blocklist-ipsets icon indicating copy to clipboard operation
blocklist-ipsets copied to clipboard

IP2LOCATION /MAXMIND IP ADDRESSES NOT PARSING / UPDATING TO FIREHOL CORRECTLY!!!

Open rcoulsell opened this issue 4 years ago • 0 comments

@ktsaou @fawaf @alonbl @simonnagl

The ip2location/maxmind location files appear to be not getting updated or are being parsed incorrectly.

Per the Readme at: https://github.com/firehol/blocklist-ipsets/blob/master/ip2location_country/README.md, the country feeds are checked daily. According to the firehol site the ip2location_country_ca feed was last updated by its maintainers Thu Oct 28 2021 (49 days ago) / last time updated by firehol Fri Oct 29 2021 (48 days ago). This agrees with the latest version as indicated on the IP2LOCATION ftp site.

Per the documentation of the IP2Location database at: https://lite.ip2location.com/database-ip-country, IP addresses that are looked up in the database (or parsed) should be converted to decimal format (i.e. 23.247.208.0 converts to 402116608)

When opening IP2Locations.com lite db file (https://download.ip2location.com/lite/IP2LOCATION-LITE-DB1.CSV.ZIP) On line 11997 of the file, the IP's in the range of 402114560 to 402122751 indicate a location of the United States. This is correct. However the IP address block of 23.247.208.0/24 is showing on the blocklist-ipsets/geolite2_country/country_ca.netset (i.e. for Canada)

Additionally the notes on this file indicate that it is generated instead from the geolite database provided by MAXMind.

However, their database also shows the correct IP address (GeoLite2 Country: CSV Format) see row 21367 for 23.247.208.0/22 with location code of 6252001 which translates to the United States on the en code translation file.

Therefore both databases show the correct information, but the firehol country lists are clearly either not updating or not parsing correctly.

Can you please ensure the locations for the following are refreshed / updated and showing the correct location: 23.247.128.0/17 23.247.192.0/18 23.247.192.0/19 23.247.208.0/20 23.247.208.0/21 23.247.208.0/22 23.247.208.0/23 23.247.210.0/23 23.247.208.0/24 23.247.209.0/24 23.247.210.0/24 23.247.211.0/24

Most importantly are the last.

rcoulsell avatar Dec 17 '21 05:12 rcoulsell