Blockafeller

This tool was born out of necessity to manage centralized firewall blocklists on computers running (primarily) FreeBSD. The main scope is a personal itch I needed to scratch: website blocklisting at a firewall level.

Blockafeller aims to do two things:

1. Generate lists of IP-addresses based on criteria that are not IP-addresses themselves, such as hostnames, domains, AS-numbers, countries and the like.

2. Understand these lists, merging networks together if possible so you can use the lists for block/allow rules in your firewall efficiently.

Current status

Blockafeller takes a comma-separated list of ASN's through the --asns command line flag and spits out the IP ranges that belong to those ASN's. It has a bit of inteligence in that it consolidates CIDR ranges where possible, so you won't get more lines than you absolutely need.

Geoblocking and domain blocking is more involved, and will be added later.

Some interesting ASN's

ASN	Entity
16509	Amazon.com
8074	Microsoft Azure
8075	Microsoft Azure
12076	Microsoft Azure
396982	Google Cloud Platform
31898	Oracle Cloud
6142	Oracle Cloud US Gov
20054	Oracle Cloud US Feds
24429	Alibaba Cloud CDN
136907	Huawei Cloud Global
133478	Tencent Cloud
32934	Facebook (Meta)