
    ip_range:
      - 52.145.0.0/16
      - 52.146.0.0/15
      - 52.148.0.0/14
      - 52.152.0.0/13
      - 52.160.0.0/11
  - name: VIETTEL-CAMBODIA crawler
    ip_range:
      - 175.0.0.0/8
  - name: DIGITALOCEAN
    ip_range:
      - 159.65.0.0/16
  - name: CHINANET Guangdong province network
    ip_range:
      - 14.144.0.0/12
  - name: ALIBA-ARIN
    ip_range:
      - 47.74.0.0/15
      - 47.76.0.0/14
      - 47.80.0.0/13

# Below is an example of banning Francis
# - name: Francis test | Description (see ticket 12345)
# ip_range:
# - 38.49.xx.xx/32