From 2e572ba8e1caab79b6c2d87ef49b8ca2ba2f3305 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thomas=20S=C3=A4nger?= <thomas@gecko.space>
Date: Mon, 14 Dec 2020 08:39:41 +0100
Subject: [PATCH 1/4] add networks of a new DoS

---
 AdGuardHomeDisallowedIPs.txt | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/AdGuardHomeDisallowedIPs.txt b/AdGuardHomeDisallowedIPs.txt
index d24275218..efd605bd9 100644
--- a/AdGuardHomeDisallowedIPs.txt
+++ b/AdGuardHomeDisallowedIPs.txt
@@ -91,6 +91,7 @@
 ! • Inulogic Virtual Private Servers
 ! • RM Engineering LLC
 ! • EDIS GmbH
+! • Amarutu Technology Ltd.
 
 ! Multi-category entries
 ! PR-China + Amazon Technologies
@@ -139,6 +140,9 @@
 85.119.149.0/24
 ! LLC Baxet
 45.144.177.117
+! Garant-Park-Internet LLC
+46.173.215.164/24
+46.173.218.178/24
 
 ! 🇺🇦 Ukraine
 ! Kyivski Telekomunikatsiyni Merezhi
@@ -8729,6 +8733,7 @@
 8.209.0.0/19
 8.209.32.0/22
 8.209.48.0/20
+8.209.73.0/24
 8.209.128.0/18
 8.210.0.0/16
 14.1.112.177
@@ -8952,3 +8957,6 @@
 
 ! EDIS GmbH
 178.73.210.239
+
+! Amarutu Technology Ltd.
+31.220.1.148

From 1732ee530ab8c43061aff774158c08f034a85e68 Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Mon, 14 Dec 2020 09:14:06 +0100
Subject: [PATCH 2/4] Updated the date

---
 AdGuardHomeDisallowedIPs.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AdGuardHomeDisallowedIPs.txt b/AdGuardHomeDisallowedIPs.txt
index efd605bd9..3c0ce01b5 100644
--- a/AdGuardHomeDisallowedIPs.txt
+++ b/AdGuardHomeDisallowedIPs.txt
@@ -1,5 +1,5 @@
 ! Title: Dandelion Sprout's Disallowed Clients for AdGuard Home in Particular
-! Version: 13December2020v2
+! Version: 14December2020v1
 ! Expires: 7 days
 ! Description: This is a list of unusually strange and/or presumed hostile IP addresses that thought it'd be a good idea to port scan or otherwise mistreat my publicly accessible AdGuard Home server, without having anything even close to a good reason for doing so.
 ! Special thanks to https://tehnoblog.org/ip-tools/ip-address-aggregator/ for providing the internet with the one and only CIDR online compression tool currently known to exist.

From 49b52fe447c463eaa13906aa6c8cf3b627c264b1 Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Mon, 14 Dec 2020 09:15:01 +0100
Subject: [PATCH 3/4] Update Dandelion Sprout's Anti-Malware List.txt

---
 Dandelion Sprout's Anti-Malware List.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dandelion Sprout's Anti-Malware List.txt b/Dandelion Sprout's Anti-Malware List.txt
index e41d9c90a..e702889a9 100644
--- a/Dandelion Sprout's Anti-Malware List.txt	
+++ b/Dandelion Sprout's Anti-Malware List.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.4]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List
-! Version: 10December2020v1-Beta
+! Version: 14December2020v1-Beta
 ! Expires: 5 days
 ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -387,6 +387,7 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
 ||hitnslab.cn^
 ||hitnslab.xyz^
 ||lavrov.in^
+||fe18.ru^
 !#endif
 
 ! ——— Zero-width spaces/hyphens in lookalike domains ———

From a43c8052e53b38dc116d59afc1b844e7d8848a43 Mon Sep 17 00:00:00 2001
From: Imre Kristoffer Eilertsen <imreeil42@gmail.com>
Date: Mon, 14 Dec 2020 09:15:45 +0100
Subject: [PATCH 4/4] Add files via upload

---
 Alternate versions Anti-Malware List/AntiMalwareABP.txt        | 3 ++-
 Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt    | 3 ++-
 .../AntiMalwareAdGuardHome.txt                                 | 3 ++-
 Alternate versions Anti-Malware List/AntiMalwareDomains.txt    | 3 ++-
 Alternate versions Anti-Malware List/AntiMalwareHosts.txt      | 3 ++-
 Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action | 3 ++-
 Alternate versions Anti-Malware List/AntiMalwareTPL.tpl        | 3 ++-
 7 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/Alternate versions Anti-Malware List/AntiMalwareABP.txt b/Alternate versions Anti-Malware List/AntiMalwareABP.txt
index 36b0e3b52..1f4f0e738 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareABP.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareABP.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.4]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdBlock and Adblock Plus)
-! Version: 10December2020v1-Beta
+! Version: 14December2020v1-Beta
 ! Expires: 5 days
 ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -358,6 +358,7 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
 ||hitnslab.cn^
 ||hitnslab.xyz^
 ||lavrov.in^
+||fe18.ru^
 
 
 ! ——— Zero-width spaces/hyphens in lookalike domains ———
diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt
index ca7b54096..caf6d29cc 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuard.txt	
@@ -1,6 +1,6 @@
 [AdGuard ≥6]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard)
-! Version: 10December2020v1-Beta
+! Version: 14December2020v1-Beta
 ! Expires: 5 days
 ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -387,6 +387,7 @@ addons.mozilla.org#?#li.SearchResult:-abp-contains(Adblocker.Global)
 ||hitnslab.cn^
 ||hitnslab.xyz^
 ||lavrov.in^
+||fe18.ru^
 !#endif
 
 ! ——— Zero-width spaces/hyphens in lookalike domains ———
diff --git a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt
index 09ebe5077..5acb3113b 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareAdGuardHome.txt	
@@ -1,6 +1,6 @@
 [Adblock Plus 3.4]
 ! Title: 💊 Dandelion Sprout's Anti-Malware List (for AdGuard Home)
-! Version: 10December2020v1-Beta
+! Version: 14December2020v1-Beta
 ! Expires: 5 days
 ! Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 ! For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -327,6 +327,7 @@
 ||hitnslab.cn^
 ||hitnslab.xyz^
 ||lavrov.in^
+||fe18.ru^
 
 
 ! ——— Zero-width spaces/hyphens in lookalike domains ———
diff --git a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt
index e30508823..03c354580 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareDomains.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareDomains.txt	
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Domains list version)
-# Version: 10December2020v1-Beta
+# Version: 14December2020v1-Beta
 # Expires: 5 days
 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 
@@ -238,6 +238,7 @@ dominiosvision.com
 hitnslab.cn
 hitnslab.xyz
 lavrov.in
+fe18.ru
 
 
 # ——— Zero-width spaces/hyphens in lookalike domains ———
diff --git a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt
index 68327c96d..88c2e2bdc 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareHosts.txt	
+++ b/Alternate versions Anti-Malware List/AntiMalwareHosts.txt	
@@ -1,5 +1,5 @@
 # Title: 💊 Dandelion Sprout's Anti-Malware List («hosts» file version)
-# Version: 10December2020v1-Alpha
+# Version: 14December2020v1-Alpha
 # Expires: 5 days
 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 
@@ -238,6 +238,7 @@
 127.0.0.1 hitnslab.cn
 127.0.0.1 hitnslab.xyz
 127.0.0.1 lavrov.in
+127.0.0.1 fe18.ru
 
 
 # ——— Zero-width spaces/hyphens in lookalike domains ———
diff --git a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action
index decbfb65b..2fccf8bd6 100644
--- a/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action	
+++ b/Alternate versions Anti-Malware List/AntiMalwarePrivoxy.action	
@@ -1,6 +1,6 @@
 {+block}
 # Title: 💊 Dandelion Sprout's Anti-Malware List (for Privoxy)
-# Version: 10December2020v1-Alpha
+# Version: 14December2020v1-Alpha
 # Expires: 5 days
 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 
@@ -262,6 +262,7 @@
 .hitnslab.cn
 .hitnslab.xyz
 .lavrov.in
+.fe18.ru
 #
 
 {+block}
diff --git a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl
index 52bfcba03..ee335b1c8 100644
--- a/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl	
+++ b/Alternate versions Anti-Malware List/AntiMalwareTPL.tpl	
@@ -1,6 +1,6 @@
 msFilterList
 # Title: 💊 Dandelion Sprout's Anti-Malware List (Internet Explorer TPL)
-# Version: 10December2020v1-Beta
+# Version: 14December2020v1-Beta
 : expires = 5
 # Description: Most anti-malware lists are pretty big and can cover a 5- or 6-digit amount of specific domains. But my list hereby claims to remove more than 25% of all known malware sites with just a 2-digit amount of entries. This is mostly done by blocking top-level domains that have become devastatingly abused by spammers, usually because they allowed for free and uncontrolled domain registrations. There's also additional categories that cover unusual malware and phishing domains that very few other lists seem to cover.
 # For other security-specific lists I've made, check out https://github.com/DandelionSprout/adfilt/tree/master/Special%20security%20lists
@@ -319,6 +319,7 @@ msFilterList
 -d hitnslab.cn
 -d hitnslab.xyz
 -d lavrov.in
+-d fe18.ru
 
 
 # ——— Zero-width spaces hyphens in lookalike domains ———