# Whackers For Hackers (W4H) White list
# https://whackersforhackers.com

# Unfortunately with consolidation of hosting
# services into the cloud we've run into
# clients getting too heavily blocked.
# Big hosting providers get hacked because
# their customers don't know how to secure
# their servers! It's the world we live in.

# Whitelist a Comcast Address
firewall-cmd --ipset=sshnet --remove-entry=50.128.0.0/9
firewall-cmd --ipset=sshnet --remove-entry=50.254.128.0/19
firewall-cmd --ipset=sshnet --remove-entry=173.8.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=173.15.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=198.0.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=198.0.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=198.0.128.0/29
firewall-cmd --ipset=sshnet --remove-entry=67.190.64.0/18
firewall-cmd --ipset=sshnet --remove-entry=73.218.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=73.0.0.0/8
firewall-cmd --ipset=sshnet --remove-entry=73.70.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=73.91.128.0/17
firewall-cmd --ipset=sshnet --remove-entry=73.138.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=73.194.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=73.200.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=75.64.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=75.75.0.0/17
firewall-cmd --ipset=sshnet --remove-entry=75.75.0.0/18
firewall-cmd --ipset=sshnet --remove-entry=75.74.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=75.72.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=75.72.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=75.75.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=76.96.0.0/11

# Google
firewall-cmd --ipset=sshnet --remove-entry=35.240.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=35.208.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=35.224.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=104.196.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=107.167.160.0/19
firewall-cmd --ipset=sshnet --remove-entry=35.184.0.0/13

# Digital Ocean losers
firewall-cmd --ipset=sshnet --remove-entry=159.65.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=165.227.0.0/16

# White list Cox
firewall-cmd --ipset=sshnet --remove-entry=68.105.192.0/22
firewall-cmd --ipset=sshnet --remove-entry=68.96.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=68.107.0.0/21
firewall-cmd --ipset=sshnet --remove-entry=68.112.0.0/20
firewall-cmd --ipset=sshnet --remove-entry=184.176.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=184.176.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=184.191.160.0/19
firewall-cmd --ipset=sshnet --remove-entry=66.37.224.0/19
firewall-cmd --ipset=sshnet --remove-entry=66.37.237.0/24
firewall-cmd --ipset=sshnet --remove-entry=66.37.237.0/24
firewall-cmd --ipset=sshnet --remove-entry=70.160.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=70.174.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=72.192.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=72.194.64.0/18
firewall-cmd --ipset=sshnet --remove-entry=98.176.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=184.176.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=184.191.160.0/19
firewall-cmd --ipset=sshnet --remove-entry=66.37.224.0/19
firewall-cmd --ipset=sshnet --remove-entry=66.37.237.0/24
firewall-cmd --ipset=sshnet --remove-entry=70.160.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=70.174.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=72.192.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=72.194.64.0/18
firewall-cmd --ipset=sshnet --remove-entry=98.176.0.0/16

# charter
firewall-cmd --ipset=sshnet --remove-entry=24.205.224.0/19
firewall-cmd --ipset=sshnet --remove-entry=24.208.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=24.205.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=24.205.0.0/22
firewall-cmd --ipset=sshnet --remove-entry=68.112.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=68.112.0.0/20
firewall-cmd --ipset=sshnet --remove-entry=68.112.0.0/28
firewall-cmd --ipset=sshnet --remove-entry=68.118.176.0/20
firewall-cmd --ipset=sshnet --remove-entry=68.118.192.0/20
firewall-cmd --ipset=sshnet --remove-entry=96.58.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=24.151.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=24.151.0.0/22
firewall-cmd --ipset=sshnet --remove-entry=68.112.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=68.118.192.0/20
firewall-cmd --ipset=sshnet --remove-entry=68.112.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=71.14.32.0/20
firewall-cmd --ipset=sshnet --remove-entry=24.151.160.0/19
firewall-cmd --ipset=sshnet --remove-entry=71.8.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=71.12.64.0/19
firewall-cmd --ipset=sshnet --remove-entry=71.81.112.0/20
firewall-cmd --ipset=sshnet --remove-entry=71.80.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=71.12.176.0/20
firewall-cmd --ipset=sshnet --remove-entry=76.79.0.0/16

# Amazon
firewall-cmd --ipset=sshnet --remove-entry=34.192.0.0/10
firewall-cmd --ipset=sshnet --remove-entry=18.194.0.0/15

# Amazon AWS
firewall-cmd --ipset=sshnet --remove-entry=52.0.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=54.144.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=54.144.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=54.192.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=54.192.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=54.245.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=54.240.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=13.124.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=13.124.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=13.126.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=13.52.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=13.56.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=13.52.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=18.220.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=18.224.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=18.228.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=18.219.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=35.160.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=35.152.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=35.176.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=35.182.0.0/15

# GoDaddy
firewall-cmd --ipset=sshnet --remove-entry=97.74.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=184.168.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=104.238.64.0/18
firewall-cmd --ipset=sshnet --remove-entry=132.148.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=148.66.128.0/19
firewall-cmd --ipset=sshnet --remove-entry=148.72.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=160.153.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=166.62.0.0/17
firewall-cmd --ipset=sshnet --remove-entry=192.169.128.0/17
firewall-cmd --ipset=sshnet --remove-entry=198.12.128.0/17
firewall-cmd --ipset=sshnet --remove-entry=208.109.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=45.40.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=50.62.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=72.167.0.0/16

# Shaw cable in CA
firewall-cmd --ipset=sshnet --remove-entry=68.144.0.0/13

# EIG Servers | BlueHost, Host Gator, Host Monster, etc all
firewall-cmd --ipset=sshnet --remove-entry=74.220.192.0/19
firewall-cmd --ipset=sshnet --remove-entry=70.40.192.0/19
firewall-cmd --ipset=sshnet --remove-entry=142.4.0.0/19
firewall-cmd --ipset=sshnet --remove-entry=173.254.0.0/17
firewall-cmd --ipset=sshnet --remove-entry=192.163.192.0/18
# firewall-cmd --ipset=sshnet --remove-entry=198.1.64.0/18 <-- particularly dirty not white listing any more ever!
firewall-cmd --ipset=sshnet --remove-entry=69.89.16.0/20

# WIX
firewall-cmd --ipset=sshnet --remove-entry=185.0.0.0/8

# Verizon
firewall-cmd --ipset=sshnet --remove-entry=100.0.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=100.32.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=100.40.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=173.64.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=97.214.64.0/20
firewall-cmd --ipset=sshnet --remove-entry=71.168.128.0/17
firewall-cmd --ipset=sshnet --remove-entry=71.169.0.0/17
firewall-cmd --ipset=sshnet --remove-entry=72.65.128.0/17
firewall-cmd --ipset=sshnet --remove-entry=72.68.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=72.66.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=72.71.0.0/17
firewall-cmd --ipset=sshnet --remove-entry=72.70.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=72.71.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=96.224.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=96.236.66.160/29
firewall-cmd --ipset=sshnet --remove-entry=97.128.0.0/9
firewall-cmd --ipset=sshnet --remove-entry=96.224.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=65.252.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=65.248.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=65.240.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=65.248.100.0/22
firewall-cmd --ipset=sshnet --remove-entry=65.248.0.0/24

# Sprint
firewall-cmd --ipset=sshnet --remove-entry=208.0.0.0/11

# Microsoft
firewall-cmd --ipset=sshnet --remove-entry=13.64.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=13.104.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=13.96.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=40.64.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=40.80.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=40.74.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=40.96.0.0/12
firewall-cmd --ipset=sshnet --remove-entry=40.124.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=40.112.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=40.120.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=40.76.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=40.125.0.0/17
firewall-cmd --ipset=sshnet --remove-entry=40.125.128.0/17
firewall-cmd --ipset=sshnet --remove-entry=52.148.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=52.160.0.0/11
firewall-cmd --ipset=sshnet --remove-entry=52.146.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=52.152.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=52.145.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=52.224.0.0/11

# Constant Contact
firewall-cmd --ipset=sshnet --remove-entry=208.0.0.0/11

# Cogentco a backbone provider
firewall-cmd --ipset=sshnet --remove-entry=38.0.0.0/8

# ATT
firewall-cmd --ipset=sshnet --remove-entry=12.0.0.0/8
firewall-cmd --ipset=sshnet --remove-entry=12.19.144.48/28
firewall-cmd --ipset=sshnet --remove-entry=12.227.0.0/16
firewall-cmd --ipset=sshnet --remove-entry=12.227.144.0/20
firewall-cmd --ipset=sshnet --remove-entry=12.238.92.64/26
firewall-cmd --ipset=sshnet --remove-entry=67.64.0.0/23
firewall-cmd --ipset=sshnet --remove-entry=67.64.0.0/14
firewall-cmd --ipset=sshnet --remove-entry=67.66.96.0/23
firewall-cmd --ipset=sshnet --remove-entry=68.64.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=68.64.160.0/20
firewall-cmd --ipset=sshnet --remove-entry=68.64.160.0/29
firewall-cmd --ipset=sshnet --remove-entry=74.252.14.0/24
firewall-cmd --ipset=sshnet --remove-entry=74.224.0.0/11

# RoadRunner
firewall-cmd --ipset=sshnet --remove-entry=172.87.128.0/18
firewall-cmd --ipset=sshnet --remove-entry=76.166.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=76.168.0.0/13
firewall-cmd --ipset=sshnet --remove-entry=97.76.0.0/14

# Level3
firewall-cmd --ipset=sshnet --remove-entry=173.226.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=213.242.64.0/18
firewall-cmd --ipset=sshnet --remove-entry=4.30.0.0/15
firewall-cmd --ipset=sshnet --remove-entry=8.25.224.0/20
firewall-cmd --ipset=sshnet --remove-entry=8.26.21.0/24
firewall-cmd --ipset=sshnet --remove-entry=8.40.176.0/20