TON 618 is a very distant and extremely luminous quasar, located near the North Galactic Pole in the constellation Canes Venatici. It contains the most massive known black hole, with a mass of 66 billion M☉. It is large and exemplifies what this project is, hence the name, Project TON.

Project TON Creators

About

Project TON is a Border Gateway Protocol (BGP) speaking black hole service. Essentially, we provide a real time, globally distributed list of Bad Actors on the internet. This allows users of Project TON to block unwanted, malicious or invalid traffic at the perimeter of their networks while taking the load off firewalls and internal security systems. Corporations, businesses, universities and end users are all invited to establish a BGP session with Project TON using the configuration examples provided.


Contact

Join us on Slack or email us at contact at projectton dot com



Contribute

We welcome and are actively seeking anyone who wishes to contribute to either the code, or the list of Bad Actors.

If you wish to contribute to the code, please contact us on Slack.

For those wishing to contribute to the list of Bad Actors, we ask you have at least an ASN and be willing to be vetted first. If you still feel this is something you want to do please get in touch via Slack or email us at contact at projectton dot com

Project TON may vet IP address from contributors based on various criteria, as a result there could be a delay in being added to the blacklist, or it could not be added to the blacklist at all.

Current Contributors

Imperium Inc. | YYC Net Lab | SuperFrink | Kelvin Tran | Scott Steil


Communities

Blackhole (65535:666)

Prefixes tagged with this community have recently engaged in brute-force authentication attacks.

Country Coding (65535:3166, 3166:xxxx)

Country code prefixes can be used to selectively block traffic or permit traffic from one or more countries.

All country-coded prefixes have two communities:

  • [65535:3166] = the community tag to identify it as a Country-coded prefix
  • [3166:xxxx] = the community tag that identifies a particular country code

For the community [3166:xxxx], xxxx is the ISO-3166 country code. See: https://en.wikipedia.org/wiki/List_of_ISO_3166_country_codes

CAUTION: All assigned prefixes should exist in the Country Coded community. Be very selective about how you use this list or you could block all traffic.



IP to Country Code Database

Project TON provides our own IP address (prefix) to country code lookup databases for the purposes of geolocation. You are free to download them and use in your own projects.

Click here to download the latest version



Frequently Asked Questions

How do I get involved?

We are currently seeking contributors, if you would like to get involved please contact us.

What does this cost?

Nothing, however if you or your organizaiton makes extensive use of Project TON, we would ask that you try and contribute.

Where does Project TON fit in my security infrastructure?

Project TON alone is not "defense in depth", it can be part of an overarching security posture, but it is not, in and of itself a standalone security solution. Please be aware, this is a volunteer effort and should be understood as such.

What IP addresses are contained in the Blackhole (65535:666) community?

Essentially, it's a crowd sourced Fail2Ban list provided by contributors and disseminated over BGP.