## tornull.org - Tor Null Advisory BL

## and Tor Browser Bundle - about:config - Null Advisory (for Tor Browser users)


## Crimeware and Ransomware Prevention - ExitPolicy reject - DROP "Don't Route or Peer"


## tornull.org - Tor Null Advisory BL - v1.1.0.4 - August 25th 2016 - for Tor Exit Node Operators;


ExitPolicy reject 31.11.43.0/24:* # https://www.spamhaus.org/sbl/query/SBL113323

ExitPolicy reject 37.139.49.0/24:* # https://www.spamhaus.org/sbl/query/SBL169644

ExitPolicy reject 37.9.53.0/24:* # https://www.spamhaus.org/sbl/query/SBL273113

ExitPolicy reject 46.151.48.0/22:* # https://www.spamhaus.org/sbl/query/SBL259590

ExitPolicy reject 46.151.52.0/22:* # https://www.spamhaus.org/sbl/query/SBL243099

ExitPolicy reject 46.243.140.0/24:* # https://www.spamhaus.org/sbl/query/SBL244638

ExitPolicy reject 46.243.142.0/24:* # https://www.spamhaus.org/sbl/query/SBL244637

ExitPolicy reject 46.29.248.0/21:* # https://www.spamhaus.org/sbl/query/SBL216916

ExitPolicy reject 46.8.255.0/24:* # https://www.spamhaus.org/sbl/query/SBL295496

ExitPolicy reject 81.94.43.0/24:* # https://www.spamhaus.org/sbl/query/SBL131095

ExitPolicy reject 85.93.5.0/24:* # https://www.spamhaus.org/sbl/query/SBL308886

ExitPolicy reject 85.121.39.0/24:* # https://www.spamhaus.org/sbl/query/SBL111502

ExitPolicy reject 85.239.149.0/24:* # https://www.spamhaus.org/sbl/query/SBL252242

ExitPolicy reject 91.194.254.0/23:* # https://www.spamhaus.org/sbl/query/SBL258080

ExitPolicy reject 91.195.120.0/24:* # https://www.spamhaus.org/sbl/query/SBL291408

ExitPolicy reject 91.195.121.0/24:* # https://www.spamhaus.org/sbl/query/SBL291409

ExitPolicy reject 91.195.254.0/23:* # https://www.spamhaus.org/sbl/query/SBL153480

ExitPolicy reject 91.207.4.0/22:* # https://www.spamhaus.org/sbl/query/SBL253216

ExitPolicy reject 91.207.7.0/24:* # https://www.spamhaus.org/sbl/query/SBL194244

ExitPolicy reject 91.209.12.0/24:* # https://www.spamhaus.org/sbl/query/SBL202759

ExitPolicy reject 91.212.124.0/24:* # https://www.spamhaus.org/sbl/query/SBL291403

ExitPolicy reject 91.212.220.0/24:* # https://www.spamhaus.org/sbl/query/SBL87278

ExitPolicy reject 91.213.126.0/24:* # https://www.spamhaus.org/sbl/query/SBL182148

ExitPolicy reject 91.217.10.0/23:* # https://www.spamhaus.org/sbl/query/SBL253218

ExitPolicy reject 91.220.101.0/24:* # https://www.spamhaus.org/sbl/query/SBL291410

ExitPolicy reject 91.220.163.0/24:* # https://www.spamhaus.org/sbl/query/SBL179440

ExitPolicy reject 91.220.35.0/24:* # https://www.spamhaus.org/sbl/query/SBL106900

ExitPolicy reject 91.220.62.0/24:* # https://www.spamhaus.org/sbl/query/SBL180556

ExitPolicy reject 91.223.89.0/24:* # https://www.spamhaus.org/sbl/query/SBL235383

ExitPolicy reject 91.225.216.0/22:* # https://www.spamhaus.org/sbl/query/SBL302578

ExitPolicy reject 91.226.97.0/24:* # https://www.spamhaus.org/sbl/query/SBL123045

ExitPolicy reject 91.229.210.0/24:* # https://www.spamhaus.org/sbl/query/SBL249317

ExitPolicy reject 91.230.110.0/24:* # https://www.spamhaus.org/sbl/query/SBL160401

ExitPolicy reject 91.230.252.0/23:* # https://www.spamhaus.org/sbl/query/SBL214056

ExitPolicy reject 91.235.2.0/24:* # https://www.spamhaus.org/sbl/query/SBL153758

ExitPolicy reject 91.236.213.0/24:* # https://www.spamhaus.org/sbl/query/SBL277820

ExitPolicy reject 91.236.74.0/23:* # https://www.spamhaus.org/sbl/query/SBL176147

ExitPolicy reject 91.237.198.0/24:* # https://www.spamhaus.org/sbl/query/SBL214054

ExitPolicy reject 91.238.82.0/24:* # https://www.spamhaus.org/sbl/query/SBL154617

ExitPolicy reject 91.239.238.0/24:* # https://www.spamhaus.org/sbl/query/SBL207220

ExitPolicy reject 91.240.128.0/24:* # https://www.spamhaus.org/sbl/query/SBL245725

ExitPolicy reject 91.240.163.0/24:* # https://www.spamhaus.org/sbl/query/SBL243381

ExitPolicy reject 91.242.217.0/24:* # https://www.spamhaus.org/sbl/query/SBL167032

ExitPolicy reject 91.243.115.0/24:* # https://www.spamhaus.org/sbl/query/SBL156443

ExitPolicy reject 93.171.205.0/24:* # https://www.spamhaus.org/sbl/query/SBL310510

ExitPolicy reject 141.136.16.0/24:* # https://www.spamhaus.org/sbl/query/SBL126664

ExitPolicy reject 141.136.27.0/24:* # https://www.spamhaus.org/sbl/query/SBL117320

ExitPolicy reject 176.97.116.0/22:* # https://www.spamhaus.org/sbl/query/SBL267875

ExitPolicy reject 185.103.252.0/24:* # https://www.spamhaus.org/sbl/query/SBL295234

ExitPolicy reject 185.106.92.0/24:* # https://www.spamhaus.org/sbl/query/SBL295232

ExitPolicy reject 185.106.94.0/24:* # https://www.spamhaus.org/sbl/query/SBL277629

ExitPolicy reject 185.112.102.0/24:* # https://www.spamhaus.org/sbl/query/SBL295231

ExitPolicy reject 185.112.103.0/24:* # https://www.spamhaus.org/sbl/query/SBL291406

ExitPolicy reject 185.112.80.0/24:* # https://www.spamhaus.org/sbl/query/SBL291404

ExitPolicy reject 185.112.81.0/24:* # https://www.spamhaus.org/sbl/query/SBL291405

ExitPolicy reject 185.127.24.0/22:* # https://www.spamhaus.org/sbl/query/SBL285817

ExitPolicy reject 185.130.4.0/22:* # https://www.spamhaus.org/sbl/query/SBL295806

ExitPolicy reject 185.130.7.0/24:* # https://www.spamhaus.org/sbl/query/SBL295230

ExitPolicy reject 185.137.219.0/24:* # https://www.spamhaus.org/sbl/query/SBL306093

ExitPolicy reject 185.154.20.0/22:* # https://www.spamhaus.org/sbl/query/SBL308825

ExitPolicy reject 185.35.136.0/22:* # https://www.spamhaus.org/sbl/query/SBL284619

ExitPolicy reject 185.75.56.0/22:* # https://www.spamhaus.org/sbl/query/SBL257361

ExitPolicy reject 188.247.135.0/24:* # https://www.spamhaus.org/sbl/query/SBL117319

ExitPolicy reject 188.247.230.0/24:* # https://www.spamhaus.org/sbl/query/SBL122292

ExitPolicy reject 188.247.232.0/24:* # https://www.spamhaus.org/sbl/query/SBL122298

ExitPolicy reject 193.0.129.0/24:* # https://www.spamhaus.org/sbl/query/SBL215333

ExitPolicy reject 193.104.41.0/24:* # https://www.spamhaus.org/sbl/query/SBL253930

ExitPolicy reject 193.107.16.0/22:* # https://www.spamhaus.org/sbl/query/SBL180482

ExitPolicy reject 193.138.244.0/22:* # https://www.spamhaus.org/sbl/query/SBL256452

ExitPolicy reject 193.189.116.0/23:* # https://www.spamhaus.org/sbl/query/SBL274959

ExitPolicy reject 194.1.152.0/24:* # https://www.spamhaus.org/sbl/query/SBL308774

ExitPolicy reject 194.110.160.0/22:* # https://www.spamhaus.org/sbl/query/SBL60306

ExitPolicy reject 194.29.185.0/24:* # https://www.spamhaus.org/sbl/query/SBL134638

ExitPolicy reject 194.50.116.0/24:* # https://www.spamhaus.org/sbl/query/SBL148074

ExitPolicy reject 194.31.59.0/24:* # https://www.spamhaus.org/sbl/query/SBL300684

ExitPolicy reject 195.182.57.0/24:* # https://www.spamhaus.org/sbl/query/SBL88206

ExitPolicy reject 195.190.13.0/24:* # https://www.spamhaus.org/sbl/query/SBL253217

ExitPolicy reject 195.191.56.0/23:* # https://www.spamhaus.org/sbl/query/SBL193031

ExitPolicy reject 195.20.141.0/24:* # https://www.spamhaus.org/sbl/query/SBL170947

ExitPolicy reject 195.225.176.0/22:* # https://www.spamhaus.org/sbl/query/SBL47622

ExitPolicy reject 195.88.190.0/23:* # https://www.spamhaus.org/sbl/query/SBL79119

ExitPolicy reject 204.225.16.0/20:* # https://www.spamhaus.org/sbl/query/SBL156998

ExitPolicy reject 213.183.58.0/24:* # https://www.spamhaus.org/sbl/query/SBL310432


ExitPolicy reject 5.8.37.0/24:* # https://www.spamhaus.org/sbl/query/SBL284078 - Suspect network: (AS199793)

ExitPolicy reject 5.101.218.0/24:* # https://www.spamhaus.org/sbl/query/SBL284076 - Suspect network: (AS199793)

ExitPolicy reject 5.101.221.0/24:* # https://www.spamhaus.org/sbl/query/SBL284077 - Suspect network: (AS199793)

ExitPolicy reject 37.18.42.0/24:* # https://www.spamhaus.org/sbl/query/SBL284073 - Suspect network: (AS199793)

ExitPolicy reject 37.230.212.0/23:* # https://www.spamhaus.org/sbl/query/SBL284074 - Suspect network: (AS199793)

ExitPolicy reject 46.243.173.0/24:* # https://www.spamhaus.org/sbl/query/SBL284075 - Suspect network: (AS199793)

ExitPolicy reject 79.110.17.0/24:* # https://www.spamhaus.org/sbl/query/SBL284079 - Suspect network: (AS199793)

ExitPolicy reject 79.110.18.0/24:* # https://www.spamhaus.org/sbl/query/SBL284080 - Suspect network: (AS199793)

ExitPolicy reject 79.110.19.0/24:* # https://www.spamhaus.org/sbl/query/SBL284081 - Suspect network: (AS199793)

ExitPolicy reject 79.110.25.0/24:* # https://www.spamhaus.org/sbl/query/SBL284082 - Suspect network: (AS199793)

ExitPolicy reject 93.179.89.0/24:* # https://www.spamhaus.org/sbl/query/SBL284085 - Suspect network: (AS199793)

ExitPolicy reject 93.179.90.0/24:* # https://www.spamhaus.org/sbl/query/SBL284084 - Suspect network: (AS199793)

ExitPolicy reject 93.179.91.0/24:* # https://www.spamhaus.org/sbl/query/SBL284086 - Suspect network: (AS199793)

ExitPolicy reject 141.101.132.0/24:* # https://www.spamhaus.org/sbl/query/SBL284057 - Suspect network: (AS199793)

ExitPolicy reject 141.101.201.0/24:* # https://www.spamhaus.org/sbl/query/SBL284058 - Suspect network: (AS199793)

ExitPolicy reject 179.61.200.0/23:* # https://www.spamhaus.org/sbl/query/SBL284059 - Suspect network: (AS199793)

ExitPolicy reject 185.2.32.0/24:* # https://www.spamhaus.org/sbl/query/SBL284060 - Suspect network: (AS199793)

ExitPolicy reject 185.46.84.0/22:* # https://www.spamhaus.org/sbl/query/SBL284065 - Suspect network: (AS199793)

ExitPolicy reject 185.50.250.0/24:* # https://www.spamhaus.org/sbl/query/SBL284066 - Suspect network: (AS199793)

ExitPolicy reject 185.50.251.0/24:* # https://www.spamhaus.org/sbl/query/SBL284067 - Suspect network: (AS199793)

ExitPolicy reject 188.72.96.0/24:* # https://www.spamhaus.org/sbl/query/SBL284070 - Suspect network: (AS199793)

ExitPolicy reject 188.72.126.0/24:* # https://www.spamhaus.org/sbl/query/SBL284068 - Suspect network: (AS199793)

ExitPolicy reject 188.72.127.0/24:* # https://www.spamhaus.org/sbl/query/SBL284069 - Suspect network: (AS199793)

ExitPolicy reject 191.101.54.0/23:* # https://www.spamhaus.org/sbl/query/SBL284071 - Suspect network: (AS199793)


ExitPolicy reject 31.28.27.7/32:* # https://www.spamhaus.org/sbl/query/SBL294494

ExitPolicy reject 83.217.8.155/32:* # https://www.spamhaus.org/sbl/query/SBL296428

ExitPolicy reject 86.104.134.144/32:* # https://www.spamhaus.org/sbl/query/SBL286365

ExitPolicy reject 91.108.176.118/32:* # https://www.spamhaus.org/sbl/query/SBL285403

ExitPolicy reject 91.108.176.129/32:* # https://www.spamhaus.org/sbl/query/SBL281321

ExitPolicy reject 91.230.211.26/32:* # https://www.spamhaus.org/sbl/query/SBL296665

ExitPolicy reject 93.170.128.136/32:* # https://www.spamhaus.org/sbl/query/SBL282379

ExitPolicy reject 93.170.130.147/32:* # https://www.spamhaus.org/sbl/query/SBL286256

ExitPolicy reject 93.170.131.108/32:* # https://www.spamhaus.org/sbl/query/SBL292211

ExitPolicy reject 107.167.10.98/32:* # https://www.spamhaus.org/sbl/query/SBL287590

ExitPolicy reject 109.237.111.168/32:* # https://www.spamhaus.org/sbl/query/SBL288362

ExitPolicy reject 212.47.195.238/32:* # https://www.spamhaus.org/sbl/query/SBL300786


## tornull.org - Tor Null Advisory BL - Note : Tor Exit Nodes do not allow outgoing mail SMTP (port 25) in the 'default' ExitPolicy

## The Tor Null Advisory BL is focused towards limiting malicious Botnet C&C activity from Tor Exit Relays

## tornull.org - Tor Null Advisory BL is provided 'as-is' - We do not guarantee the accuracy of the information provided

## Some rights reserved - We disclaim all copyright interest


## References :

## https://www.spamhaus.org/drop/ - SPAMHAUS - DROP and EDROP - SBL only

## https://zeustracker.abuse.ch/blocklist.php - ZeuS Tracker (source cross-referenced)

## https://ransomwaretracker.abuse.ch/downloads/LY_C2_IPBL.txt - Locky C2 IP Blocklist (source cross-referenced)

## https://ransomwaretracker.abuse.ch/downloads/TL_C2_IPBL.txt - TorrentLocker C2 IP Blocklist (source cross-referenced)

## http://osint.bambenekconsulting.com/feeds/c2-ipmasterlist-high.txt - High-Confidence C2 IP Feed (source cross-referenced)

## http://malc0de.com/bl/IP_Blacklist.txt - malc0de IP Blacklist (source cross-referenced)


## Useful Info :

## https://trac.torproject.org/projects/tor/wiki/doc/ReducedExitPolicy - Tor Reduced Exit Policy

## https://trac.torproject.org/projects/tor/wiki/doc/TorAbuseTemplates - Tor Abuse Templates

## https://trac.torproject.org/projects/tor/wiki/doc/TorExitGuidelines - Tor Exit Guidelines


## tornull.org - Tor Null Advisory BL - Maintainers : "TrueNorth" and "FivePoint"

## Tor Exit - TrueNorth : https://atlas.torproject.org/#details/04392D7AC348D38850A709B579BE93692AA04453

## Tor Exit - FivePoint : https://atlas.torproject.org/#details/DF5D5BBB6F58FACAEFECA6E8BDCBA0DD5FB37497

## Tor Relay - TorNull : https://atlas.torproject.org/#details/34A270BB4EBAD0080D2BDACA33723E70A449B394


## Donate Bitcoin : 19YY5WPi5WtWAjiiW1jUbihCTTwBNYnXg9


## tornull.org - Tor Null Advisory BL is an Independent Research Project.

## "Tor” and the "Onion Logo” are registered trademarks of The Tor Project, Inc.