- Location - lists.ipfire.org

[PATCH] country-overrides: add AS51852 (Private Layer Inc.)
by Peter Müller 10 Jul '20

10 Jul '20

This is a VPN provider, so "is-anonymous-proxy: yes" should be merged from the A1 override file. Some of the prefixes announced by that AS have countries set to PA or BZ, but they are all hosted in CH. Partially fixes: #12421 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index d965bfb..e4d542e 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -18,6 +18,11 @@ descr: PPTECHNOLOGY LIMITED remarks: bulletproof ISP (related to AS204655) located in NL country: NL +aut-num: AS51852 +descr: Private Layer INC +remarks: VPN provider claiming PA or BZ for some prefixes, but they are all hosted in CH +country: CH + aut-num: AS56611 descr: REBA Communications BV remarks: bulletproof ISP (related to AS202425) located in NL -- 2.26.2

1 0

[PATCH] A2 overrides: add some missing satellite internet providers
by Peter Müller 07 Jul '20

07 Jul '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a2.txt | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index b7b4507..5e810b1 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -32,6 +32,11 @@ descr: Satellite Communication Systems, Inc. remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS12491 +descr: Gitlat Satcom +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS12684 descr: SES ASTRA S.A. remarks: Satellite Internet provider [several satellite dial-in pools] @@ -62,11 +67,26 @@ descr: IRIDIUM SATELLITE, LLC remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS22351 +descr: Intelsat Global Service Corporation +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS25222 descr: Inmarsat Solutions B.V. remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS26243 +descr: Intelsat +remarks: Satellite Internet provider +is-satellite-provider: yes + +aut-num: AS27822 +descr: Emerging Markets Communications / SantanderTeleport / ... +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS29137 descr: Eutelsat S.A. remarks: Satellite Internet provider @@ -77,6 +97,11 @@ descr: SKYLOGIC S.P.A. remarks: Satellite Internet provider [several satellite dial-in pools] is-satellite-provider: yes +aut-num: AS30362 +descr: Hawaii Pacific Teleport LP +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS31515 descr: INMARSAT GLOBAL LIMITED remarks: Satellite Internet provider @@ -292,6 +317,11 @@ descr: Intersat Africa remarks: Satellite Internet provider is-satellite-provider: yes +net: 41.190.132.0/21 +descr: Metronet - Infocom Client Networks / Intelsat / SkyVision +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 41.198.96.0/20 descr: IwayAfrica / AfricaOnline remarks: Satellite Internet provider @@ -367,6 +397,11 @@ descr: IPSTAR Australia Pty Ltd remarks: Satellite Internet provider is-satellite-provider: yes +net: 63.100.192.0/19 +descr: New Skies Networks, Inc. +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 63.210.60.0/23 descr: SES Americacom Inc. remarks: Satellite Internet provider -- 2.26.2

1 0

[PATCH] A1 overrides: add some missing VPN provider networks
by Peter Müller 07 Jul '20

07 Jul '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 66 ++++++++++++++++++++++++++++++++++----- 1 file changed, 58 insertions(+), 8 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index d8847cd..0d55ab3 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -38,6 +38,11 @@ descr: VPNsolutions Pty Ltd remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS27683 +descr: VPN de Mexico, S.A. de C.V. +remarks: VPN provider +is-anonymous-proxy: yes + aut-num: AS37560 descr: Cyberdyne S.A. remarks: VPN and Tor relay provider @@ -48,11 +53,26 @@ descr: Asiamax Ltd. VPN remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS45792 +descr: Layer 3 VPN ASN +remarks: VPN provider +is-anonymous-proxy: yes + +aut-num: AS51432 +descr: BeeVPN ApS +remarks: VPN provider +is-anonymous-proxy: yes + aut-num: AS51852 descr: Private Layer INC remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS53559 +descr: KST Networks / ANONYMIZER +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS58546 descr: Astrill VPN remarks: VPN provider @@ -68,6 +88,11 @@ descr: Quintex Alliance Consulting remarks: Tor relay provider is-anonymous-proxy: yes +aut-num: AS135609 +descr: AMPR VPN +remarks: VPN provider +is-anonymous-proxy: yes + aut-num: AS201665 descr: Anonymizer, Inc. remarks: VPN provider @@ -98,6 +123,11 @@ descr: David Craig remarks: (Rogue) VPN provider is-anonymous-proxy: yes +aut-num: AS210083 +descr: Privex Inc. +remarks: VPN and Tor relay provider +is-anonymous-proxy: yes + aut-num: AS394087 descr: Secure Internet LLC / PureVPN remarks: VPN provider @@ -108,6 +138,16 @@ descr: Emerald Onion remarks: Tor relay provider is-anonymous-proxy: yes +aut-num: AS397282 +descr: Castle VPN +remarks: VPN provider +is-anonymous-proxy: yes + +aut-num: AS397685 +descr: Business VPN LLC +remarks: VPN provider +is-anonymous-proxy: yes + net: 2.57.171.0/24 descr: VPN Consumer Network remarks: VPN provider @@ -420,18 +460,18 @@ remarks: VPN provider is-anonymous-proxy: yes net: 64.64.98.0/24 -descr: OculusProxies [high confidence, but not proofed] -remarks: VPN provider +descr: OculusProxies +remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes net: 64.64.99.0/24 -descr: OculusProxies [high confidence, but not proofed] -remarks: VPN provider +descr: OculusProxies +remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes net: 64.64.104.0/24 -descr: OculusProxies [high confidence, but not proofed] -remarks: VPN provider +descr: OculusProxies +remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes net: 64.64.108.0/24 @@ -684,6 +724,11 @@ descr: GZ Systems Limited / PureVPN remarks: VPN provider is-anonymous-proxy: yes +net: 145.249.104.0/22 +descr: Liberty Services / IP Volume Inc. +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + net: 154.0.24.0/24 descr: WIFI and PROXY NET / Atlantique Telecom remarks: VPN provider [high confidence, but not proofed] @@ -760,8 +805,8 @@ remarks: VPN provider is-anonymous-proxy: yes net: 173.239.252.0/24 -descr: OculusProxies [high confidence, but not proofed] -remarks: VPN provider +descr: OculusProxies +remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes net: 173.239.252.0/24 @@ -794,6 +839,11 @@ descr: SecuredConnectivity remarks: VPN provider is-anonymous-proxy: yes +net: 176.10.99.192/27 +descr: Access Now +remarks: Tor relay provider +is-anonymous-proxy: yes + net: 178.170.136.0/22 descr: GZ Systems Limited / PureVPN remarks: VPN provider -- 2.26.2

1 0

[PATCH] country-overrides: add some FlokiNET prefixes with faked location
by Peter Müller 07 Jul '20

07 Jul '20

Partially fixes: #12421 Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-other.txt | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index c70c3b3..d965bfb 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -48,6 +48,11 @@ descr: Altrosky Technology Ltd. remarks: fake offshore location (SC), traces back to CZ country: CZ +net: 37.228.128.0/24 +descr: FlokiNET Ltd. +remarks: fake offshore location (SC), traces back to RO +country: RO + net: 88.151.117.0/24 descr: Golden Internet LLC remarks: fake location (KP), WHOIS contact points to RU @@ -58,6 +63,16 @@ descr: QWARTA LLC remarks: fake location (US), WHOIS contact and traceroutes point to RU country: RU +net: 178.239.20.0/24 +descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd. +remarks: fake location (BA), traces back to RO +country: RO + +net: 185.10.68.0/24 +descr: FlokiNET Ltd. +remarks: fake offshore location (SC), traces back to RO +country: RO + net: 185.244.29.0/24 descr: Gerber EDV / David Craig remarks: bulletproof ISP, fake location (KP), traces back to SG -- 2.26.2

1 0

AS "names" from ARIN
by Peter Müller 07 Jul '20

07 Jul '20

Hello Michael, I just stumbled across ftp://ftp.arin.net/info/current/asn.txt and thought you might want to know about it. I guess it is better than nothing, although it does not list very human-readable descriptions... :-/ Thanks, and best regards, Peter Müller

2 1

[PATCH] override-a1.txt: fix typos in remarks
by Peter Müller 01 Jul '20

01 Jul '20

Copy & Waste ... :-/ Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- overrides/override-a1.txt | 24 ++++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 60ad00b..d8847cd 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -561,17 +561,17 @@ is-anonymous-proxy: yes net: 104.143.84.0/24 descr: VPN Consumer Network -remarks: VPN Provider +remarks: VPN provider is-anonymous-proxy: yes net: 104.143.92.0/24 descr: VPN Consumer Network -remarks: VPN Provider +remarks: VPN provider is-anonymous-proxy: yes net: 104.143.95.0/24 descr: VPN Consumer Network -remarks: VPN Provider +remarks: VPN provider is-anonymous-proxy: yes net: 104.238.32.0/24 @@ -1226,27 +1226,27 @@ is-anonymous-proxy: yes net: 222.255.32.0/23 descr: IP Range assigned for VPN Service of VDC -remarks: VPN proivder +remarks: VPN provider is-anonymous-proxy: yes net: 2405:db00::/32 descr: VPNSolutions Pty. Ltd. -remarks: VPN proivder +remarks: VPN provider is-anonymous-proxy: yes net: 2600:2a00::/28 descr: CloudVPN Inc. -remarks: VPN proivder +remarks: VPN provider is-anonymous-proxy: yes net: 2602:fed2::/32 descr: 10VPN Hosting -remarks: VPN proivder +remarks: VPN provider is-anonymous-proxy: yes net: 2606:1000::/32 descr: VPNtranet, LLC. -remarks: VPN proivder +remarks: VPN provider is-anonymous-proxy: yes net: 2620:7:6001::/48 @@ -1261,22 +1261,22 @@ is-anonymous-proxy: yes net: 2a00:9940::/32 descr: VPNSecure Pty Ltd -remarks: VPN proivder +remarks: VPN provider is-anonymous-proxy: yes net: 2a01:b5c0:5::/48 descr: AzireVPN -remarks: VPN proivder +remarks: VPN provider is-anonymous-proxy: yes net: 2a02:230::/32 descr: UK-ALWAYSONVPN-* / alwaysON Limited -remarks: VPN proivder [high confidence, but not proofed] +remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes net: 2a03:6921::/32 descr: CACHE-VPN-NET -remarks: VPN proivder [high confidence, but not proofed] +remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes net: 2a03:e600:100::/48 -- 2.26.2

2 4

Question regarding delta between "delegated-ripencc-extended-latest" and Whois output
by Peter Müller 29 Jun '20

29 Jun '20

Dear RIPE DB mailing list people, we, the IPFire development team, just bumped across an IP address somewhere in the 51.15.0.0/17 network (no abuse, we were just curious :-) ). While the RIPE Whois server returned "NL" as the country of that subnet [1], the "delegated-ripencc-extended-latest" file available at ftp.ripe.net [2] only contains 51.15.0.0/16, which points to "FR". Since the first one result contains the correct country code of that IP network, I would like to ask why "delegated-ripencc-extended-latest" does not include subnets like this, and where the Whois server fetches his answer from. Did we miss something? Is there another or a better way of fetching precise subnet data from RIPE? It would be great if someone could point us into the right direction. :-) Thanks, and best regards, Peter Müller [1] Relevant snippet of the Whois server output: > inetnum: 51.15.0.0 - 51.15.63.255 > [...] > country: NL > [...] [2] https://ftp.ripe.net/pub/stats/ripencc/delegated-ripencc-extended-latest, relevant snippet of this file: > ripencc|FR|ipv4|51.15.0.0|65536|19930901|assigned|925547da-35fb-4346-b464-aadff095c6ea

3 4

[PATCH] location.in: strip trailing whitespaces in database description while dumping
by Peter Müller 22 Jun '20

22 Jun '20

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org> --- src/python/location.in | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/python/location.in b/src/python/location.in index d37294d..a804804 100644 --- a/src/python/location.in +++ b/src/python/location.in @@ -321,7 +321,8 @@ class CLI(object): if db.description: for line in db.description.splitlines(): - f.write("# %s\n" % line) + line = "# %s" % line + f.write("%s\n" % line.rstrip()) f.write("#\n") -- 2.26.2

1 0

Fwd: Interest in MaxMind replacement at the Tor project
by Peter Müller 15 Jun '20

15 Jun '20

Hello Michael, I just stumbled across https://trac.torproject.org/projects/tor/ticket/32978: > Find a working alternative to using MaxMind's GeoLite2 databases Since the Tor project teams seems to be actively researching, maybe it is a good idea to get in touch with them more soon. Since I am currently out of spare time, may I ask you to do so? Thanks, and best regards, Peter Müller

2 1

[PATCH] debian: Also build for sid.
by Stefan Schantl 10 Jun '20

10 Jun '20

Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org> --- debian/build.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian/build.sh b/debian/build.sh index 449e3a5..4385455 100644 --- a/debian/build.sh +++ b/debian/build.sh @@ -1,7 +1,7 @@ #!/bin/bash ARCHITECTURES=( amd64 arm64 i386 armhf ) -RELEASES=( buster bullseye ) +RELEASES=( buster bullseye sid ) CHROOT_PATH="/var/tmp" -- 2.26.1

1 0

2024

2023

2022

2021

2020

2019

2018

2017

Location