Generate blocklists by country

For discussions about security.
Post Reply
Message
Author
dancytron
Posts: 1519
Joined: Wed 18 Jul 2012, 19:20

Generate blocklists by country

#1 Post by dancytron »

Here is a link that lets you generate ip blocklists by country.

https://www.countryipblocks.net/acl.php
Attachments
2020-02-21-132938_1280x1024_scrot.jpg
screenshot
(53.34 KiB) Downloaded 58 times

musher0
Posts: 14629
Joined: Mon 05 Jan 2009, 00:54
Location: Gatineau (Qc), Canada

#2 Post by musher0 »

Hi dancytron.

Thanks for this.

However, for myself, I must say that I am a bit puzzled:
-- First of all, is the list produced by this site compatible with our "hosts" file?
I see lots of formats in the second column. Which is the one we use?

-- If I was managing the site e.g., of a political party, I could see the utility of this,
but as an individual?

-- How can I be certain that a certain phishing behavior, say, is coming from country A
and not from country B? It's so easy nowadays to base your site in another country
or to pretend you are operating from another country.

TIA for any insight.

Regards.
musher0
~~~~~~~~~~
"You want it darker? We kill the flame." (L. Cohen)

dancytron
Posts: 1519
Joined: Wed 18 Jul 2012, 19:20

#3 Post by dancytron »

musher0 wrote:Hi dancytron.

Thanks for this.

However, for myself, I must say that I am a bit puzzled:
-- First of all, is the list produced by this site compatible with our "hosts" file?
I see lots of formats in the second column. Which is the one we use?

-- If I was managing the site e.g., of a political party, I could see the utility of this,
but as an individual?

-- How can I be certain that a certain phishing behavior, say, is coming from country A
and not from country B? It's so easy nowadays to base your site in another country
or to pretend you are operating from another country.

TIA for any insight.

Regards.
I use peer guardian, so I'm not sure what format would go into a regular hosts file. I am sure someone else will know or you could figure it out by trial and error.

As an individual, I think we can assume that hosts in china, iran, etc are up to no good, especially if you've whitelisted http and https ports (can you do this with just plain hosts files? I"m not sure).

As far as people spoofing what country they are from, yeah nothing is going to be fool proof in this day and age.

But it seems to do exactly what it says on the tin.

Post Reply