#!/bin/bash
#
# Comcast IP Ranges - iptables/ipset rules
# ASN: AS7922
# Generated: 2025-12-15
# Source: ScaniteX (https://scanitex.com)
#
# Usage: chmod +x this_script.sh && sudo ./this_script.sh
#

# Create IPv4 ipset
ipset create comcast_v4 hash:net -exist
ipset flush comcast_v4

# Add IPv4 ranges
ipset add comcast_v4 96.124.0.0/16
ipset add comcast_v4 65.96.0.0/16
ipset add comcast_v4 66.240.0.0/18
ipset add comcast_v4 162.148.0.0/14
ipset add comcast_v4 24.104.0.0/17
ipset add comcast_v4 23.68.0.0/14
ipset add comcast_v4 174.140.228.0/23
ipset add comcast_v4 66.41.0.0/16
ipset add comcast_v4 24.245.0.0/18
ipset add comcast_v4 71.224.0.0/12
ipset add comcast_v4 205.234.162.0/24
ipset add comcast_v4 68.167.56.0/24
ipset add comcast_v4 24.128.0.0/16
ipset add comcast_v4 140.99.210.0/24
ipset add comcast_v4 75.64.0.0/13
ipset add comcast_v4 24.34.0.0/16
ipset add comcast_v4 107.0.0.0/14
ipset add comcast_v4 68.167.24.0/24
ipset add comcast_v4 75.74.0.0/16
ipset add comcast_v4 209.101.251.0/24
ipset add comcast_v4 65.97.0.0/19
ipset add comcast_v4 71.56.0.0/13
ipset add comcast_v4 74.49.240.0/24
ipset add comcast_v4 68.167.57.0/24
ipset add comcast_v4 72.244.146.0/24
ipset add comcast_v4 69.136.0.0/13
ipset add comcast_v4 96.112.0.0/13
ipset add comcast_v4 68.167.26.0/24
ipset add comcast_v4 172.244.0.0/16
ipset add comcast_v4 198.0.0.0/16
ipset add comcast_v4 74.49.227.0/24
ipset add comcast_v4 71.192.0.0/12
ipset add comcast_v4 24.16.0.0/13
ipset add comcast_v4 66.176.0.0/15
ipset add comcast_v4 98.32.0.0/11
ipset add comcast_v4 24.124.128.0/17
ipset add comcast_v4 50.220.178.0/24
ipset add comcast_v4 70.88.0.0/14
ipset add comcast_v4 66.30.0.0/15
ipset add comcast_v4 207.180.9.0/24
ipset add comcast_v4 75.75.128.0/18
ipset add comcast_v4 23.24.0.0/15
ipset add comcast_v4 174.48.0.0/12
ipset add comcast_v4 66.93.180.0/24
ipset add comcast_v4 72.244.138.0/24
ipset add comcast_v4 68.167.25.0/24
ipset add comcast_v4 173.214.184.0/23
ipset add comcast_v4 207.180.15.0/24
ipset add comcast_v4 76.128.0.0/11
ipset add comcast_v4 24.130.0.0/15
ipset add comcast_v4 50.221.162.0/24
ipset add comcast_v4 24.40.0.0/18
ipset add comcast_v4 66.93.182.0/24
ipset add comcast_v4 198.137.252.0/23
ipset add comcast_v4 140.99.79.0/24
ipset add comcast_v4 209.101.248.0/24
ipset add comcast_v4 74.92.0.0/14
ipset add comcast_v4 209.23.192.0/18
ipset add comcast_v4 204.93.173.0/24
ipset add comcast_v4 198.178.8.0/21
ipset add comcast_v4 24.125.0.0/16
ipset add comcast_v4 216.246.28.0/24
ipset add comcast_v4 184.108.0.0/14
ipset add comcast_v4 75.144.0.0/13
ipset add comcast_v4 66.93.181.0/24
ipset add comcast_v4 24.104.128.0/19
ipset add comcast_v4 209.101.249.0/24
ipset add comcast_v4 66.93.45.0/24
ipset add comcast_v4 75.72.0.0/15
ipset add comcast_v4 68.167.58.0/24
ipset add comcast_v4 24.40.64.0/20
ipset add comcast_v4 68.32.0.0/11
ipset add comcast_v4 24.98.0.0/15
ipset add comcast_v4 66.208.192.0/18
ipset add comcast_v4 208.39.128.0/18
ipset add comcast_v4 64.139.64.0/19
ipset add comcast_v4 140.99.77.0/24
ipset add comcast_v4 98.192.0.0/10
ipset add comcast_v4 76.96.0.0/11
ipset add comcast_v4 66.253.72.0/24
ipset add comcast_v4 64.56.32.0/19
ipset add comcast_v4 69.240.0.0/12
ipset add comcast_v4 207.180.8.0/24
ipset add comcast_v4 75.75.0.0/17
ipset add comcast_v4 140.99.49.0/24
ipset add comcast_v4 96.128.0.0/11
ipset add comcast_v4 24.153.64.0/19
ipset add comcast_v4 68.80.0.0/13
ipset add comcast_v4 67.160.0.0/11
ipset add comcast_v4 162.17.0.0/16
ipset add comcast_v4 50.128.0.0/9
ipset add comcast_v4 216.45.128.0/17
ipset add comcast_v4 173.8.0.0/13
ipset add comcast_v4 68.167.27.0/24
ipset add comcast_v4 72.244.152.0/24
ipset add comcast_v4 66.93.47.0/24
ipset add comcast_v4 24.0.0.0/12
ipset add comcast_v4 24.30.0.0/17
ipset add comcast_v4 96.192.0.0/11
ipset add comcast_v4 72.55.0.0/17
ipset add comcast_v4 24.118.0.0/16
ipset add comcast_v4 50.76.0.0/14
ipset add comcast_v4 205.234.234.0/24
ipset add comcast_v4 66.93.43.0/24
ipset add comcast_v4 24.147.0.0/16
ipset add comcast_v4 76.16.0.0/12
ipset add comcast_v4 165.137.0.0/16
ipset add comcast_v4 96.120.0.0/14
ipset add comcast_v4 209.101.250.0/24
ipset add comcast_v4 184.112.0.0/12
ipset add comcast_v4 24.91.0.0/16
ipset add comcast_v4 50.73.0.0/16
ipset add comcast_v4 74.49.244.0/24
ipset add comcast_v4 24.126.0.0/15
ipset add comcast_v4 66.56.0.0/18
ipset add comcast_v4 174.160.0.0/11
ipset add comcast_v4 74.16.0.0/12
ipset add comcast_v4 107.4.0.0/15
ipset add comcast_v4 96.96.0.0/12
ipset add comcast_v4 140.99.127.0/24
ipset add comcast_v4 65.34.128.0/17
ipset add comcast_v4 96.64.0.0/11
ipset add comcast_v4 66.253.78.0/24
ipset add comcast_v4 73.0.0.0/8
ipset add comcast_v4 207.180.54.0/24
ipset add comcast_v4 216.122.112.0/22
ipset add comcast_v4 68.167.59.0/24
ipset add comcast_v4 74.49.242.0/24
ipset add comcast_v4 66.253.77.0/24
ipset add comcast_v4 66.93.46.0/24
ipset add comcast_v4 216.122.116.0/22
ipset add comcast_v4 23.30.0.0/15
ipset add comcast_v4 66.229.0.0/16
ipset add comcast_v4 66.253.76.0/24
ipset add comcast_v4 216.246.7.0/24
ipset add comcast_v4 140.99.132.0/22
ipset add comcast_v4 216.246.102.0/24
ipset add comcast_v4 24.60.0.0/14
ipset add comcast_v4 71.24.0.0/14
ipset add comcast_v4 173.160.0.0/13
ipset add comcast_v4 204.11.116.0/22
ipset add comcast_v4 169.152.0.0/16
ipset add comcast_v4 24.129.0.0/17
ipset add comcast_v4 24.218.0.0/16
ipset add comcast_v4 69.180.0.0/15
ipset add comcast_v4 147.191.0.0/16
ipset add comcast_v4 74.49.246.0/24
ipset add comcast_v4 66.93.183.0/24
ipset add comcast_v4 72.244.144.0/24

# Create IPv6 ipset
ipset create comcast_v6 hash:net family inet6 -exist
ipset flush comcast_v6

# Add IPv6 ranges
ipset add comcast_v6 2603:2000::/20
ipset add comcast_v6 2601::/20
ipset add comcast_v6 2001:558::/29
ipset add comcast_v6 2620:fd:8000::/48
ipset add comcast_v6 2603:3000::/24

# Apply iptables rules (uncomment to use)
# iptables -A INPUT -m set --match-set comcast_v4 src -j ACCEPT
# iptables -A INPUT -m set --match-set comcast_v4 src -j DROP
# ip6tables -A INPUT -m set --match-set comcast_v6 src -j ACCEPT
# ip6tables -A INPUT -m set --match-set comcast_v6 src -j DROP

echo "IP ranges for Comcast loaded successfully!"
echo "IPv4 ranges: 149"
echo "IPv6 ranges: 5"