From a0a2d1434fffc5cd14aab3845d0c7040baacab2a Mon Sep 17 00:00:00 2001
From: Brandon Thomas <echelon@gmail.com>
Date: Fri, 23 Jun 2023 18:21:41 -0700
Subject: [PATCH] block a few Alibaba IPs

---
 .../ip_bans/ip_addresses_alibaba.txt          | 20 +++++++++++++++++++
 1 file changed, 20 insertions(+)
 create mode 100644 container_includes/ip_bans/ip_addresses_alibaba.txt

diff --git a/container_includes/ip_bans/ip_addresses_alibaba.txt b/container_includes/ip_bans/ip_addresses_alibaba.txt
new file mode 100644
index 0000000000..c7266f9e61
--- /dev/null
+++ b/container_includes/ip_bans/ip_addresses_alibaba.txt
@@ -0,0 +1,20 @@
+# We noticed Alibaba's US data center sending us traffic on 2023-06-23.
+#
+# eg. https://www.whatismyip.com/ip/47.252.18.46/
+#   City: Virginia Beach
+#   State: Virginia
+#   Country: United States of America
+#   ISP: AliCloud
+#   Domain: alicloud.com
+#   Network Speed: T1
+#   Known Proxy: yes
+#   Proxy Type: DCH
+#   ASN: 45102
+#   Organization: Alibaba US Technology Co. Ltd.
+#
+# We should probably block these with a CIDR block.
+#
+
+47.252.18.46
+47.253.34.68
+47.253.98.109