Every IP on this list earned its place. These are ranges pulled directly from server logs: vulnerability scanners, brute force attempts, credential stuffing bots, and whatever else decided our infrastructure looked like a fun target. They all got blocked on Cloudflare. Now you can block them too.
IPv4 and IPv6 ranges sorted numerically. All confirmed hostile or high-risk.