Signed-off-by: Peter Müller peter.mueller@ipfire.org --- overrides/override-a1.txt | 27 ++++++++++++++++----------- overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++ 2 files changed, 46 insertions(+), 11 deletions(-)

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 70b97e1..5734c08 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -204,6 +204,11 @@ descr: Anonymizer, Inc. remarks: VPN provider is-anonymous-proxy: yes

+aut-num: AS201860 +descr: MyTelco Ltd +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS205016 descr: HERN Labs AB remarks: VPN provider [high confidence, but not proofed] @@ -232,6 +237,11 @@ descr: V6 Networking LLC remarks: Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-netw... is-anonymous-proxy: yes

+aut-num: AS208169 +descr: Artikel10 e.V. +remarks: Tor relay provider +is-anonymous-proxy: yes + aut-num: AS208256 descr: Stingers, Inc. remarks: Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-netw... @@ -248,12 +258,6 @@ descr: Foundation for Applied Privacy remarks: Tor relay provider is-anonymous-proxy: yes

-aut-num: AS213005 -descr: Proxyseo Ltd. -remarks: VPN provider located in ES -is-anonymous-proxy: yes -country: ES - aut-num: AS208476 descr: Danilenko, Artyom remarks: (Rogue) VPN provider @@ -281,11 +285,6 @@ descr: Privex Inc. remarks: VPN and Tor relay provider is-anonymous-proxy: yes

-aut-num: AS201860 -descr: MyTelco Ltd -remarks: VPN provider [high confidence, but not proofed] -is-anonymous-proxy: yes - aut-num: AS212052 descr: BOET NOTIFY LTD. remarks: VPN provider [high confidence, but not proofed] @@ -313,6 +312,12 @@ descr: NekoCloud Solutions Limited remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes

+aut-num: AS213005 +descr: Proxyseo Ltd. +remarks: VPN provider located in ES +is-anonymous-proxy: yes +country: ES + aut-num: AS213224 descr: Blue Black Squared Limited remarks: Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 997b37e..dab86a0 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -344,6 +344,11 @@ descr: ab stract / Peter Kolmisoppi remarks: tampers with RIR data, traces back to SE country: SE

+aut-num: AS39782 +descr: Rack Sphere Hosting S.A. +remarks: claims PA for some prefixes, but they are all hosted in CH +country: CH + aut-num: AS40034 descr: Confluence Networks Inc. remarks: fake offshore location (VG), traces back to Austin, TX, US @@ -409,6 +414,11 @@ descr: NForce Entertainment B.V. remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage country: NL

+aut-num: AS43440 +descr: Digitale Suisse AG +remarks: ISP located in CH, but some RIR data for announced prefixes contain garbage +country: CH + aut-num: AS43624 descr: PQ HOSTING S.R.L. remarks: tampers with RIR data sometimes, traces back to NL @@ -559,6 +569,11 @@ descr: Cloudie Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region country: AP

+aut-num: AS56322 +descr: ServerAstra Kft. +remarks: ISP located in HU, but some RIR data for announced prefixes contain garbage +country: HU + aut-num: AS56382 descr: vServer.site LTD remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage @@ -724,6 +739,11 @@ descr: BGP Consultancy Pte Ltd remarks: possibly invoved in IP hijacking, located somewhere in AP area country: AP

+aut-num: AS64122 +descr: SWISS GLOBAL SERVICES S.A.S. +remarks: ... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them +country: CH + aut-num: AS64425 descr: SKB Enterprise B.V. remarks: bulletproof ISP (linked to AS202425 et al.) located in NL @@ -1124,6 +1144,11 @@ descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garbage country: UA

+aut-num: AS210848 +descr: Telkom Internet LTD +remarks: shady ISP currently located in NL +country: NL + aut-num: AS211380 descr: PAYWISE HOLDING Sp. z.o.o. remarks: ISP located in NL, but RIR data for announced prefixes contain garbage @@ -1194,6 +1219,11 @@ descr: Private Internet Hosting LTD remarks: bulletproof ISP located in RU country: RU

+aut-num: AS213194 +descr: Alfa Web Solutions Ltd. +remarks: shady ISP located in NL +country: NL + aut-num: AS213373 descr: IP Connect Inc. remarks: fake offshore location (SC), traces back to NL