Location February 2022

location@lists.ipfire.org

4 participants
7 discussions

[PATCH] export: Remove prefix when exporting countries.
by Stefan Schantl 24 Feb '22

24 Feb '22

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- src/python/export.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/python/export.py b/src/python/export.py index a9774e8..be33847 100644 --- a/src/python/export.py +++ b/src/python/export.py @@ -149,7 +149,7 @@ class Exporter(object): directory, prefix=country_code, suffix=self.writer.suffix, family=family, ) - writers[country_code] = self.writer.open(filename, prefix="CC_%s" % country_code) + writers[country_code] = self.writer.open(filename, prefix="%s" % country_code) # Create writers for ASNs for asn in asns: -- 2.30.2

1 0

libloc 0.9.10 released
by Michael Tremer 16 Feb '22

16 Feb '22

Good morning, I just tagged a new version of libloc which includes these changes: * A feed from LACNIC is now being parsed for better data in the South America region * The importer now recognises the new il-central-1 AWS Region and corrects “UK” to “GB” wherever someone go those country codes confused * The exporter will now create files in ipset format which can be reloaded without any further ado. Before, ipset threw an error when the file has already been loaded. We will now flush and reload all data for each country/AS. * libloc is now being packaged for Debian Bookworm * Some development documentation has been added and can be found here: https://man-pages.ipfire.org/libloc/ Thank you to everyone who has contributed to this release. You can find the source here: https://git.ipfire.org/?p=location/libloc.git;a=shortlog;h=refs/tags/0.9.10 https://source.ipfire.org/releases/libloc/libloc-0.9.10.tar.gz Best, -Michael

1 0

[PATCH] location-importer.in: Add country code for AWS's "il-central-1" zone
by Peter Müller 11 Feb '22

11 Feb '22

Reported-by: Michael Tremer <michael.tremer(a)ipfire.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location-importer.in | 1 + 1 file changed, 1 insertion(+) diff --git a/src/python/location-importer.in b/src/python/location-importer.in index 118b0de..63f7be5 100644 --- a/src/python/location-importer.in +++ b/src/python/location-importer.in @@ -1228,6 +1228,7 @@ class CLI(object): "eu-south-2": "ES", "eu-west-3": "FR", "eu-north-1": "SE", + "il-central-1": "IL", # XXX: This one is not documented anywhere except for ip-ranges.json itself "me-central-1": "AE", "me-south-1": "BH", "sa-east-1": "BR" -- 2.34.1

2 1

[PATCH] override-other: All prefixes announced by AS27742 are located in NI
by Peter Müller 09 Feb '22

09 Feb '22

Fixes: #12775 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index dd411dc..0719ae3 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -243,6 +243,11 @@ descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS27742 +descr: Amnet Telecomunicaciones S.A. +remarks: ISP located in NI, but some prefixes needs manual correction due to LACNIC DB situation, see also: #12775 +country: NI + aut-num: AS28098 descr: ABGON Comunicaciones remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ) -- 2.34.1

1 0

location db mismatch
by nusenu 08 Feb '22

08 Feb '22

Hi, I'm trying to understand a difference between the local updated database and the output seen on location.ipfire.org: sha256sum /var/lib/location/database.db fe305bea50c2a916cf9f5c4a1bdee8457ced3033279d7e64598141bb0f1bd607 /var/lib/location/database.db location version Fri, 21 Jan 2022 05:50:50 GMT location:amd64 0.9.9-2 location lookup 89.58.16.0 89.58.16.0: Network : 89.58.16.0/22 Country : Germany Autonomous System : AS197540 - netcup GmbH https://location.ipfire.org/lookup/89.58.16.0 > Network 89.58.16.0/22 > Announced by AS197540 - netcup GmbH > Country Austria https://stat.ripe.net/widget/whois#w.resource=89.58.16.0 > inetnum 89.58.16.0/22 > netname AT-NETCUP-01 > country AT > status ASSIGNED PA > mnt-by NETCUP-MNT > mnt-by NETCUP-MNT > source RIPE I'm wondering if something is broken on my side? kind regards, nusenu -- https://nusenu.github.io

5 11

[PATCH 1/2] override-other: Fix netcup IP ranges actually located in AT
by Peter Müller 05 Feb '22

05 Feb '22

See: https://lists.ipfire.org/pipermail/location/2022-January/000519.html Reported-by: Martin Gebhardt <martin.gebhardt(a)linkspartei.org> Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index b74c1e3..01cd324 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -1518,6 +1518,11 @@ descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to US country: US +net: 89.58.16.0/22 +descr: netcup GmbH +remarks: https://lists.ipfire.org/pipermail/location/2022-January/000519.html +country: AT + net: 91.90.120.0/24 descr: M247 LTD, Greenland Infrastructure remarks: ... traces back to CA @@ -1773,6 +1778,11 @@ descr: Securebit AG remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/ country: CH +net: 2a0a:4cc0::/40 +descr: netcup GmbH +remarks: https://lists.ipfire.org/pipermail/location/2022-January/000519.html +country: AT + net: 2a0e:b100:3000::/40 descr: 4b42 UG (haftungsbeschränkt) remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/ -- 2.34.1

1 1

[PATCH] override-{a3,other,xd}: Regular batch of various overrides
by Peter Müller 04 Feb '22

04 Feb '22

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a3.txt | 5 ++++ overrides/override-other.txt | 44 ++++++++++++++++++++++++++++++++++-- overrides/override-xd.txt | 5 ++++ 3 files changed, 52 insertions(+), 2 deletions(-) diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 6b8f886..ce51889 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -208,6 +208,11 @@ descr: coreIT.pl remarks: Generic anycast network is-anycast: yes +aut-num: AS59796 +descr: StormWall s.r.o. +remarks: Worldwide active CDN +is-anycast: yes + aut-num: AS60626 descr: Leaseweb CDN B.V. remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index a8faabf..b74c1e3 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -161,14 +161,19 @@ country: IR aut-num: AS15828 descr: Blue Diamond Network Co., Ltd. -remarks: Shady ISP located somewhere in AP -country: AP +remarks: Shady ISP, claims GB or IR for it's prefixes, but they all end up near Vilnius, LT +country: LT aut-num: AS16262 descr: Datacheap Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS17447 +descr: Net4India Ltd +remarks: Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS18185 name: Northern Taiwan Community University remarks: has no sane AS name set in APNIC DB @@ -188,6 +193,11 @@ descr: ITL LLC remarks: ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data country: NL +aut-num: AS23470 +descr: ReliableSite.Net LLC +remarks: ISP located in US, but RIR data for announced prefixes contain garbage +country: US + aut-num: AS23858 descr: xTom Pty. Ltd. remarks: ISP located in AU, RIR data for announced prefixes contain garbage @@ -793,6 +803,11 @@ descr: Sun Network (Hong Kong) Limited remarks: ISP and/or IP hijacker located somewhere in AP country: AP +aut-num: AS132335 +descr: LeapSwitch Networks Pvt Ltd +remarks: ISP and/or IP hijacker located in IN +country: IN + aut-num: AS132369 descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED remarks: ISP located in HK, tampers with RIR data @@ -1198,6 +1213,11 @@ descr: Packet Flip, LLC remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS209654 +descr: Delis LLC +remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS210119 descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garbage @@ -1208,6 +1228,11 @@ descr: Des Capital B.V. remarks: Shady ISP located in NL, but RIR data for announced prefixes contain garbage country: NL +aut-num: AS211252 +descr: Delis LLC +remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS211380 descr: PAYWISE HOLDING Sp. z.o.o. remarks: ISP located in NL, but RIR data for announced prefixes contain garbage @@ -1388,6 +1413,11 @@ descr: Wolverine Trading, LLC remarks: IP hijacker located in US, tampers with RIR data country: US +aut-num: AS400377 +descr: Serverion LLC +remarks: ISP located in NL, some RIR data contain garbage +country: NL + net: 5.1.68.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data @@ -1598,6 +1628,11 @@ descr: Hornetsecurity GmbH remarks: all suballocations are used in DE, but are assigned to US country: DE +net: 185.143.223.0/24 +descr: Lenar Davletshin +remarks: traceroutes dead-end somewhere after entering Voxility's network in Vienna, but that's not the location of this network +country: EU + net: 185.175.93.0/24 descr: Perfect Hosting Solutions remarks: bulletproof ISP related to AS204655, traces back to BG @@ -1653,6 +1688,11 @@ descr: QUIKA LTD remarks: claims to be located in DE, traces back to GB country: GB +net: 194.87.218.0/24 +descr: Hauer Hosting Services Limited +remarks: traces back to RU +country: RU + net: 195.66.165.0/24 descr: Posta Crne Gore remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index 2b50406..131e24d 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -138,6 +138,11 @@ descr: 1337TEAM LIMITED / eliteteam[.]to remarks: Owned by an offshore letterbox company, suspected rogue ISP drop: yes +aut-num: AS57523 +descr: Chang Way Technologies Co. Limited +remarks: bulletproof ISP, C&C server hosting galore +drop: yes + aut-num: AS57717 descr: FiberXpress BV remarks: bulletproof ISP (related to AS202425) located in NL -- 2.34.1

1 0

2024

2023

2022

2021

2020

2019

2018

2017

Location February 2022