Home > IPDeny > Missing or incorrect data in zone files

Missing or incorrect data in zone files

Some of our zone data file users are complaining about IP errors, missing IP blocks or even incorrect data. Unfortunately, we do compile data from regional registries: Ripe, Arin, Apnic, Afrinic, Lacnic and IANA. If the registry has an missing IP block in their data files we will miss this IP block in our country zones files as well.

If you have complaints about IP zones that are wrong or not updated, please contact your local registry and ask them to change this information.

Categories: IPDeny Tags:
  1. VIVO
    March 22nd, 2012 at 12:51 | #1

    Is this IPDeny offering available IP Deny formats list for:

    PeerBlock
    PeerGuardian2 or PG2

    Such as IP Block or Firewall applicant

    Thanks

  2. stefan
    May 13th, 2012 at 03:10 | #2

    Hi,

    Some Chinese IPs which are missing.

    27.159.197.137
    27.159.213.186
    27.159.198.137
    27.159.193.211
    27.159.194.238
    27.159.204.161
    27.159.199.125

    all best
    Stefan

  3. Fred
    January 17th, 2013 at 00:11 | #3

    I mention the 118.x addresses because I had a couple of them knocking on my 443 port even though I had OTRW Asiablock running. I think Asiablock gets most of its data files from IP Deny.

  4. February 15th, 2013 at 21:03 | #4

    Hi,
    Some TW IPs addreses are missing in tw.zone.

    36.224.0.0 – 36.239.255.255
    netname: HINET-NET
    descr: CHTD, Chunghwa Telecom Co.,Ltd.
    descr: No.21-3, Sec.1, Hsin-Yi Rd.
    descr: Taipei Taiwan 100
    country: TW

    all best
    Françcoi

  5. March 9th, 2013 at 19:00 | #5

    Congratulations for the professional work of IPdeny team.

    Please let me to do two question:

    Background:
    If you see this link (Into GeoLite Country – download): http://dev.maxmind.com/geoip/geolite
    And compare with IPdeny, you will see that the list of IPdeny is quite out of date.
    Recently I’ve configured my firewall (iptables – ipset) to block all IP/ports from eastern countries, but unfortunately my work was in vain because of the lack of many IPs address list in IPdeny, and now I receive a lot of mail SPAM because my Frewall don’t is configurated as I wanted with all IPs corresponding.

    Questions:

    1- Can you update the IPs address list
    2- If the answer is yes, when will it be ready?

    IPdeny is a exellent proyect, please guys put on batteries

    Best regards
    Cesar

  6. April 4th, 2013 at 21:53 | #6

    Here is a /16 that is doing a lot of probes and is not in the cn list.

    Thanks for your work on these lists! They are a great tool.

    inetnum: 61.147.0.0 – 61.147.255.255
    netname: CHINANET-JS
    descr: CHINANET jiangsu province network
    descr: China Telecom
    descr: A12,Xin-Jie-Kou-Wai Street
    descr: Beijing 100088
    country: CN
    admin-c: CH93-AP
    tech-c: CJ186-AP
    mnt-by: MAINT-CHINANET
    mnt-lower: MAINT-CHINANET-JS
    mnt-routes: maint-chinanet-js
    changed: hostmaster@ns.chinanet.cn.net 20020209
    changed: hostmaster@ns.chinanet.cn.net 20030306
    status: ALLOCATED non-PORTABLE
    source: APNIC

  7. Rob
    April 13th, 2013 at 09:05 | #7

    You might want to add KRNIC to your scans as your Korea file is missing a large number of networks that KRNIC controls. Your Korea file contains 331 networks. My file that includes KRNIC has 960 networks (a significant difference).

  8. April 14th, 2013 at 07:28 | #8

    There are well over a thousand netblock entries missing from the CN zone.

  9. Ipdeny
    June 2nd, 2013 at 22:34 | #9

    Hello and thanks for your report.
    It looks like APNIC has not updated these blocks in their zone files – we pull info from there….

  10. Ipdeny
    June 2nd, 2013 at 22:34 | #10

    Thanks for your comment!
    It looks like APNIC has not updated these blocks in their zone files – we pull info from there….

  11. Ipdeny
    June 2nd, 2013 at 22:35 | #11

    We pull data from APNIC zone files – I guess they have not updated this block in their DB (zone files?)…

  12. Ipdeny
    June 2nd, 2013 at 22:42 | #12

    We pull data from regional registries. If regional registry like RIPE, APNIC doesn’t have such information in their DB – the IP block(s) will be missed from our zone files…. also, please keep in mind that we do not have any full time staff (this is a free service) and we do not generate any income to hire a staff to manually update each IP block etc and respond all inquiries in one business day. Thanks for your comments!

  13. Ipdeny
    June 2nd, 2013 at 22:43 | #13

    Thank you for your follow up. This IP block is not in APNIC published DB records….. as soon as they update their DB, we will probably include it in our records/zone files.

    IPDeny Staff

  14. Mtofa
    August 23rd, 2013 at 06:21 | #14

    I checked the AUstralia zone today(23 August) and it is completley different than the list I had few days ago. A large number of ip blocks are missing from australia’s zone file.
    Can I get the old zone file (19- august 2013)?

  15. Francisco J. Bejarano
    November 5th, 2013 at 09:44 | #15

    Hi

    First of all, thanks to IPDeny for your jobs.

    I use iptables with a bash script to download your files and add rules to deny countries in my servers.

    Some weeks ago we saw that some country files as es.zone (for example) has 0bytes of content. This files continues with 0 bytes now.

    If we go to http://www.ipdeny.com/ipblocks/ the file es.zone has contents
    SPAIN (ES) [download zone file] Size: 6.38 KB
    But if we click in download zone file, the files has 0bytes.

    If we download (from the same page)

    Zone files last updated:

    Download compressed tar archive with all zone files in it: all-zones.tar.gz

    This file has 0 bytes too.

    I dont know what happens. Is there any solution to obtain the files with the ip contents to use it?

    Thank you 🙂

  16. FrequentUser
    January 11th, 2014 at 20:27 | #16

    Just wanted to inform you that most of your zone files are either 0 bytes (regardless of what the site itself says), and all have matching md5 sums. Which indicates something went wrong somewhere during your last update of the zone files. If you could fix it, that would be great as I uses this pretty routinely for iptables and firewalls.

  17. Ted Testyman
    July 11th, 2015 at 18:59 | #17

    Network 169.239.12.0/22 from cv.zone is a duplicate, ignored.
    Network 196.40.112.0/20 from mz.zone is a duplicate, ignored.

  18. Aaron G
    September 10th, 2015 at 21:59 | #18

    The UNITED KINGDOM (GB) list contains 91.189.88.0/21 which includes some Canonical servers in Boston, MA. If traffic is blocked to this /21, apt updates which use archive.ubuntu.com will fail. FWIW

    In short, 91.189.88.0/21 should not be on the GB list.

  19. February 23rd, 2016 at 04:00 | #19

    This is a US based IP in PA, seems to be an infected machine, always attempting brute access to one of my web servers.

    108.59.248.198/24

    Please add it to us.zone

  20. mbnoimi
    April 16th, 2016 at 09:06 | #20

    Chinese IP:

    222.186.34.212

  21. mbnoimi
    April 17th, 2016 at 03:50 | #21

    Another Chinese IP:

    103.38.42.216