From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter =?utf-8?q?M=C3=BCller?= To: location@lists.ipfire.org Subject: [PATCH] override-{a1,other}: Regular batch of various overrides Date: Wed, 10 Nov 2021 18:27:38 +0100 Message-ID: <20ba8a00-1146-f833-db2d-5ab8b70bf431@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0400658058044851016==" List-Id: --===============0400658058044851016== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Signed-off-by: Peter M=C3=BCller --- overrides/override-a1.txt | 27 ++++++++++++++++----------- overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++ 2 files changed, 46 insertions(+), 11 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 70b97e1..5734c08 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -204,6 +204,11 @@ descr: Anonymizer, Inc. remarks: VPN provider is-anonymous-proxy: yes =20 +aut-num: AS201860 +descr: MyTelco Ltd +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS205016 descr: HERN Labs AB remarks: VPN provider [high confidence, but not proofed] @@ -232,6 +237,11 @@ descr: V6 Networking LLC remarks: Loaded with proxies, see also: https://krebsonsecurity.com/2019/0= 8/the-rise-of-bulletproof-residential-networks/ is-anonymous-proxy: yes =20 +aut-num: AS208169 +descr: Artikel10 e.V. +remarks: Tor relay provider +is-anonymous-proxy: yes + aut-num: AS208256 descr: Stingers, Inc. remarks: Loaded with proxies, see also: https://krebsonsecurity.com/2019/0= 8/the-rise-of-bulletproof-residential-networks/ @@ -248,12 +258,6 @@ descr: Foundation for Applied Privacy remarks: Tor relay provider is-anonymous-proxy: yes =20 -aut-num: AS213005 -descr: Proxyseo Ltd. -remarks: VPN provider located in ES -is-anonymous-proxy: yes -country: ES - aut-num: AS208476 descr: Danilenko, Artyom remarks: (Rogue) VPN provider @@ -281,11 +285,6 @@ descr: Privex Inc. remarks: VPN and Tor relay provider is-anonymous-proxy: yes =20 -aut-num: AS201860 -descr: MyTelco Ltd -remarks: VPN provider [high confidence, but not proofed] -is-anonymous-proxy: yes - aut-num: AS212052 descr: BOET NOTIFY LTD. remarks: VPN provider [high confidence, but not proofed] @@ -313,6 +312,12 @@ descr: NekoCloud Solutions Limited remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes =20 +aut-num: AS213005 +descr: Proxyseo Ltd. +remarks: VPN provider located in ES +is-anonymous-proxy: yes +country: ES + aut-num: AS213224 descr: Blue Black Squared Limited remarks: Owned by an offshore letterbox company, claims NL, but dead-ends = in DE - hard to tell what is going on here diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 997b37e..dab86a0 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -344,6 +344,11 @@ descr: ab stract / Peter Kolmisoppi remarks: tampers with RIR data, traces back to SE country: SE =20 +aut-num: AS39782 +descr: Rack Sphere Hosting S.A. +remarks: claims PA for some prefixes, but they are all hosted in CH +country: CH + aut-num: AS40034 descr: Confluence Networks Inc. remarks: fake offshore location (VG), traces back to Austin, TX, US @@ -409,6 +414,11 @@ descr: NForce Entertainment B.V. remarks: ISP located in NL, but some RIR data for announced prefixes contain= garbage country: NL =20 +aut-num: AS43440 +descr: Digitale Suisse AG +remarks: ISP located in CH, but some RIR data for announced prefixes contain= garbage +country: CH + aut-num: AS43624 descr: PQ HOSTING S.R.L. remarks: tampers with RIR data sometimes, traces back to NL @@ -559,6 +569,11 @@ descr: Cloudie Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, trac= es back to AP region country: AP =20 +aut-num: AS56322 +descr: ServerAstra Kft. +remarks: ISP located in HU, but some RIR data for announced prefixes contain= garbage +country: HU + aut-num: AS56382 descr: vServer.site LTD remarks: ISP located in DE, but some RIR data for announced prefixes contain= garbage @@ -724,6 +739,11 @@ descr: BGP Consultancy Pte Ltd remarks: possibly invoved in IP hijacking, located somewhere in AP area country: AP =20 +aut-num: AS64122 +descr: SWISS GLOBAL SERVICES S.A.S. +remarks: ... surprisingly, all of their prefixes are hosted in CH, yet they = claim CO or PA for them +country: CH + aut-num: AS64425 descr: SKB Enterprise B.V. remarks: bulletproof ISP (linked to AS202425 et al.) located in NL @@ -1124,6 +1144,11 @@ descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garb= age country: UA =20 +aut-num: AS210848 +descr: Telkom Internet LTD +remarks: shady ISP currently located in NL +country: NL + aut-num: AS211380 descr: PAYWISE HOLDING Sp. z.o.o. remarks: ISP located in NL, but RIR data for announced prefixes contain garb= age @@ -1194,6 +1219,11 @@ descr: Private Internet Hosting LTD remarks: bulletproof ISP located in RU country: RU =20 +aut-num: AS213194 +descr: Alfa Web Solutions Ltd. +remarks: shady ISP located in NL +country: NL + aut-num: AS213373 descr: IP Connect Inc. remarks: fake offshore location (SC), traces back to NL --=20 2.26.2 --===============0400658058044851016==--