Country CIDR IP ranges

Hi thanks for these lists. All the best Paul

I compared your AF list to one from IP2Location and your’s is very short. Can you explain why?

Hi,

On this website, they provides aggregated route : http://ipdeny.com/ipblocks/ If you could update your script to pull the data from this website it would be very usefull. It would reduce the load on our Mikrotik router instead of having 6900 routes there is 3600 routes once aggregated.

Thx !

Hi Thank you for this site, it makes life so easy and I am glad that you are hosting this for the community, I have however noted one issue, If it sees a duplicate the script stops running it doesn’t finish the whole list. Do you have a work around for this? Thank you

Mario

Now, this is a nice idea of course, but you should explain about the major security risk which users will create when using your scripts directly on their mikrotik routers.

At any point in time you might add commands to those scripts which can do totally different things than only modifying address list. I mean you could be opening up ports or adding users, etc…

Now assuming that you are uploading these generated scripts to iwik.org:
You might have good intentions uploading the scripts to that web, but what if someone gets access to the bucket which contains all those scripts and uploads different versions which can do harm.

In general the idea is nice, the execution however is not so well done as seen from a security perspective.

I don’t expect you to post a fix for this, as when I decide to use something like this, I will build this on my own. But you should at least mention the fact that using these scripts from iwik.org without some very well done sanity checking is a major security risk.

Hi,
I need a country IP Network List. While i am surfing on the internet, i saw your web address named http://www.iwik.org/ipcountry/. I have a question for this. Are they updated list for the whole network of any country ? Can you help me for that ?

Thanks for your interest,
Thank you…

RSC:
:foreach i in={“AM”; “AT”; “AZ”; “BE”; “BY”; “CA”; “CH”; “CZ”; “DE”; “DK”; “EE”; “ES”; “EU”; “FI”; “FR”; “GB”; “GE”; “IE”; “IL”; “IT”; “KG”; “KZ”; “LI”; “LT”; “LU”; “LV”; “MD”; “MK”; “PL”; “PT”; “RO”; “RU”; “SE”; “SZ”; “TM”; “TR”; “UA”; “UZ”; “NL”; “US”; “TH”} do={
#/tool fetch url=”http://www.iwik.org/ipcountry/mikrotik/$i” mode=http;
/import file-name=$i;
}

Hi, thank you for your service, a very valuable thing. But there is a supplement. Lacking a separate file in Central Asia, the Former Soviet Union and other United countries

I am not able to find the IP of UK and UAE.
Can you provide same.
Thanks in advance.

Thanks, It also works on Tixati by adding the URL into IP Filter

Hi everyone , im fairly new into this.

im Running the script on my Mikrotik for Canada. i got a few connections attemps on my IP phone system from a adress starting with 185.x.x.x , but i dont see that range into the script file.

can you explain to me how its work? did i receive connection attemps from 185.x.x.x because it is not in the file itself ?

thanks

Hi

I also found your awesome list of ip’s (http://www.iwik.org/ipcountry/)

I want to add the ip’s for denmark to htaccess so only visitors from denmark are allowed, but i need it to be automated so i can just ask CRON to call a php page and the list is updated automatic

i know that it would need to remove a section from htaccess and then insert a new BUT updated section

i just cant find any good guides on google on how to do it

i like the idea that a section is inserted and replaced as this allow me to have a section that allows google servers after your list so they are not blocked

can you help out maybe?

my php page that downloads the list, it also adds a 1 to the end of each file

$url,
// CURLOPT_BINARYTRANSFER => 1, — No effect from PHP 5.1.3
CURLOPT_RETURNTRANSFER => 1,
CURLOPT_FILE => $file,
CURLOPT_TIMEOUT => 50,
CURLOPT_USERAGENT => ‘Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)’
]);

$response = curl_exec($curl);

if($response === false) {
// Update as of PHP 5.3 use of Namespaces Exception() becomes \Exception()
throw new \Exception(‘Curl error: ‘ . curl_error($curl));
}

$response; // Do something with the response.

$handle = fopen(“DK.cidr”, “r”);
$first = fgets($handle,2048); #get first line.
$outfile=”temp”;
$o = fopen($outfile,”w”);
while (!feof($handle)) {
$buffer = fgets($handle,2048);
fwrite($o,$buffer);
}
fclose($handle);
fclose($o);
rename($outfile,”dk.txt”);

$lines = file(“dk.txt”, FILE_IGNORE_NEW_LINES);
$lines = array_map(function($v){return $v . ” 1″ . PHP_EOL;}, $lines);
file_put_contents(“dk.txt”, $lines);

unlink(‘DK.cidr’);

?>

i then followed this link: https://stackoverflow.com/questions/15579620/how-to-block-100-000-individual-ip-addresses

adding this to htaccess:

RewriteEngine On
RewriteMap deny_ips txt:/path/to/deny_ips.txt

RewriteCond ${deny_ips:%{REMOTE_ADDR}|0} !=0
RewriteRule ^ – [L,F]

but i get a wrong server config page 🙁

no reply from unoeuro.com 🙁

so i guess its a no go for me

Hi all.
I have error with insertion of address in list FR & NL
seems to have 2 entry the same causing error in insertion

Добрыйдень!
У меня проблема со второй строкой
/ip firewall address-list
remove [/ip firewall address-list find list=RU]
Ошибка. Нет пробела между address-list и remove
Можете добавить пробел после между address-list?

site seems to now be down any update on where to get the list.. i have commented out the download for now and just loading an old copy

as for your issue above try all on one line no spaces.. if you are editing in dos or
windows strip of the crlf

/put [/system clock get date]
put “cleaning out old address lists”
/ip firewall address-list remove [/ip firewall address-list find list=Whitelist]
/ip firewall address-list remove [/ip firewall address-list find list=Blacklist]
/ip firewall address-list remove [/ip firewall address-list find list=OtherSubnetIPs]
/ip firewall address-list remove [/ip firewall address-list find list=RU]
/ip firewall address-list remove [/ip firewall address-list find list=RU2]
/ip firewall address-list remove [/ip firewall address-list find list=CN]
/ip firewall address-list remove [/ip firewall address-list find list=KZ]
/ip firewall address-list remove [/ip firewall address-list find list=BR]
/ip firewall address-list remove [/ip firewall address-list find list=DNS_DOS]
/ip firewall address-list remove [/ip firewall address-list find list=wifi_routers]

Hello, there appears to be a problem with this. Adress list is not loading on any mikrotik. I looked at your file and it appears that syntax is wrong. 29.4.2020 at 2:00 UTC it loaded fine but today at the same time adresses are not beeing fetched.

Please update AT country ip from ftp://ftp.ripe.net/pub/stats/ripencc/