Signed-off-by: Peter Müller peter.mueller@ipfire.org --- overrides/override-a1.txt | 6 +++++ overrides/override-other.txt | 51 ++++++++++++++++++++++++++++++------ 2 files changed, 49 insertions(+), 8 deletions(-)
diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 7aca339..a0a4404 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -1007,6 +1007,12 @@ descr: Angelo Kreikamp trading as Forhosting / Freedom of Speech VPN / nVPN / remarks: (Rogue) VPN provider is-anonymous-proxy: yes
+net: 185.244.29.0/24 +descr: NINAZU VPN Service / Gerber EDV / David Craig +remarks: (Rogue VPN provider), fake location (SC), traces back to NL +is-anonymous-proxy: yes +country: NL + net: 188.72.80.0/21 descr: GZ Systems Limited / PureVPN remarks: VPN provider diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 98ea79b..fb60d97 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -13,6 +13,16 @@ # Please keep this file sorted. #
+aut-num: AS6134 +descr: XNNET LLC +remarks: traces back to an unknown oversea location (Hong Kong?), seems to tamper with RIR data +country: HK + +aut-num: AS8359 +descr: MTS PJSC +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS12025 descr: Iron Mountain Data Center remarks: ISP located in US, but some RIR data for announced prefixes contain garbage @@ -78,10 +88,10 @@ descr: UKSERVERS remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage country: GB
-aut-num: AS44446 -descr: OOO SibirInvest -remarks: bulletproof ISP (related to AS204655), traces back to NL and BG -country: EU +aut-num: AS42960 +descr: Cloud Management LLC +remarks: tampers with RIR data, traces back to HK +country: HK
aut-num: AS48090 descr: PPTECHNOLOGY LIMITED @@ -103,6 +113,11 @@ descr: Smart Telecom S.A.R.L remarks: tampers with RIR data, traces back to RU country: RU
+aut-num: AS55933 +descr: Cloudie Limited +remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region +country: AP + aut-num: AS56611 descr: REBA Communications BV remarks: bulletproof ISP (related to AS202425) located in NL @@ -188,6 +203,11 @@ descr: IP Connect Inc. remarks: fake offshore location (SC), traces back to NL country: NL
+aut-num: AS328543 +descr: Sun Network Company Limited +remarks: IP hijacker, traces back to AP region +country: AP + aut-num: AS398478 descr: PEG TECH INC remarks: ISP located in HK, tampers with RIR data @@ -253,20 +273,35 @@ descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO
+net: 185.175.93.0/24 +descr: Perfect Hosting Solutions +remarks: bulletproof ISP related to AS204655, traces back to BG +country: BG + net: 185.169.253.0/24 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to US country: US
+net: 185.193.91.0/24 +descr: Romanenko Stanislav Sergeevich +remarks: bulletproof ISP related to AS204655, traces back to BG +country: BG + net: 185.193.124.0/22 descr: ab stract / Njalla remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE country: SE
-net: 185.244.29.0/24 -descr: NINAZU VPN Service / Gerber EDV / David Craig -remarks: bulletproof ISP, fake location (SC), traces back to GB -country: GB +net: 185.227.152.0/22 +descr: XinYuan Interconnect (HONG KONG [sic!]) Limited +remarks: claims to be located in DE, traces back to HK +country: HK + +net: 190.2.128.0/19 +descr: WorldStream (LATAM) BV +remarks: LACNIC IP chunk solely used in NL (inaccurate data) +country: NL
net: 193.29.12.0/22 descr: Bunea TELECOM SRL