Author Topic: Neat site that lists IP ranges per country (downloadable tables)  (Read 245 times)

0 Members and 1 Guest are viewing this topic.

Offline bingo600Topic starter

  • Super Contributor
  • ***
  • Posts: 1998
  • Country: dk
Nice site with "Consolidated CIDR's" of different countries.

https://ipv4.fetus.jp/

Git
https://github.com/fetus-hina/ipv4.fetus.jp-exports/tree/master

I used "Raw git" lists directly in my firewall, updated once a day.

I know it's not much worth securitywise, as hackers also know VPN & Hosting and often uses other hacked machines as proxy.
But it gave me a "Nice ..." feeling to block a few countries.

/Bingo
 

Offline madires

  • Super Contributor
  • ***
  • Posts: 7844
  • Country: de
  • A qualified hobbyist ;)
Re: Neat site that lists IP ranges per country (downloadable tables)
« Reply #1 on: May 19, 2024, 04:09:52 pm »
There are many websites providing lists of country specific network prefixes. If you need IPv4 and IPv6 have a look at https://github.com/herrbischoff/country-ip-blocks. Or you can consult the sources of all that data, i.e. the whois databases of the RIRs.
 

Offline golden_labels

  • Super Contributor
  • ***
  • Posts: 1245
  • Country: pl
Re: Neat site that lists IP ranges per country (downloadable tables)
« Reply #2 on: May 19, 2024, 09:36:11 pm »
This seems like nothing more than a compilation from RIRs. That is: one is receiving registration country of the AS owner. While there is a high correlation between the AS and location of addresses within it, address leasing and IP anycast make it less reliable. This is very different from e.g. what Maxmind offered in their now defunct database or what market intelligence services sell.

That doesn’t mean it’s useless. It removes pointless load from upstreams and saves users some work. But don’t get a wrong picture of what’s delivered.

The use is also limited. It may be used to set the default options for the client: e.g. legal framework, shipping options, taxation, CDN etc. But not only often these are poorly implemented or outright abused,(2) Much more often it’s simply used to enforce racist stances or implement atavistic reactions. It bears zero relevance to security: if anything, bloclists (e.g. from spamhaus) are working well. But even them are controversial on many levels.


(1) The most famous example: AS15169 is registered in US, yet many of its addresses are physically neighbours of AS5617 in Warsaw (Poland). You may recognize this ASN from 8.8.8.8 being in it, but it’s much bigger than just the DNS service.
(2) eBay is a good example of both. Services facing registered users get confused and you receive a mix of two language versions. On top of that eBay limits service’s features based on your location.
People imagine AI as T1000. What we got so far is glorified T9.
 


Share me

Digg  Facebook  SlashDot  Delicious  Technorati  Twitter  Google  Yahoo
Smf