Signed-off-by: Peter Müller peter.mueller@ipfire.org --- overrides/override-a1.txt | 52 +++++++++++++++++------------------- overrides/override-a2.txt | 10 +++++++ overrides/override-a3.txt | 10 +++++++ overrides/override-other.txt | 40 +++++++++++++++++++++++++++ 4 files changed, 84 insertions(+), 28 deletions(-)
diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 9f64dd8..d4fe379 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -38,6 +38,11 @@ descr: VPN de Mexico, S.A. de C.V. remarks: VPN provider is-anonymous-proxy: yes
+aut-num: AS34962 +descr: Epik Network +remarks: VPN provider +is-anonymous-proxy: yes + aut-num: AS35029 descr: WebLine LTD remarks: (Rogue) VPN provider @@ -55,6 +60,12 @@ descr: Asiamax Ltd. VPN remarks: VPN provider is-anonymous-proxy: yes
+aut-num: AS43233 +descr: VPS 404 Ltd. +remarks: VPN provider [high confidence, but not proofed] located in ES +is-anonymous-proxy: yes +country: ES + aut-num: AS45792 descr: Layer 3 VPN ASN remarks: VPN provider @@ -132,6 +143,11 @@ descr: Privex Inc. remarks: VPN and Tor relay provider is-anonymous-proxy: yes
+aut-num: AS212987 +descr: NekoCloud Solutions Limited +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS394087 descr: Secure Internet LLC / PureVPN remarks: VPN provider @@ -322,6 +338,11 @@ descr: GZ Systems Limited / PureVPN remarks: VPN provider is-anonymous-proxy: yes
+net: 45.9.12.0/22 +descr: VPNHost SIA +remarks: VPN provider +is-anonymous-proxy: yes + net: 45.12.144.0/22 descr: VPNHost SIA remarks: VPN provider @@ -1123,29 +1144,9 @@ descr: Canar VPN Range remarks: VPN provider is-anonymous-proxy: yes
-net: 196.52.50.0/24 -descr: BGRVPN -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.53.164.0/22 -descr: BGRVPN -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.53.82.0/24 -descr: VPNetworks -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.53.83.0/24 -descr: VPNetworks -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.54.53.0/24 -descr: BGRVPN -remarks: VPN provider +net: 196.52.0.0/14 +descr: LogicWeb Inc. / BGRVPN / Private Internet Access / VPNetworks / CookieProxy / etc. pp. +remarks: large IP chunk mostly used by VPN providers is-anonymous-proxy: yes
net: 197.221.161.0/24 @@ -1288,11 +1289,6 @@ descr: OVPN Integritet AB remarks: VPN provider is-anonymous-proxy: yes
-net: 217.115.10.128/28 -descr: Chaos Computer Club e.V. -remarks: Tor relay provider -is-anonymous-proxy: yes - net: 217.148.75.0/24 descr: ITNow S.A. VPN pool / CAXIA remarks: VPN provider diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index 88783d8..8f03159 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -227,6 +227,11 @@ descr: Alpha Sattelite Network remarks: Satellite Internet provider is-satellite-provider: yes
+aut-num: AS203770 +descr: Matooma SAS +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS393582 descr: VIDEO DIRECT SATELLITE & ENTERTAINMENT / WisperISP remarks: Satellite Internet provider @@ -927,6 +932,11 @@ descr: Satellite Solutions Worldwide Ltd remarks: Satellite Internet provider is-satellite-provider: yes
+net: 145.249.96.0/21 +descr: Media Broadcast Satellite GmbH +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 154.73.28.0/22 descr: RAWAFED Libya remarks: Satellite Internet provider diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index e692f4c..26acb64 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -184,6 +184,11 @@ descr: subspace remarks: Generic anycast network [high confidence, but not proofed] is-anycast: yes
+net: 185.89.134.0/24 +descr: Isset +remarks: Generic anycast network +is-anycast: yes + net: 185.143.232.0/22 descr: Noyan Abr Arvan Co. remarks: Generic anycast network @@ -214,6 +219,11 @@ descr: xTom / dns.sb remarks: Public anycast DNS resolver is-anycast: yes
+net: 196.55.0.0/24 +descr: Epik Network +remarks: Generic anycast network +is-anycast: yes + net: 196.216.168.0/24 descr: AfriNIC Anycast Services remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index f8e6799..67b7024 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -13,6 +13,11 @@ # Please keep this file sorted. #
+aut-num: AS12025 +descr: Iron Mountain Data Center +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS24700 descr: Yes Networks Unlimited Ltd remarks: traces to UA, but some RIR entries seem to contain garbage (VG) @@ -33,11 +38,26 @@ descr: Bunea TELECOM SRL remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage country: RO
+aut-num: AS42745 +descr: Safe Value Limited +remarks: tampers with RIR data, traces back to somewhere in central Europe +country: EU + +aut-num: AS42831 +descr: UKSERVERS +remarks: ISP located in UK, but some RIR data for announced prefixes contain garbage +country: UK + aut-num: AS48090 descr: PPTECHNOLOGY LIMITED remarks: bulletproof ISP (related to AS204655) located in NL country: NL
+aut-num: AS51558 +descr: Smart Telecom S.A.R.L +remarks: tampers with RIR data, traces back to RU +country: RU + aut-num: AS56611 descr: REBA Communications BV remarks: bulletproof ISP (related to AS202425) located in NL @@ -103,6 +123,16 @@ descr: Private Internet Hosting LTD remarks: bulletproof ISP located in RU country: RU
+aut-num: AS213373 +descr: IP Connect Inc. +remarks: fake offshore location (SC), traces back to NL +country: NL + +net: 5.252.32.0/22 +descr: StormWall s.r.o. +remarks: claims to be located in DE, but traces back to somewhere in central Europe +country: EU + net: 31.220.0.0/22 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to NL @@ -143,6 +173,11 @@ descr: QWARTA LLC remarks: fake location (US), WHOIS contact and traceroutes point to RU country: RU
+net: 103.197.148.0/22 +descr: I.C.S. Trabia-Network S.R.L. +remarks: fake offshore location (HK), traces back to MD +country: MD + net: 178.239.20.0/24 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd. remarks: fake location (BA), traces back to RO @@ -187,3 +222,8 @@ net: 2a02:e00:ffe9::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from GB country: GB + +net: 2a05:9f06::/31 +descr: Sibyl System LTD +remarks: RIR data contain garbage +country: NL