public inbox for location@lists.ipfire.org
 help / color / mirror / Atom feed
From: "Peter Müller" <peter.mueller@ipfire.org>
To: location@lists.ipfire.org
Subject: [PATCH] override-{a1,other}: Regular batch of various overrides
Date: Wed, 10 Nov 2021 18:27:38 +0100	[thread overview]
Message-ID: <20ba8a00-1146-f833-db2d-5ab8b70bf431@ipfire.org> (raw)

[-- Attachment #1: Type: text/plain, Size: 5051 bytes --]

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
---
 overrides/override-a1.txt    | 27 ++++++++++++++++-----------
 overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++
 2 files changed, 46 insertions(+), 11 deletions(-)

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 70b97e1..5734c08 100644
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -204,6 +204,11 @@ descr:				Anonymizer, Inc.
 remarks:			VPN provider
 is-anonymous-proxy:		yes
 
+aut-num:			AS201860
+descr:				MyTelco Ltd
+remarks:			VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:		yes
+
 aut-num:			AS205016
 descr:				HERN Labs AB
 remarks:			VPN provider [high confidence, but not proofed]
@@ -232,6 +237,11 @@ descr:				V6 Networking LLC
 remarks:			Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
 is-anonymous-proxy:		yes
 
+aut-num:			AS208169
+descr:				Artikel10 e.V.
+remarks:			Tor relay provider
+is-anonymous-proxy:		yes
+
 aut-num:			AS208256
 descr:				Stingers, Inc.
 remarks:			Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
@@ -248,12 +258,6 @@ descr:				Foundation for Applied Privacy
 remarks:			Tor relay provider
 is-anonymous-proxy:		yes
 
-aut-num:			AS213005
-descr:				Proxyseo Ltd.
-remarks:			VPN provider located in ES
-is-anonymous-proxy:		yes
-country:			ES
-
 aut-num:			AS208476
 descr:				Danilenko, Artyom
 remarks:			(Rogue) VPN provider
@@ -281,11 +285,6 @@ descr:				Privex Inc.
 remarks:			VPN and Tor relay provider
 is-anonymous-proxy:		yes
 
-aut-num:			AS201860
-descr:				MyTelco Ltd
-remarks:			VPN provider [high confidence, but not proofed]
-is-anonymous-proxy:		yes
-
 aut-num:			AS212052
 descr:				BOET NOTIFY LTD.
 remarks:			VPN provider [high confidence, but not proofed]
@@ -313,6 +312,12 @@ descr:				NekoCloud Solutions Limited
 remarks:			VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:		yes
 
+aut-num:			AS213005
+descr:				Proxyseo Ltd.
+remarks:			VPN provider located in ES
+is-anonymous-proxy:		yes
+country:			ES
+
 aut-num:			AS213224
 descr:				Blue Black Squared Limited
 remarks:			Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 997b37e..dab86a0 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -344,6 +344,11 @@ descr:		ab stract / Peter Kolmisoppi
 remarks:	tampers with RIR data, traces back to SE
 country:	SE
 
+aut-num:	AS39782
+descr:		Rack Sphere Hosting S.A.
+remarks:	claims PA for some prefixes, but they are all hosted in CH
+country:	CH
+
 aut-num:	AS40034
 descr:		Confluence Networks Inc.
 remarks:	fake offshore location (VG), traces back to Austin, TX, US
@@ -409,6 +414,11 @@ descr:		NForce Entertainment B.V.
 remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
 country:	NL
 
+aut-num:	AS43440
+descr:		Digitale Suisse AG
+remarks:	ISP located in CH, but some RIR data for announced prefixes contain garbage
+country:	CH
+
 aut-num:	AS43624
 descr:		PQ HOSTING S.R.L.
 remarks:	tampers with RIR data sometimes, traces back to NL
@@ -559,6 +569,11 @@ descr:		Cloudie Limited
 remarks:	part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 country:	AP
 
+aut-num:	AS56322
+descr:		ServerAstra Kft.
+remarks:	ISP located in HU, but some RIR data for announced prefixes contain garbage
+country:	HU
+
 aut-num:	AS56382
 descr:		vServer.site LTD
 remarks:	ISP located in DE, but some RIR data for announced prefixes contain garbage
@@ -724,6 +739,11 @@ descr:		BGP Consultancy Pte Ltd
 remarks:	possibly invoved in IP hijacking, located somewhere in AP area
 country:	AP
 
+aut-num:	AS64122
+descr:		SWISS GLOBAL SERVICES S.A.S.
+remarks:	... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them
+country:	CH
+
 aut-num:	AS64425
 descr:		SKB Enterprise B.V.
 remarks:	bulletproof ISP (linked to AS202425 et al.) located in NL
@@ -1124,6 +1144,11 @@ descr:		VPSSC Networks LTD
 remarks:	ISP located in UA, but RIR data for announced prefixes contain garbage
 country:	UA
 
+aut-num:	AS210848
+descr:		Telkom Internet LTD
+remarks:	shady ISP currently located in NL
+country:	NL
+
 aut-num:	AS211380
 descr:		PAYWISE HOLDING Sp. z.o.o.
 remarks:	ISP located in NL, but RIR data for announced prefixes contain garbage
@@ -1194,6 +1219,11 @@ descr:		Private Internet Hosting LTD
 remarks:	bulletproof ISP located in RU
 country:	RU
 
+aut-num:	AS213194
+descr:		Alfa Web Solutions Ltd.
+remarks:	shady ISP located in NL
+country:	NL
+
 aut-num:	AS213373
 descr:		IP Connect Inc.
 remarks:	fake offshore location (SC), traces back to NL
-- 
2.26.2

             reply	other threads:[~2021-11-10 17:27 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-11-10 17:27 Peter Müller [this message]
  -- strict thread matches above, loose matches on Subject: below --
2021-09-02 12:07 [PATCH] override-{a1,other}: regular " Peter Müller
2021-08-19  9:36 Peter Müller

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20ba8a00-1146-f833-db2d-5ab8b70bf431@ipfire.org \
    --to=peter.mueller@ipfire.org \
    --cc=location@lists.ipfire.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox