feat(nuisance): edge nuisance-block sweep + founder-directed blocks [#796]

Cloudron-native enforcement (ipset cloudron_blocklist via panel setting). https://projects.knownelement.com/issues/796
2026-09-04 12:10:46 -05:00
parent 3b218e7659
commit 9959f86295
7 changed files with 329 additions and 0 deletions
@@ -0,0 +1,67 @@
+# Cloudron blocklist SoR mirror — my.knownelement.com
+# LIVE SOURCE OF TRUTH: Cloudron setting firewall_blocklist
+#   GET/POST https://my.knownelement.com/api/v1/network/blocklist (admin token)
+#   panel: Network > IP block list; enforced via ipset cloudron_blocklist on
+#   INPUT(CLOUDRON) + FORWARD(DOCKER-USER); Cloudron re-applies at boot.
+# This file mirrors the live setting (last sync 2026-09-04 12:15 CDT, #796).
+# Full-line comments allowed in both.
+
+# founder-directed 2026-09-04 (#796, #787 root cause): hostile SMTP ranges
+92.118.39.0/24
+80.94.92.0/24
+
+# sweep-added 2026-09-04 (#796 auto: spamhaus-DENY sources, hits>=MIN_HITS)
+213.176.24.83
+193.32.162.9
+193.32.162.71
+158.94.208.191
+195.224.203.50
+161.35.78.82
+3.129.187.38
+18.116.101.220
+34.14.19.55
+45.148.10.25
+45.148.10.26
+45.148.10.29
+45.148.10.30
+45.148.10.31
+45.148.10.34
+45.148.10.35
+45.148.10.36
+45.148.10.37
+45.148.10.39
+45.91.64.7
+142.93.104.135
+203.188.168.251
+35.236.139.55
+58.211.39.86
+102.134.107.34
+104.154.249.213
+111.26.106.117
+111.26.177.216
+111.26.62.42
+111.26.63.85
+111.42.175.101
+111.46.77.2
+116.98.104.138
+131.100.49.158
+155.4.31.215
+164.164.198.32
+168.235.210.157
+177.27.76.210
+179.184.218.49
+180.165.11.113
+186.238.89.142
+187.8.64.94
+197.219.208.58
+218.219.193.151
+218.25.233.22
+221.203.187.222
+34.182.9.35
+34.86.40.181
+35.198.252.246
+36.135.107.57
+45.164.115.86
+46.44.0.185
+61.37.150.6
+