{"action":"created","issue":{"url":"https://api.github.com/repos/Maikuolan/CIDRAM/issues/2","repository_url":"https://api.github.com/repos/Maikuolan/CIDRAM","labels_url":"https://api.github.com/repos/Maikuolan/CIDRAM/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/Maikuolan/CIDRAM/issues/2/comments","events_url":"https://api.github.com/repos/Maikuolan/CIDRAM/issues/2/events","html_url":"https://github.com/Maikuolan/CIDRAM/issues/2","id":140649266,"number":2,"title":"False Positives?","user":{"login":"Gaffnet","id":13587501,"avatar_url":"https://avatars.githubusercontent.com/u/13587501?v=3","gravatar_id":"","url":"https://api.github.com/users/Gaffnet","html_url":"https://github.com/Gaffnet","followers_url":"https://api.github.com/users/Gaffnet/followers","following_url":"https://api.github.com/users/Gaffnet/following{/other_user}","gists_url":"https://api.github.com/users/Gaffnet/gists{/gist_id}","starred_url":"https://api.github.com/users/Gaffnet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Gaffnet/subscriptions","organizations_url":"https://api.github.com/users/Gaffnet/orgs","repos_url":"https://api.github.com/users/Gaffnet/repos","events_url":"https://api.github.com/users/Gaffnet/events{/privacy}","received_events_url":"https://api.github.com/users/Gaffnet/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Maikuolan/CIDRAM/labels/Bug","name":"Bug","color":"fc2929"},{"url":"https://api.github.com/repos/Maikuolan/CIDRAM/labels/Fixed","name":"Fixed","color":"009900"},{"url":"https://api.github.com/repos/Maikuolan/CIDRAM/labels/Testing","name":"Testing","color":"fbca04"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-03-14T11:36:18Z","updated_at":"2016-03-16T10:49:02Z","closed_at":null,"body":"Hello, \r\n\r\nI've been going over my CIDRAM logs and noticed a large amount of  IPv6 \"Invalid IP\" entries that, at least according to the User-Agents and the IP look-up info, _appear_ to be from mobile users or users from legit ISPs.  Below is a sample of the IPs and AS that are being blocked.\r\n\r\nAdmittedly, I'm not an IT guy so I'm unable to conclusively verify these false positives myself, or verify that they are in IP ranges used for business (hosting, cloud, non-user end point etc) services.\r\n\r\nFrom what I can tell, none of these ranges are applicable in my [custom IPv6 config file](http://pastebin.com/18A7A1dv) (pastebin).\r\n\r\nI'm using version 0.1.1 of CIDRAM with the IPv6.dat file that was updated March 12.\r\n\r\nI appreciate any help you can give me.  Thanks!\r\n\r\n**AS7922\t2601::/20\tComcast IP Services, L.L.C.\r\nAS20214\t2601:580::/26\tComcast IP Services, L.L.C.\r\nAS33650\t2601:600::/26\tComcast IP Services, L.L.C.**\r\n2601:058b:8404:5830:3d16:faef:1293:d0ab\r\n2601:0603:0601:0978:c92f:8bde:f35c:6aaf\r\n2601:0589:0101:0f0c:fcd9:f351:1023:425f\r\n \r\n\r\n**AS852\t2001:569::/33\tTELUS Communications Inc.\r\nAS852\t2001:569:7530::/44\tTELUS-HSIA-RCMDBC01**\r\n2001:0569:753f:0800:b531:2d7b:8715:ff6d \r\n2001:056a:f6f0:0d00:a8d9:758f:f7a8:bbdc\r\n\r\n \r\n**AS10796\t2607:fcc8::/32\tTime Warner Cable Internet LLC\r\nAS11426\t2606:a000::/32\tTime Warner Cable Internet LLC**\r\n2606:a000:674b:3800:3531:1784:2690:b775\r\n2607:fcc8:e785:4a00:b966:af7a:0493:5bc6\r\n \r\n \r\n**AS6167\t2600:1000::/28\tCellco Partnership DBA Verizon Wireless\r\nAS22394\t2600:1001::/32\tCellco Partnership DBA Verizon Wireless\r\nAS22394\t2600:1001:b110::/44\tCellco Partnership DBA Verizon Wireless**\r\n2600:1001:b11f:4ff5:c180:7036:6d7f:1e2f"},"comment":{"url":"https://api.github.com/repos/Maikuolan/CIDRAM/issues/comments/197258193","html_url":"https://github.com/Maikuolan/CIDRAM/issues/2#issuecomment-197258193","issue_url":"https://api.github.com/repos/Maikuolan/CIDRAM/issues/2","id":197258193,"user":{"login":"Gaffnet","id":13587501,"avatar_url":"https://avatars.githubusercontent.com/u/13587501?v=3","gravatar_id":"","url":"https://api.github.com/users/Gaffnet","html_url":"https://github.com/Gaffnet","followers_url":"https://api.github.com/users/Gaffnet/followers","following_url":"https://api.github.com/users/Gaffnet/following{/other_user}","gists_url":"https://api.github.com/users/Gaffnet/gists{/gist_id}","starred_url":"https://api.github.com/users/Gaffnet/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Gaffnet/subscriptions","organizations_url":"https://api.github.com/users/Gaffnet/orgs","repos_url":"https://api.github.com/users/Gaffnet/repos","events_url":"https://api.github.com/users/Gaffnet/events{/privacy}","received_events_url":"https://api.github.com/users/Gaffnet/received_events","type":"User","site_admin":false},"created_at":"2016-03-16T10:49:02Z","updated_at":"2016-03-16T10:49:02Z","body":"Hi Maikuolan,\r\n\r\nReporting back and so far, so good.   The IPs blocked by CIDRAM so far have been accounted for in the .dat files.  I'm not seeing any stray IPs or IPs from ISPs.\r\n\r\n"}}