Location July 2021

location@lists.ipfire.org

4 participants
7 discussions

[PATCH] location-importer.in: Attempt to provide meaningful AS names if organisation handles are missing
by Peter Müller 05 Aug '21

05 Aug '21

A decent amount of autnum objects - especially, but not exclusively in the APNIC sector - does not contain a link to an organisation handle. In such cases, this patch is going to use the first description line of the atunum object in question (if available) as a string for its name. The overwhelming majority of affected ASNs contains a valuable information there, so this is almost as good as having an organisation handle linked to it. Fixes: #12660 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 28 +++++++++++++++++++++++++--- 1 file changed, 25 insertions(+), 3 deletions(-) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index d4b0ca2..bec0b62 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -393,11 +393,11 @@ class CLI(object): with self.db.transaction(): # Create some temporary tables to store parsed data self.db.execute(""" - CREATE TEMPORARY TABLE _autnums(number integer, organization text, source text NOT NULL) + CREATE TEMPORARY TABLE _autnums(number integer NOT NULL, organization text NOT NULL, source text NOT NULL) ON COMMIT DROP; CREATE UNIQUE INDEX _autnums_number ON _autnums(number); - CREATE TEMPORARY TABLE _organizations(handle text, name text NOT NULL, source text NOT NULL) + CREATE TEMPORARY TABLE _organizations(handle text NOT NULL, name text NOT NULL, source text NOT NULL) ON COMMIT DROP; CREATE UNIQUE INDEX _organizations_handle ON _organizations(handle); @@ -604,10 +604,32 @@ class CLI(object): elif key == "org": autnum[key] = val.upper() + elif key == "descr": + # Save the first description line as well... + if not key in autnum: + autnum[key] = val + # Skip empty objects - if not autnum: + if not autnum or not "asn" in autnum: return + # Insert a dummy organisation handle into our temporary organisations + # table in case the AS does not have an organisation handle set, but + # has a description (a quirk often observed in APNIC area), so we can + # later display at least some string for this AS. + if not "org" in autnum: + if "descr" in autnum: + autnum["org"] = "LIBLOC-%s-ORGHANDLE" % autnum.get("asn") + + self.db.execute("INSERT INTO _organizations(handle, name, source) \ + VALUES(%s, %s, %s) ON CONFLICT (handle) DO NOTHING", + autnum.get("org"), autnum.get("descr"), source_key, + ) + else: + log.warning("ASN %s neither has an organisation handle nor a description line set, omitting" % \ + autnum.get("asn")) + return + # Insert into database self.db.execute("INSERT INTO _autnums(number, organization, source) \ VALUES(%s, %s, %s) ON CONFLICT (number) DO UPDATE SET \ -- 2.20.1

2 5

[PATCH] override-*: regular batch of various overrides
by Peter Müller 21 Jul '21

21 Jul '21

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 63 ++++++++++++++-- overrides/override-a2.txt | 5 ++ overrides/override-a3.txt | 90 ++++++++++++++++++++++ overrides/override-other.txt | 140 ++++++++++++++++++++++++++++++++--- 4 files changed, 283 insertions(+), 15 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 4dccbfc..284c3e8 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -71,6 +71,11 @@ descr: Asiamax Ltd. VPN remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS39770 +descr: 1337TEAM LIMITED / eliteteam[.]to +remarks: Owned by an offshore letterbox company, suspected rogue ISP +is-anonymous-proxy: yes + aut-num: AS43233 descr: VPS 404 Ltd. remarks: VPN provider [high confidence, but not proofed] located in ES @@ -93,6 +98,12 @@ descr: BeeVPN ApS remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS51381 +descr: 1337TEAM LIMITED / eliteteam[.]to +remarks: Owned by an offshore letterbox company, suspected rogue ISP +is-anonymous-proxy: yes +country: RU + aut-num: AS51446 descr: SP Argaev Artem Sergeyevich / Foundation Respect My Privacy remarks: VPN provider [high confidence, but not proofed] @@ -104,23 +115,28 @@ remarks: VPN provider (claims PA or BZ for some prefixes, but they are all hos is-anonymous-proxy: yes country: CH +aut-num: AS53559 +descr: KST Networks / ANONYMIZER +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS54990 descr: 1337 Services LLC remarks: Tor relay and VPN provider, traces back to SE [high confidence, but not proofed] is-anonymous-proxy: yes country: SE -aut-num: AS53559 -descr: KST Networks / ANONYMIZER -remarks: VPN provider [high confidence, but not proofed] -is-anonymous-proxy: yes - aut-num: AS55303 descr: Eagle Sky Co., Lt[d ?] remarks: Autonomous System registered to offshore company, abuse contact is a freemail address, address says "0 Market Square, P.O. Box 364, Belize", seems to trace to some location in AP vicinity is-anonymous-proxy: yes country: AP +aut-num: AS56873 +descr: 1337TEAM LIMITED / eliteteam[.]to +remarks: Owned by an offshore letterbox company, suspected rogue ISP +is-anonymous-proxy: yes + aut-num: AS58110 descr: IP Volume Ltd. / Epik remarks: Shady Autonomous System registered to letterbox company, possibly copycat operation of Epik registrar, many prefixes announced refer to "anonymize" infrastructure @@ -136,6 +152,11 @@ descr: Geotelco Limited remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes +aut-num: AS60424 +descr: 1337TEAM LIMITED / eliteteam[.]to +remarks: Owned by an offshore letterbox company, suspected rogue ISP +is-anonymous-proxy: yes + aut-num: AS60729 descr: Zwiebelfreunde e.V. remarks: Tor relay provider @@ -146,6 +167,12 @@ descr: Quintex Alliance Consulting remarks: Tor relay provider is-anonymous-proxy: yes +aut-num: AS132825 +descr: Defense Australia Network +remarks: ... seems to be loaded with proxies, and not located in AU after all (HK?) +is-anonymous-proxy: yes +country: AP + aut-num: AS135609 descr: AMPR VPN remarks: VPN provider @@ -233,11 +260,22 @@ remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes country: GB +aut-num: AS212824 +descr: WildProxies +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes +country: NL + aut-num: AS212987 descr: NekoCloud Solutions Limited remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes +aut-num: AS213224 +descr: Blue Black Squared Limited +remarks: Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here +is-anonymous-proxy: yes + aut-num: AS394087 descr: Secure Internet LLC / PureVPN remarks: VPN provider @@ -1253,6 +1291,11 @@ descr: Tredinvest LLC / bestwest[.]host remarks: VPN provider or offering similar services [high confidence, but not proofed] is-anonymous-proxy: yes +net: 185.215.113.0/24 +descr: 1337TEAM LIMITED / eliteteam[.]to +remarks: Owned by an offshore letterbox company, suspected rogue ISP +is-anonymous-proxy: yes + net: 185.220.100.0/22 descr: Zwiebelfreunde e.V. / F3 Netze e.V. / The Calyx Institute remarks: Tor relay provider @@ -1450,6 +1493,11 @@ descr: Lynx Proxies Ltd. remarks: VPN provider is-anonymous-proxy: yes +net: 194.110.84.0/24 +descr: NordVPN +remarks: VPN provider +is-anonymous-proxy: yes + net: 194.242.2.0/24 descr: Mullvad VPN AB remarks: VPN provider @@ -1804,3 +1852,8 @@ net: 2c0f:f930::/32 descr: Cyberdyne S.A. remarks: Tor relay provider is-anonymous-proxy: yes + +net: 2a10:9700::/29 +descr: 1337TEAM LIMITED / eliteteam[.]to +remarks: Owned by an offshore letterbox company, suspected rogue ISP +is-anonymous-proxy: yes diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index eeb4099..4aac6ea 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -468,6 +468,11 @@ descr: ALCON TELECOM LTD remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS212722 +descr: ALMASFOOFA for Communication & Internet Ltd +remarks: Satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes + aut-num: AS265676 descr: INTERSAT S.A. remarks: Satellite Internet provider diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 4b313f8..3c38b69 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -14,6 +14,16 @@ descr: University of Pennsylvania remarks: Generic anycast network is-anycast: yes +aut-num: AS1921 +descr: NIC.at +remarks: TLD operator's anycast network +is-anycast: yes + +aut-num: AS2484 +descr: AFNIC +remarks: TLD operator's anycast network +is-anycast: yes + aut-num: AS2591 descr: IMPLETEC TECHNOLOGIES LTD remarks: Generic anycast network, RIR contact data contain garbage :-/ @@ -25,6 +35,11 @@ descr: DirectNIC, Ltd. remarks: Generic anycast network [high confidence, but not proofed] is-anycast: yes +aut-num: AS9179 +descr: FidoNet Registration Services Ltd. +remarks: Generic anycast network +is-anycast: yes + aut-num: AS13335 descr: Cloudflare, Inc. remarks: Worldwide CDN, does not make sense to assign their networks to a specific country @@ -35,6 +50,21 @@ descr: Akamai Technologies, Inc. remarks: Worldwide CDN, does not make sense to assign their networks to a specific country is-anycast: yes +aut-num: AS18366 +descr: APNIC +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS18368 +descr: APNIC +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS18369 +descr: APNIC +remarks: Generic anycast network +is-anycast: yes + aut-num: AS20577 descr: TRADEWEB EUROPE LIMITED remarks: Generic anycast network [high confidence, but not proofed] @@ -100,6 +130,11 @@ descr: Canadian Internet Registration Authority (CIRA) remarks: Generic anycast network is-anycast: yes +aut-num: AS41637 +descr: Hosting.de GmbH +remarks: Generic anycast network +is-anycast: yes + aut-num: AS42388 descr: ANEXIA Internetdienstleistungs GmbH remarks: Public anycast DNS nameserver network [high confidence, but not proofed] @@ -111,6 +146,16 @@ remarks: Generic anycast network [high confidence, but not proofed], RIR data co is-anycast: yes country: RU +aut-num: AS47578 +descr: PRT Systems Limited +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS48283 +descr: Stichting Internet Domeinregistratie Nederland +remarks: TLD operator's anycast network +is-anycast: yes + aut-num: AS49287 descr: Melbikomas UAB remarks: Generic anycast network [high confidence, but not proofed] @@ -127,6 +172,16 @@ descr: Misaka Network, Inc. remarks: Generic anycast network is-anycast: yes +aut-num: AS57706 +descr: Hybula B.V. +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS57926 +descr: SafeDNS, Inc. +remarks: Public anycast DNS resolver network [high confidence, but not proofed] +is-anycast: yes + aut-num: AS58093 descr: coreIT.pl remarks: Generic anycast network @@ -157,6 +212,11 @@ descr: EZNet LIMITED remarks: Generic anycast network is-anycast: yes +aut-num: AS61107 +descr: TOONBOX STUDIO LTD +remarks: Generic anycast network [high confidence, but not proofed] +is-anycast: yes + aut-num: AS62766 descr: SJB Communications remarks: Generic anycast network @@ -177,6 +237,11 @@ descr: AusRegistry remarks: TLD operator's anycast network is-anycast: yes +aut-num: AS134409 +descr: PublicDNS / HostLink +remarks: Public anycast DNS resolver network +is-anycast: yes + aut-num: AS198794 descr: Thomas Steen Rasmussen / UncensoredDNS / censurfridns.dk remarks: Public anycast DNS resolver network @@ -197,6 +262,11 @@ descr: CentralNic Ltd remarks: Generic anycast network is-anycast: yes +aut-num: AS202687 +descr: Mainloop AB +remarks: Generic anycast network +is-anycast: yes + aut-num: AS203391 descr: Cloud DNS Ltd remarks: Generic anycast network @@ -222,6 +292,11 @@ descr: DEVCLIC SARL remarks: Generic anycast network is-anycast: yes +aut-num: AS206763 +descr: XINDI Networks SRL +remarks: Generic anycast network +is-anycast: yes + aut-num: AS207021 descr: ipcom GmbH remarks: Generic anycast network @@ -242,6 +317,16 @@ descr: Stichting Internet Domeinregistratie Nederland (SIDN) remarks: TLD operator's anycast network is-anycast: yes +aut-num: AS213059 +descr: Mythic Beasts Ltd. +remarks: Generic anycast network +is-anycast: yes + +aut-num: AS394695 +descr: PDR +remarks: TLD operator's anycast network [high confidence, but not proofed - RIR data contain garbage either way :-/ ] +is-anycast: yes + aut-num: AS396981 descr: Deteque LLC remarks: Generic anycast network @@ -1724,6 +1809,11 @@ descr: Erik Larsson remarks: Generic anycast network is-anycast: yes +net: 2a06:e881:4304::/48 +descr: RISHIKESHAN LAVAKUMAR +remarks: Generic anycast network +is-anycast: yes + net: 2a0b:6b83::/48 descr: Roelf Wichertjes remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index c576d38..454d1d5 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -28,6 +28,11 @@ descr: Dimension Data remarks: ISP (?) located in ZA, but some RIR data for announced prefixes contain garbage country: ZA +aut-num: AS4842 +descr: Tianhai InfoTech +remarks: IP hijacker located somewhere in AP, massively tampers with RIR data +country: AP + aut-num: AS6134 descr: XNNET LLC remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data @@ -123,6 +128,11 @@ descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage (BZ) country: US +aut-num: AS34224 +descr: Neterra Ltd. +remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage +country: BG + aut-num: AS35042 descr: IP Interactive UG (haftungsbeschraenkt) remarks: ISP located in BG, but RIR data for announced prefixes contain garbage @@ -138,21 +148,16 @@ descr: Buena Telecom SRL remarks: ISP located in RO, but RIR data for announced prefixes contain garbage country: RO -aut-num: AS37518 -descr: Fiber Grid Inc. -remarks: tampers with RIR data, traces back to SE -country: SE - -aut-num: AS34224 -descr: Neterra Ltd. -remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage -country: BG - aut-num: AS35145 descr: iDea Leaper Innovation Inc. remarks: tampers with RIR data, traces back to AP area country: AP +aut-num: AS35415 +descr: Webzilla B.V. +remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage +country: NL + aut-num: AS35619 descr: Kevin Buehl remarks: ... who thinks messing with countries is funny :-/ @@ -163,6 +168,16 @@ descr: Silverstar Invest Limited remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS38197 +descr: Sun Network (Hong Kong) Limited +remarks: ISP located in HK (duh!), but some RIR data for announced prefixes contain garbage +country: HK + +aut-num: AS37518 +descr: Fiber Grid Inc. +remarks: tampers with RIR data, traces back to SE +country: SE + aut-num: AS39182 descr: Netex Limited remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage @@ -253,6 +268,16 @@ descr: IP Oleinichenko Denis remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS44992 +descr: KeonWoo PARK +remarks: claims US for its prefixes announced, but traces back to KR +country: KR + +aut-num: AS45753 +descr: Network and Security Solutions Limited +remarks: ISP located in HK, but some RIR data for announced prefixes contain garbage +country: HK + aut-num: AS47105 descr: Dreamtorrent Corp remarks: traceroutes dead-end somewhere in or near RU @@ -313,6 +338,11 @@ descr: Serverius Holding B.V. remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage country: NL +aut-num: AS51089 +descr: SALTYFISH TECH LTD +remarks: traceroutes dead-end somewhere near HK +country: HK + aut-num: AS51558 descr: Smart Telecom S.A.R.L remarks: tampers with RIR data, traces back to RU @@ -323,11 +353,21 @@ descr: LLC Baxet remarks: tampers with RIR data, traces back to RU country: RU +aut-num: AS51999 +descr: WhiteHat Inc. +remarks: tampers with RIR data +country: EU + aut-num: AS55933 descr: Cloudie Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region country: AP +aut-num: AS56382 +descr: vServer.site LTD +remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage +country: DE + aut-num: AS56611 descr: REBA Communications BV remarks: bulletproof ISP (related to AS202425) located in NL @@ -428,6 +468,11 @@ descr: Inter Connects Inc. / Jing Yun remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks country: SE +aut-num: AS60721 +descr: Bursabil Teknoloji A.S. +remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage +country: TR + aut-num: AS60781 descr: LeaseWeb Netherlands B.V. remarks: ISP located in Amsterdam, NL, but many RIR data for announced prefixes contain garbage @@ -468,6 +513,11 @@ descr: Inter Connects Inc. remarks: part of a dirty ISP conglomerate, traces back to US this time country: US +aut-num: AS64050 +descr: BGP Consultancy Pte Ltd +remarks: possibly invoved in IP hijacking, located somewhere in AP area +country: AP + aut-num: AS64425 descr: SKB Enterprise B.V. remarks: bulletproof ISP (linked to AS202425 et al.) located in NL @@ -483,6 +533,16 @@ descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED remarks: ISP located in HK, tampers with RIR data country: HK +aut-num: AS132839 +descr: POWER LINE DATACENTER +remarks: ISP and/or IP hijacker located in HK, tampers with RIR data +country: HK + +aut-num: AS133441 +descr: CloudITIDC Global +remarks: ISP and/or IP hijacker located somehwere in AP +country: AP + aut-num: AS133752 descr: Leaseweb Asia Pacific pte. ltd. remarks: ISP located in HK, some RIR data for announced prefixes contain garbage @@ -518,6 +578,11 @@ descr: Cloud Servers Pvt Ltd remarks: ISP located in NL, all RIR data for announced prefixes contain garbage country: NL +aut-num: AS136800 +descr: ICIDC NETWORK +remarks: IP hijacker located somehwere in AP, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data +country: AP + aut-num: AS136988 descr: Leaseweb Australia Pty. Ltd. remarks: ISP located in AU, some RIR data for announced prefixes contain garbage @@ -533,6 +598,11 @@ descr: Clayer Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region country: AP +aut-num: AS138195 +descr: MOACK.Co.LTD +remarks: ISP located KR in, some RIR data for announced prefixes contain garbage +country: KR + aut-num: AS138571 descr: SUPERCLOUDS LIMITED remarks: ISP located in HK, tampers with RIR data @@ -553,6 +623,11 @@ descr: SANREN DATA LIMITED remarks: IP hijacker located somewhere in AP region, tampers with RIR data country: AP +aut-num: AS139659 +descr: LUCIDACLOUD LIMITED +remarks: ISP and/or IP hijacker located in HK, tampers with RIR data +country: HK + aut-num: AS139811 descr: ANLIAN NETWORK TECHNOLOGY CO., LIMITED remarks: ISP located in HK, tampers with RIR data @@ -693,6 +768,11 @@ descr: Xtudio Networks S.L.U. remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage country: ES +aut-num: AS207400 +descr: AAEX NETWORK TECHNOLOGY LTD +remarks: IP hijacker located in HK +country: HK + aut-num: AS207569 descr: Network Management Ltd. remarks: traceroutes dead-end somewhere in or near RU @@ -773,6 +853,11 @@ descr: WFD SERVICE LTD remarks: ISP located in NL, but RIR data for announced prefixes contain garbage country: NL +aut-num: AS212001 +descr: Perry Paans trading as Release V.O.F. +remarks: ISP located in NL, but RIR data for announced prefixes contain garbage +country: NL + aut-num: AS212231 descr: Harry Dowd remarks: ISP located in GB, but RIR data for announced prefixes contain garbage @@ -788,6 +873,11 @@ descr: Massimo Cotrozzi remarks: ISP located in GB, but RIR data for announced prefixes contain garbage country: GB +aut-num: AS212528 +descr: MILEGROUP LTD +remarks: traceroutes dead-end somewhere in Central Europe +country: EU + aut-num: AS212667 descr: RECONN LLC remarks: ISP located in RU, but RIR data for announced prefixes contain garbage @@ -848,11 +938,31 @@ descr: PEG TECH INC remarks: ISP located in HK, tampers with RIR data country: HK +aut-num: AS398823 +descr: PEG TECH INC +remarks: ISP and/or IP hijacker located in HK, tampers with RIR data +country: HK + aut-num: AS398826 descr: OLink Cloud LLC remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS398993 +descr: PEG TECH INC +remarks: ISP and/or IP hijacker located in HK, tampers with RIR data +country: HK + +aut-num: AS399471 +descr: Serverion LLC +remarks: ISP located in NL, RIR data contain garbage +country: NL + +aut-num: AS399077 +descr: Tcloudnet +remarks: Part of the "ASLINE" IP hijacking gang, HK vicinity seems to be part of US too for them :-/ +country: AP + net: 5.1.68.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data @@ -893,6 +1003,11 @@ descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO +net: 44.159.73.0/24 +descr: Soha Jin +remarks: inaccurate data from ARIN, traces back to CN +country: CN + net: 45.11.152.0/22 descr: Karolio IT paslaugos, UAB remarks: fake location (IR), traces back to NL @@ -1078,6 +1193,11 @@ descr: NetConn Services Ltd remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC country: AP +net: 2402:e940:f00::/48 +descr: Wind Cloud Network Technology Co Ltd. +remarks: appears to be used out of Tokyo, JP +country: JP + net: 2a02:e00:ffe7::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from LT -- 2.26.2

1 0

incorporation state of ARIN's asn.txt
by nusenu 15 Jul '21

15 Jul '21

Hi, I'm an indirect user of ipfire IP -> ASN and ASN -> AS name data since the torproject recently switched from an outdated maxmind db to ipfire's database on 2021-06-18. When the switch from maxmind to ipfire's db occurred I observerd a significant increase of ASes without AS name. I did read the recent threads on this mailing list about "Import (technical) AS names from ARIN", which I assume should improve or entirely solve the situation. Is my understanding correct that your recent work [1] on adding ARIN's AS name [2] data has been merged? [1] https://lists.ipfire.org/pipermail/location/2021-June/000394.html [2] https://ftp.arin.net/info/asn.txt As a test I manually verified AS14061 > 14061 DIGITALOCEAN-ASN and was unable find the AS name when using ipfire's db. example lookup: https://location.ipfire.org/lookup/134.209.159.74 Should I already see ARINs asn.txt AS name information or will this be "visible" in ipfire's db in the near future? kind regards, nusenu -- https://nusenu.github.io

3 8

[PATCH] debian: Clean up 0.9.7 changelog
by Valters Jansons 14 Jul '21

14 Jul '21

- Update for maintainer name and email address, as to reflect who actually prepared this release of the package. It was not me, but I was selected due to having the first commit on the package. To mitigate against this, when running the `debchange --release` (`dch -r`) command, environment variables DEBFULLNAME and DEBEMAIL should be configured properly for the current user. - Removal of NMU comment on my name, as I am not really doing a non-maintainer upload. I would say the 'NMU' message is fairly useless on this repository, as it is self-maintained here. Signed-off-by: Valters Jansons <valter.jansons(a)gmail.com> --- debian/changelog | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/debian/changelog b/debian/changelog index a7c099f..7cf45f7 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,7 +1,6 @@ libloc (0.9.7-1) unstable; urgency=medium [ Valters Jansons ] - * Non-maintainer upload. * po: Update translations * systemd: Add Documentation= to location-update @@ -26,7 +25,7 @@ libloc (0.9.7-1) unstable; urgency=medium * countries: Fix matching invalid country codes * Bump version to 0.9.7 - -- Valters Jansons <valter.jansons(a)gmail.com> Fri, 09 Jul 2021 17:16:59 +0000 + -- Michael Tremer <michael.tremer(a)ipfire.org> Fri, 09 Jul 2021 17:16:59 +0000 libloc (0.9.6-1) unstable; urgency=medium -- 2.32.0

2 1

[PATCH] debian: Attribute all maintainers in changlog
by Valters Jansons 14 Jul '21

14 Jul '21

This commit further builds on historical changelog modifications, to properly attribute all authors of the commits. An additional d/genchangelog.sh script has been added. This allows generation of changelog entries, internally using `debchange` (`dch`). The script accepts an argument, which is the commit range to generate entries for. Each commit's subject line (first line of body) is used, along with author name and email. This information is added to the changelog. Automatic detection (via `debchange` built-in functionality) is used to determine whether these entries should be added to an existing version number. If there is no UNRELEASED version, then a new version is automatically tagged. The new version tag will usually need to be modified, for example, replacing an automatically generated 0.9.6-2 with 0.9.7-1. The final release change (s/UNRELEASED/unstable/) needs to be done manually as well, when the Git tag is actually being tagged. `dch -r` can be useful for this particular purpose. Signed-off-by: Valters Jansons <valter.jansons(a)gmail.com> --- debian/changelog | 15 +++++++++------ debian/genchangelog.sh | 36 ++++++++++++++++++++++++++++++++++++ 2 files changed, 45 insertions(+), 6 deletions(-) create mode 100755 debian/genchangelog.sh diff --git a/debian/changelog b/debian/changelog index e58c0ca..6817fb3 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,13 +1,16 @@ libloc (0.9.6-1) unstable; urgency=medium - * location-importer.in: skip networks with unknown country codes - * location-importer.in: process unaligned IP ranges in RIR data files - correctly + [ Michael Tremer ] + * location: Fix list-networks-by-as * database: Free mmapped countries section - * location-importer.in: reduce log noise for unusable networks - * location-importer.in: delete 6to4 IPv6 space as well + + [ Peter Müller ] * location-importer.in: fix typo - * location: Fix list-networks-by-as + * location-importer.in: delete 6to4 IPv6 space as well + * location-importer.in: reduce log noise for unusable networks + * location-importer.in: process unaligned IP ranges in RIR data files + correctly + * location-importer.in: skip networks with unknown country codes -- Michael Tremer <michael.tremer(a)ipfire.org> Wed, 31 Mar 2021 14:06:00 +0100 diff --git a/debian/genchangelog.sh b/debian/genchangelog.sh new file mode 100755 index 0000000..85d3922 --- /dev/null +++ b/debian/genchangelog.sh @@ -0,0 +1,36 @@ +#!/bin/bash -e +gitshow () { + local format=$1 + local commit=$2 + + git show --no-patch --format=format:"$format" "$commit" +} + +main () { + if [ $# -lt 1 ]; then + local bn="$(basename $0)" + echo "Usage: $bn <commit range>" >&2 + echo "Example: $bn 0.9.7..HEAD" >&2 + echo "Example: $bn 0.9.5..0.9.6^" >&2 + return 1 + fi + + local commitrange=$1 + + local commit + for commit in $(git rev-list --reverse "$commitrange"); do + # Skip commits with diffs that only have Makefile.am or d/ changes. + if [ "$(git diff --name-only "${commit}^..${commit}" -- . ':^Makefile.am' ':^debian/' | wc -l)" == 0 ]; then + continue + fi + + local author_name="$(gitshow %an "$commit")" + local author_email="$(gitshow %ae "$commit")" + local subject="$(gitshow %s "$commit")" + + echo "$author_name <$author_email> $subject" + DEBFULLNAME="$author_name" DEBEMAIL="$author_email" debchange --upstream --multimaint-merge "$subject" + done +} + +main "$@" || exit $? -- 2.32.0

2 3

[PATCH 0/8] debian: Mitigate bulk of Lintian issues
by Valters Jansons 14 Jul '21

14 Jul '21

This series breaks apart the previously submitted block of debian/ changes into individual logical changes, which can be individually reviewed and discussed, and approved. This series is however missing the change for d/clean and d/libloc1.symbols, which are both pending rework as discussed in the superseded patch. Valters Jansons (8): debian: Add all temporary files to Gitignore debian: Move libloc1 to 'libs' section debian: Set 'Multi-Arch: foreign' hint for Python debian: Update copyright format link to use HTTPS debian: Add examples/python/ to documentation debian: Drop unintended files from location-python debian: Add watch configuration for uscan systemd: Add Documentation= to location-update debian/.gitignore | 9 +++++---- debian/control | 5 +++-- debian/copyright | 2 +- debian/location-python.examples | 1 + debian/rules | 8 ++++++++ debian/watch | 3 +++ src/systemd/location-update.service.in | 1 + 7 files changed, 22 insertions(+), 7 deletions(-) create mode 100644 debian/location-python.examples create mode 100644 debian/watch -- 2.31.1

2 22

[PATCH] override-{a3,other}: weekly batch of various overrides
by Peter Müller 07 Jul '21

07 Jul '21

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a3.txt | 16 +++++++++++ overrides/override-other.txt | 55 ++++++++++++++++++++++++++++++++++++ 2 files changed, 71 insertions(+) diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 9200b78..4b313f8 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -105,6 +105,12 @@ descr: ANEXIA Internetdienstleistungs GmbH remarks: Public anycast DNS nameserver network [high confidence, but not proofed] is-anycast: yes +aut-num: AS43278 +descr: Instance Group LLC +remarks: Generic anycast network [high confidence, but not proofed], RIR data contain garbage +is-anycast: yes +country: RU + aut-num: AS49287 descr: Melbikomas UAB remarks: Generic anycast network [high confidence, but not proofed] @@ -191,6 +197,11 @@ descr: CentralNic Ltd remarks: Generic anycast network is-anycast: yes +aut-num: AS203391 +descr: Cloud DNS Ltd +remarks: Generic anycast network +is-anycast: yes + aut-num: AS203961 descr: CentralNic Ltd remarks: Generic anycast network @@ -1708,6 +1719,11 @@ descr: Zeimudo Networks remarks: Generic anycast network is-anycast: yes +net: 2a06:1287:2900::/48 +descr: Erik Larsson +remarks: Generic anycast network +is-anycast: yes + net: 2a0b:6b83::/48 descr: Roelf Wichertjes remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 0b63d41..c576d38 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -53,6 +53,11 @@ descr: PJSC Rostelecom remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS12722 +descr: RECONN LLC +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS18013 descr: ASLINE LIMITED remarks: IP hijacker, traces back to AP region @@ -233,6 +238,11 @@ descr: PQ HOSTING S.R.L. remarks: tampers with RIR data sometimes, traces back to NL country: NL +aut-num: AS43830 +descr: Digital Energy LLC +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS44015 descr: Landgard Management Inc. remarks: bulletproof ISP with strong links to RU @@ -273,6 +283,11 @@ descr: KLAYER LLC remarks: part of the "Asline" IP hijacking gang, traces back to AP region country: AP +aut-num: AS49453 +descr: Global Layer BV +remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage +country: NL + aut-num: AS49505 descr: Selectel remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage @@ -473,6 +488,11 @@ descr: Leaseweb Asia Pacific pte. ltd. remarks: ISP located in HK, some RIR data for announced prefixes contain garbage country: HK +aut-num: AS134121 +descr: rainbow network limited +remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data +country: AP + aut-num: AS134196 descr: ULan Network Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region @@ -488,6 +508,11 @@ descr: DXTL Tseung Kwan O Service remarks: tampers with RIR data, traces back to AP region country: AP +aut-num: AS134823 +descr: Sky Digital Co., Ltd. +remarks: IP hijacker located in TW, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data +country: TW + aut-num: AS136274 descr: Cloud Servers Pvt Ltd remarks: ISP located in NL, all RIR data for announced prefixes contain garbage @@ -513,6 +538,11 @@ descr: SUPERCLOUDS LIMITED remarks: ISP located in HK, tampers with RIR data country: HK +aut-num: AS138968 +descr: rainbow network limited +remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data +country: AP + aut-num: AS139242 descr: Cloudflare Sydney, LLC remarks: ... but CF failed to set the country for announced prefixes to AU as well :-/ @@ -613,6 +643,11 @@ descr: QuxLabs UG remarks: traces back to SE country: SE +aut-num: AS203936 +descr: MismeNet Telecomunicaciones +remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage +country: ES + aut-num: AS204136 descr: Kevin Holly trading as Silent Ghost e.U. remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/ @@ -748,6 +783,16 @@ descr: RoyaleHosting B.V. remarks: ISP located in NL, but RIR data for announced prefixes contain garbage country: NL +aut-num: AS212478 +descr: Massimo Cotrozzi +remarks: ISP located in GB, but RIR data for announced prefixes contain garbage +country: GB + +aut-num: AS212667 +descr: RECONN LLC +remarks: ISP located in RU, but RIR data for announced prefixes contain garbage +country: RU + aut-num: AS212962 descr: Quality Area Ltd. remarks: traceroutes dead-end somewhere near Crimera, UA @@ -773,6 +818,11 @@ descr: DDOS-GUARD CORP. remarks: fake offshore location (BZ), traces back to RU country: RU +aut-num: AS267784 +descr: Flyservers S.A. +remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage +country: NL + aut-num: AS328543 descr: Sun Network Company Limited remarks: IP hijacker, traces back to AP region @@ -843,6 +893,11 @@ descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO +net: 45.11.152.0/22 +descr: Karolio IT paslaugos, UAB +remarks: fake location (IR), traces back to NL +country: NL + net: 45.89.97.0/24 descr: IP Volume Ltd. / Epik remarks: fake location (CH), traces back to GB -- 2.26.2

1 0

2024

2023

2022

2021

2020

2019

2018

2017

Location July 2021