# Cloudron blocklist SoR mirror — my.knownelement.com
# LIVE SOURCE OF TRUTH: Cloudron setting firewall_blocklist
#   GET/POST https://my.knownelement.com/api/v1/network/blocklist (admin token)
#   panel: Network > IP block list; enforced via ipset cloudron_blocklist on
#   INPUT(CLOUDRON) + FORWARD(DOCKER-USER); Cloudron re-applies at boot.
# This file mirrors the live setting (last sync 2026-09-04 12:15 CDT, #796).
# Full-line comments allowed in both.

# founder-directed 2026-09-04 (#796, #787 root cause): hostile SMTP ranges
92.118.39.0/24
80.94.92.0/24

# sweep-added 2026-09-04 (#796 auto: spamhaus-DENY sources, hits>=MIN_HITS)
213.176.24.83
193.32.162.9
193.32.162.71
158.94.208.191
195.224.203.50
161.35.78.82
3.129.187.38
18.116.101.220
34.14.19.55
45.148.10.25
45.148.10.26
45.148.10.29
45.148.10.30
45.148.10.31
45.148.10.34
45.148.10.35
45.148.10.36
45.148.10.37
45.148.10.39
45.91.64.7
142.93.104.135
203.188.168.251
35.236.139.55
58.211.39.86
102.134.107.34
104.154.249.213
111.26.106.117
111.26.177.216
111.26.62.42
111.26.63.85
111.42.175.101
111.46.77.2
116.98.104.138
131.100.49.158
155.4.31.215
164.164.198.32
168.235.210.157
177.27.76.210
179.184.218.49
180.165.11.113
186.238.89.142
187.8.64.94
197.219.208.58
218.219.193.151
218.25.233.22
221.203.187.222
34.182.9.35
34.86.40.181
35.198.252.246
36.135.107.57
45.164.115.86
46.44.0.185
61.37.150.6