From: "Peter Müller" <peter.mueller@ipfire.org>
To: location@lists.ipfire.org
Subject: [PATCH] override-{a1,other}: Regular batch of various overrides
Date: Wed, 10 Nov 2021 18:27:38 +0100 [thread overview]
Message-ID: <20ba8a00-1146-f833-db2d-5ab8b70bf431@ipfire.org> (raw)
[-- Attachment #1: Type: text/plain, Size: 5051 bytes --]
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
---
overrides/override-a1.txt | 27 ++++++++++++++++-----------
overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++
2 files changed, 46 insertions(+), 11 deletions(-)
diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 70b97e1..5734c08 100644
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -204,6 +204,11 @@ descr: Anonymizer, Inc.
remarks: VPN provider
is-anonymous-proxy: yes
+aut-num: AS201860
+descr: MyTelco Ltd
+remarks: VPN provider [high confidence, but not proofed]
+is-anonymous-proxy: yes
+
aut-num: AS205016
descr: HERN Labs AB
remarks: VPN provider [high confidence, but not proofed]
@@ -232,6 +237,11 @@ descr: V6 Networking LLC
remarks: Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
is-anonymous-proxy: yes
+aut-num: AS208169
+descr: Artikel10 e.V.
+remarks: Tor relay provider
+is-anonymous-proxy: yes
+
aut-num: AS208256
descr: Stingers, Inc.
remarks: Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
@@ -248,12 +258,6 @@ descr: Foundation for Applied Privacy
remarks: Tor relay provider
is-anonymous-proxy: yes
-aut-num: AS213005
-descr: Proxyseo Ltd.
-remarks: VPN provider located in ES
-is-anonymous-proxy: yes
-country: ES
-
aut-num: AS208476
descr: Danilenko, Artyom
remarks: (Rogue) VPN provider
@@ -281,11 +285,6 @@ descr: Privex Inc.
remarks: VPN and Tor relay provider
is-anonymous-proxy: yes
-aut-num: AS201860
-descr: MyTelco Ltd
-remarks: VPN provider [high confidence, but not proofed]
-is-anonymous-proxy: yes
-
aut-num: AS212052
descr: BOET NOTIFY LTD.
remarks: VPN provider [high confidence, but not proofed]
@@ -313,6 +312,12 @@ descr: NekoCloud Solutions Limited
remarks: VPN provider [high confidence, but not proofed]
is-anonymous-proxy: yes
+aut-num: AS213005
+descr: Proxyseo Ltd.
+remarks: VPN provider located in ES
+is-anonymous-proxy: yes
+country: ES
+
aut-num: AS213224
descr: Blue Black Squared Limited
remarks: Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 997b37e..dab86a0 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -344,6 +344,11 @@ descr: ab stract / Peter Kolmisoppi
remarks: tampers with RIR data, traces back to SE
country: SE
+aut-num: AS39782
+descr: Rack Sphere Hosting S.A.
+remarks: claims PA for some prefixes, but they are all hosted in CH
+country: CH
+
aut-num: AS40034
descr: Confluence Networks Inc.
remarks: fake offshore location (VG), traces back to Austin, TX, US
@@ -409,6 +414,11 @@ descr: NForce Entertainment B.V.
remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
country: NL
+aut-num: AS43440
+descr: Digitale Suisse AG
+remarks: ISP located in CH, but some RIR data for announced prefixes contain garbage
+country: CH
+
aut-num: AS43624
descr: PQ HOSTING S.R.L.
remarks: tampers with RIR data sometimes, traces back to NL
@@ -559,6 +569,11 @@ descr: Cloudie Limited
remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
country: AP
+aut-num: AS56322
+descr: ServerAstra Kft.
+remarks: ISP located in HU, but some RIR data for announced prefixes contain garbage
+country: HU
+
aut-num: AS56382
descr: vServer.site LTD
remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
@@ -724,6 +739,11 @@ descr: BGP Consultancy Pte Ltd
remarks: possibly invoved in IP hijacking, located somewhere in AP area
country: AP
+aut-num: AS64122
+descr: SWISS GLOBAL SERVICES S.A.S.
+remarks: ... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them
+country: CH
+
aut-num: AS64425
descr: SKB Enterprise B.V.
remarks: bulletproof ISP (linked to AS202425 et al.) located in NL
@@ -1124,6 +1144,11 @@ descr: VPSSC Networks LTD
remarks: ISP located in UA, but RIR data for announced prefixes contain garbage
country: UA
+aut-num: AS210848
+descr: Telkom Internet LTD
+remarks: shady ISP currently located in NL
+country: NL
+
aut-num: AS211380
descr: PAYWISE HOLDING Sp. z.o.o.
remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
@@ -1194,6 +1219,11 @@ descr: Private Internet Hosting LTD
remarks: bulletproof ISP located in RU
country: RU
+aut-num: AS213194
+descr: Alfa Web Solutions Ltd.
+remarks: shady ISP located in NL
+country: NL
+
aut-num: AS213373
descr: IP Connect Inc.
remarks: fake offshore location (SC), traces back to NL
--
2.26.2
next reply other threads:[~2021-11-10 17:27 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-11-10 17:27 Peter Müller [this message]
-- strict thread matches above, loose matches on Subject: below --
2021-09-02 12:07 [PATCH] override-{a1,other}: regular " Peter Müller
2021-08-19 9:36 Peter Müller
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20ba8a00-1146-f833-db2d-5ab8b70bf431@ipfire.org \
--to=peter.mueller@ipfire.org \
--cc=location@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox