Signed-off-by: Peter Müller peter.mueller@ipfire.org --- overrides/override-a3.txt | 5 ++++ overrides/override-other.txt | 44 ++++++++++++++++++++++++++++++++++-- overrides/override-xd.txt | 5 ++++ 3 files changed, 52 insertions(+), 2 deletions(-)

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 6b8f886..ce51889 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -208,6 +208,11 @@ descr: coreIT.pl remarks: Generic anycast network is-anycast: yes

+aut-num: AS59796 +descr: StormWall s.r.o. +remarks: Worldwide active CDN +is-anycast: yes + aut-num: AS60626 descr: Leaseweb CDN B.V. remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index a8faabf..b74c1e3 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -161,14 +161,19 @@ country: IR

aut-num: AS15828 descr: Blue Diamond Network Co., Ltd. -remarks: Shady ISP located somewhere in AP -country: AP +remarks: Shady ISP, claims GB or IR for it's prefixes, but they all end up near Vilnius, LT +country: LT

aut-num: AS16262 descr: Datacheap Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU

+aut-num: AS17447 +descr: Net4India Ltd +remarks: Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS18185 name: Northern Taiwan Community University remarks: has no sane AS name set in APNIC DB @@ -188,6 +193,11 @@ descr: ITL LLC remarks: ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data country: NL

+aut-num: AS23470 +descr: ReliableSite.Net LLC +remarks: ISP located in US, but RIR data for announced prefixes contain garbage +country: US + aut-num: AS23858 descr: xTom Pty. Ltd. remarks: ISP located in AU, RIR data for announced prefixes contain garbage @@ -793,6 +803,11 @@ descr: Sun Network (Hong Kong) Limited remarks: ISP and/or IP hijacker located somewhere in AP country: AP

+aut-num: AS132335 +descr: LeapSwitch Networks Pvt Ltd +remarks: ISP and/or IP hijacker located in IN +country: IN + aut-num: AS132369 descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED remarks: ISP located in HK, tampers with RIR data @@ -1198,6 +1213,11 @@ descr: Packet Flip, LLC remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US

+aut-num: AS209654 +descr: Delis LLC +remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS210119 descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garbage @@ -1208,6 +1228,11 @@ descr: Des Capital B.V. remarks: Shady ISP located in NL, but RIR data for announced prefixes contain garbage country: NL

+aut-num: AS211252 +descr: Delis LLC +remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS211380 descr: PAYWISE HOLDING Sp. z.o.o. remarks: ISP located in NL, but RIR data for announced prefixes contain garbage @@ -1388,6 +1413,11 @@ descr: Wolverine Trading, LLC remarks: IP hijacker located in US, tampers with RIR data country: US

+aut-num: AS400377 +descr: Serverion LLC +remarks: ISP located in NL, some RIR data contain garbage +country: NL + net: 5.1.68.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data @@ -1598,6 +1628,11 @@ descr: Hornetsecurity GmbH remarks: all suballocations are used in DE, but are assigned to US country: DE

+net: 185.143.223.0/24 +descr: Lenar Davletshin +remarks: traceroutes dead-end somewhere after entering Voxility's network in Vienna, but that's not the location of this network +country: EU + net: 185.175.93.0/24 descr: Perfect Hosting Solutions remarks: bulletproof ISP related to AS204655, traces back to BG @@ -1653,6 +1688,11 @@ descr: QUIKA LTD remarks: claims to be located in DE, traces back to GB country: GB

+net: 194.87.218.0/24 +descr: Hauer Hosting Services Limited +remarks: traces back to RU +country: RU + net: 195.66.165.0/24 descr: Posta Crne Gore remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index 2b50406..131e24d 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -138,6 +138,11 @@ descr: 1337TEAM LIMITED / eliteteam[.]to remarks: Owned by an offshore letterbox company, suspected rogue ISP drop: yes

+aut-num: AS57523 +descr: Chang Way Technologies Co. Limited +remarks: bulletproof ISP, C&C server hosting galore +drop: yes + aut-num: AS57717 descr: FiberXpress BV remarks: bulletproof ISP (related to AS202425) located in NL