Code:
# Algeria
deny from 41.200.0.0/15 193.194.64.0/19
# Added Goldenlines.net.il (Israel) because of Open Proxies used by Nigerian scammers
deny from 80.179.244.0/24
# Amsterdam, The Netherlands Versatel Nederland DSL-NAT Customers - Lottery and 419 scammers
deny from 62.59.36.0/22 62.59.40.0/21 62.59.48.0/22 82.93. 82.168.0.0/14 87.249.104.0/23
# Freenet in Germany (freenet.de); Used as spam relay by many Nigerian scammers, in March, 2008.
# Choose one of the following CIDRs:
# Narrow freenet.de CIDR, used by recent scammers:
deny from 195.4.92.0/23
# Full Freenet.de CIDR:
deny from 195.4.0.0/16
# ISPs in Spain, France and Italy, used by many expatriot Nigerian lottery and 419 scammers (Cableuropa, Ibercom, Ono.com, Telefonica)
deny from 62.42.0.0/16 80.25.0.0/16 80.36.0.0/14 81.34.0.0/16 82.194.64.0/19 84.120.0.0/13 85.39.0.0/16 85.91.64.0/19 88.14.0.0/16 88.202.124.0/27 147.83.0.0/16 193.252.22.0/24 195.53.0.0/16 212.121.224.0/19 213.4.0.0/16 213.194.128.0/18 213.194.144.0/20
# 193.252.22.0/24 = orange.fr, in Paris, France. Constant 419 scams coming from their email servers!
# Costa Rica exceptions:
allow from 196.40.0.0/18 196.40.64.0/19
# Newest Nigerian/African ISP additions/subtractions below:
# Jan 4, 2008; Added 41.211.0.0/19 (Ghana scammers)
# Jan 8, 2008: Added 77.70.128.0/24 77.70.129.0/26 77.70.138.0/23 (NG)
# Jan 10, 2008: Changed the CIDR 80.255.41.160/29 to 80.255.41.160/28 to include 8 new IPs, assigned to Lagos NG.
# Jan 13, 2008: Added 80.78.23.16/28 (NG), 83.137.59.8/29 and 196.44.96.0/19 (Ghana scammers)
# Jan 15, 2008: Added 196.3.61.0/24 (Starcomms Nigeria Limited)
# Jan 27, 2008: Added 196.29.216.0/21 (DirectonPC Nigeria) and moved Turkish IP list to the Russian Blocklist
# Feb 02, 2008: Added 196.45.192.0/18 (Q-kon Pty Ltd, Lagos, NG)
# Feb 15, 2008: Added 196.1.176.0/20 (Nigerian Telecommunications Ltd.)
# Feb 17, 2008: Added 80.255.61.0/25 (INTELSAT-CUST-globalcom-NG)
# Feb 25, 2008: Added 195.10.109.192/26 (Ghana)
# Mar 26, 2008: Added; 80.78.19.104/29 (NG), 80.78.19.112/28 (NG and GH)
# Mar 28, 2008: Added ISPs in Spain, below, due to Nigerian 419 lottery scammers living there
# Apr 03, 2008: Added 217.21.64.0/19 (Gilat Satcom IPPlanet satellite service to Nigeria and Africa)
# Apr 07, 2008: Added 195.214.240.0/21 waycom.net in France, for Nigerian 419 scam emails
# Apr 07, 2008: Added 213.194.128.0/18 and 213.194.144.0/20 in Spain, due to Nigerian 419 scammers
# Apr 11, 2008: Added 196.29.224.0/20 (GH)
# May 04, 2008: Added 87.249.104.0/23 (Amsterdam, NL, JR Online)
# May 05, 2008: Added 196.208.0.0/14 (Johannesburg, Gauteng, South Africa)
# May 06, 2008: Added 63.109.247.0/24 New Skies Satellite Service used by Nigerian 419 scammers
# May 06, 2008: Added 88.202.124.0/27 below. Skylogic.net satellite service, Italy; used by Nigerian 419 scammers
# May 06, 2008: Added 80.78.19.16/29 Nigeria (ConstellationCorp)
# May 09, 2008: Expanded 196.3.61.0/24 to 196.3.60.0/22 to include full CIDR for Starcomms of Lagos, Nigeria
# May 12, 2008: Added 147.83.0.0/16 in Spain, for spamming my contact form.
# May 17, 2008: Added Algeria group; 41.200.0.0/15 193.194.64.0/19
# May 20, 2008: Added 81.34.0.0/16 RIMA in Spain, for spamming
# May 21, 2008: Added 216.118.254.0/24 Ironlinks, because of Nigerian scammers using the ISP
# May 27, 2008: Added 192.118.71.0/24 an Israeli satellite service used by Nigerian scammers today.
# May 27, 2008: Added 85.91.64.0/19 in Santiago De Compostela, Galicia, Spain; due to Nigerian scammers
# May 29, 2008: Replaced all the following IpPlanet CIDRs with 81.199.0.0/16 - 81.199.6.0/24 81.199.7.0/24 81.199.48.0/20 81.199.72.0/22 81.199.76.0/24 81.199.82.0/23 81.199.84.0/22 81.199.84.0/24 81.199.85.0/24 81.199.86.0/24 81.199.87.0/24 81.199.88.0/24 81.199.89.0/24 81.199.90.0/24 81.199.94.0/23 81.199.108.0/22 81.199.124.0/22 81.199.172.160/27 81.199.240.0/21
# June 27, 2008: Added 41.223.64.0/22 - Nigeria
# July 26, 2008: Added 196.29.96.0/19 - Ghana
# July 28, 2008: Added 41.203.96.0/19 - Lagos, Nigeria
# Aug 14, 2008: Added 85.39.0.0/16 to the Italian list; Interbusiness.it - used by Nigerian 419 scammer
# End Nigerian/African blocklist
# Russia, Ukraine, Bulgaria, Romania, Latvia, Estonia, Kazakstan, Moldavia/Moldova, Poland, Serbia & Slovakia
deny from 62.76.126.0/24 62.85.0.0/17 62.133.128.0/19 62.168.224.0/19 62.213.64.0/18 62.233.142.0/26 70.85.189.224/29 77.51.0.0/18 77.51.64.0/18 77.79.244.0/22 77.87.152.0/21 77.88.0.0/18 77.91.224.0/21 77.94.124.0/22 77.120.0.0/14 77.221.128.0/19 77.234.0.0/19 77.244.208.0/20 78.36.0.0/15 78.85.0.0/16 78.106.0.0/15 78.129.128.0/17 78.157.128.0/19 79.120.0.0/17 79.126.0.0/18 79.139.128.0/17 79.140.160.0/20 80.71.240.0/20 80.73.64.0/21 80.85.176.0/20 80.86.240.0/21 80.233.128.0/17 81.5.96.0/20 81.9.0.0/20 81.16.80.0/20 81.19.64.0/19 81.21.0.0/20 81.30.176.0/20 81.88.208.0/20 81.95.144.0/20 81.176.0.0/15 81.181.16.0/22 81.195.0.0/16 81.196.0.0/16 81.222.128.0/20 82.76.0.0/14 82.103.64.0/18 82.114.224.0/19 82.138.6.128/25 82.138.32.0/19 82.144.192.0/19 82.146.56.0/21 82.151.112.0/21 82.160.203.0/24 82.179.160.0/20 82.204.128.0/17 83.19.145.232/29 83.174.192.0/18 83.219.129.0/24 83.222.0.0/19 83.222.22.0/23 83.237.0.0/16 85.14.35.0/24 85.21.0.0/16 85.29.192.0/18 85.94.0.0/19 85.112.112.0/20 85.140.0.0/15 85.142.0.0/15 85.192.60.0/23 85.249.128.0/19 85.255.112.0/20 86.34.0.0/16 86.57.128.0/17 86.125.88.0/21 86.127.19.0/24 87.99.64.0/19 87.103.192.0/20 87.103.208.0/20 87.110.0.0/16 87.117.0.0/18 87.118.128.0/18 87.119.224.0/19 87.120.16.0/20 87.204.0.0/15 87.226.0.0/17 87.242.116.0/23 87.248.160.0/19 87.253.192.0/19 88.147.128.0/17 88.200.128.0/17 88.201.128.0/17 88.212.192.0/18 89.20.128.0/19 89.28.0.0/17 89.32.152.0/21 89.37.144.0/21 89.38.112.0/20 89.41.176.0/20 89.44.142.0/23 89.106.96.0/19 89.108.64.0/19 89.110.0.0/18 89.110.56.0/22 89.111.176.0/20 89.113.72.0/21 89.114.54.0/23 89.122.0.0/16 89.123.0.0/16 89.175.0.0/16 89.178.0.0/15 89.190.224.0/19 89.208.160.0/19 89.218.0.0/16 89.253.0.0/18 90.150.128.0/20 90.156.128.0/17 91.76.0.0/14 91.122.0.0/16 91.124.0.0/16 91.193.140.0/22 91.197.128.0/22 92.80.0.0/15 92.82.0.0/16 92.83.0.0/16 92.84.0.0/16 92.112.0.0/15 92.114.128.0/17 92.241.160.0/19 92.244.224.0/19 93.80.0.0/15 141.85.0.0/16 158.197.0.0/16 160.99.0.0/16 192.129.3.0/24 193.39.113.0/24 193.47.166.0/24 193.108.248.0/22 193.178.144.0/22 193.178.228.0/23 193.200.50.0/23 193.223.101.0/24 193.230.232.0/24 194.44.36.0/24 194.85.90.0/23 194.102.114.0/24 194.181.0.0/16 194.186.0.0/16 195.2.96.0/19 195.2.252.0/23 195.3.148.0/22 195.5.116.0/23 195.28.32.0/19 195.34.224.0/19 195.42.160.0/19 195.93.218.0/23 195.93.218.0/24 195.95.218.0/23 195.95.228.0/23 195.137.200.0/23 195.138.198.0/24 195.189.246.0/23 195.190.13.0/24 195.208.0.0/15 195.209.32.0/19 195.225.64.0/22 195.225.176.0/22 195.239.0.0/16 195.242.98.0/23 195.242.232.0/22 195.244.128.128/25 195.245.112.0/23 195.245.208.0/24 204.9.184.0/21 212.9.224.0/19 212.24.32.0/19 212.44.64.0/20 212.44.80.0/22 212.44.128.0/19 212.58.192.0/19 212.118.32.0/19 212.158.160.0/20 213.35.224.0/23 213.91.128.0/17 213.140.96.0/19 213.142.192.0/19 213.154.192.0/19 213.156.192.0/24 213.215.64.0/18 213.242.12.0/22 213.248.0.0/18 217.12.240.0/20 217.16.16.0/20 217.28.208.0/21 217.77.208.0/20 217.106.0.0/15 217.146.240.0/20 217.174.96.0/20
# Turkish universities, web hosts and Turk Telekom customers - scammers, spammers, phishing websites and server script exploiters:
deny from 77.79.64.0/18 78.160.0.0/11 79.135.160.0/19 81.213.128.0/17 81.214.0.0/16 81.215.0.0/16 82.222.0.0/16 85.96.0.0/12 85.100.128.0/17 85.103.0.0/17 85.105.0.0/17 85.110.0.0/16 88.226.0.0/16 88.229.0.0/16 88.231.0.0/16 88.233.0.0/16 88.234.0.0/16 88.238.0.0/16 88.239.0.0/17 88.241.128.0/17 88.245.0.0/16 88.247.128.0/17 88.248.0.0/17 88.251.0.0/16 88.254.0.0/16 88.255.0.0/16 89.106.0.0/19 160.75.0.0/16 194.27.48.0/23 195.174.0.0/15 195.175.0.0/17 212.174.113.0/24 212.175.0.0/16
# Add other blocked domain names or IP addresses here, starting with "deny from " without quotes
# If you find that you need to poke a hole in the blocklist, for legitimate visitors, follow this example: allow from 123.456.789.0
# Add "allow from" IP addresses, or CIDR Ranges, after all of the "deny from" items, just before the closing Files tag.
# Everything not included within these deny from ranges is PERMITTED by the allow portion of the directive.
</Files>
# This prevents web browsers or spiders from seeing your .htaccess directives:
<Files .htaccess>
deny from all
</Files>
# End of file