https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt Rohliste öffnen Beschreibung
Führt die Ausgangsbereiche verbreiteter VPN-Dienste zusammen. Gedacht nicht zum Sperren, sondern zum Erkennen: etwa um Anmeldungen aus einem VPN zusätzlich zu prüfen oder um Geoinformationen richtig einzuordnen. Wer VPN-Nutzer pauschal aussperrt, trifft überwiegend Menschen, die schlicht ihre Verbindung schützen.
Integration
Address list per script
Fetch the list and import it into an address list called blocklist:
/tool fetch url="https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt" dst-path=blocklist.rsc
/import blocklist.rscIf the list is a plain text file with one address or CIDR per line, convert it first:
/tool fetch url="https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt" dst-path=blocklist.txt
:foreach line in=[/file get blocklist.txt contents] do={
/ip firewall address-list add list=blocklist address=$line comment="VPN-Adressbereiche (X4BNet)"
}Use the list in the firewall
/ip firewall filter add chain=forward src-address-list=blocklist action=drop comment="VPN-Adressbereiche (X4BNet)"
/ip firewall filter add chain=forward dst-address-list=blocklist action=drop comment="VPN-Adressbereiche (X4BNet)"Schedule the fetch with /system scheduler to keep the list current. Very large lists consume RAM, so check the available memory of your device first.
banIP (recommended)
- Install the package:
opkg update && opkg install banip luci-app-banip - Open LuCI → Services → banIP → Feeds and add a custom feed with the URL below.
- Enable the feed and click Save & Apply.
https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txtManual with nftables
wget -qO /tmp/blocklist.txt "https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt"
nft add set inet fw4 blocklist { type ipv4_addr; flags interval; }
nft -f - <<EOF
$(awk '!/^[#;]/ && NF {print "add element inet fw4 blocklist { " $1 " }"}' /tmp/blocklist.txt)
EOF
nft add rule inet fw4 forward ip saddr @blocklist dropipset create blocklist hash:net -exist
curl -fsSL "https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt" | grep -Eo '^[0-9]{1,3}(.[0-9]{1,3}){3}(/[0-9]{1,2})?' |
while read -r net; do ipset add blocklist "$net" -exist; done
iptables -I INPUT -m set --match-set blocklist src -j DROP
iptables -I FORWARD -m set --match-set blocklist src -j DROPPersist the set and re-run the download from cron to keep it current:
ipset save blocklist -f /etc/ipset.blocklist
# /etc/cron.daily/blocklist
Add the list as an ipset in /etc/firehol/firehol.conf:
ipset4 create blocklist hash:net
ipset4 addfile blocklist "https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt"
blacklist4 full inface any src ipset:blocklistReload with firehol try and confirm before making it permanent.
- Go to Firewall → Aliases and click +.
- Choose type URL Table (IPs), set a refresh interval (for example 1 day) and paste the URL below.
- Save and apply, then use the alias as source in a block rule under Firewall → Rules.
https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt- Go to Firewall → pfBlockerNG → IP → IPv4 and click Add.
- Paste the URL below as source, set State to ON and pick the action (Deny Both is the usual choice).
- Save, then run Update → Force Reload → IP.
https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txtcurl -fsSL "https://raw.githubusercontent.com/X4BNet/lists_vpn/main/output/vpn/ipv4.txt" -o /var/lib/suricata/data/blocklist.txtReference the file from a rule using a dataset:
alert ip [!$HOME_NET] any -> $HOME_NET any (msg:"VPN-Adressbereiche (X4BNet) match";
ip.src; dataset:isset,blocklist, type string, load blocklist.txt; sid:1000001;)Letzte Änderungen
Kürzlich hinzugefügte Einträge
- 45.80.186.0/23
- 45.134.189.0/24
- 82.149.78.0/23
- 82.197.78.0/24
- 86.48.12.0/23
- 86.48.14.0/24
- 94.140.8.0/24
- 95.214.114.0/24
- 140.228.24.204/30
- 145.79.197.0/24
- 152.233.106.0/24
- 158.173.121.52/32
- 158.173.121.81/32
- 176.116.32.0/22
- 178.132.107.0/24
- 178.132.108.0/24
- 178.132.110.0/23
- 181.214.206.93/32
- 181.214.206.94/31
- 185.153.177.0/24
- 185.227.132.0/24
- 185.239.150.0/23
- 191.96.168.98/32
- 193.9.36.0/22
- 195.78.54.168/30
Kürzlich entfernte Einträge
- 2.58.74.0/24
- 5.182.16.0/24
- 45.80.28.0/24
- 45.80.184.0/22
- 45.94.208.0/24
- 45.95.160.0/22
- 45.134.188.0/22
- 45.137.76.0/22
- 45.140.184.0/24
- 77.243.86.0/23
- 81.17.122.0/24
- 82.149.76.0/22
- 82.149.80.0/22
- 82.197.76.0/22
- 84.39.151.0/24
- 85.190.238.0/24
- 86.48.12.0/22
- 86.62.28.0/23
- 89.213.63.0/24
- 91.196.69.0/24
- 91.205.106.0/23
- 91.214.64.0/23
- 93.114.60.0/23
- 94.140.8.0/23
- 94.140.11.0/24