public inbox for location@lists.ipfire.org
 help / color / mirror / Atom feed
From: "Peter Müller" <peter.mueller@ipfire.org>
To: location@lists.ipfire.org
Subject: [PATCH 1/2] overrides: regular batch of various overrides
Date: Fri, 06 Aug 2021 17:06:56 +0200	[thread overview]
Message-ID: <4349f4fb-29b6-8fc4-0e96-7d94c5feb0d0@ipfire.org> (raw)

[-- Attachment #1: Type: text/plain, Size: 6902 bytes --]

This includes sane AS names for some Autonomous Systems whose operators
did not set helpful ones in the corresponding RIR DB.

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
---
 overrides/override-a2.txt    |  9 +++--
 overrides/override-a3.txt    |  6 ++++
 overrides/override-other.txt | 66 +++++++++++++++++++++++++++++++++---
 3 files changed, 73 insertions(+), 8 deletions(-)

diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt
index 4aac6ea..502948f 100644
--- a/overrides/override-a2.txt
+++ b/overrides/override-a2.txt
@@ -420,18 +420,21 @@ is-satellite-provider:	yes
 
 aut-num:				AS198381
 descr:					YahClick / Star Satellite Communications Company - PJSC
-remarks:				Satellite Internet provider
+remarks:				Satellite Internet provider, RIR data indicates prefixes are hosted in ES
 is-satellite-provider:	yes
+country:				ES
 
 aut-num:				AS198394
 descr:					YahClick / Star Satellite Communications Company - PJSC
-remarks:				Satellite Internet provider
+remarks:				Satellite Internet provider, RIR data indicates prefixes are hosted in GR
 is-satellite-provider:	yes
+country:				GR
 
 aut-num:				AS198504
 descr:					YahClick / Star Satellite Communications Company - PJSC
-remarks:				Satellite Internet provider
+remarks:				Satellite Internet provider, RIR data indicates prefixes are hosted in LU
 is-satellite-provider:	yes
+country:				LU
 
 aut-num:				AS201554
 descr:					SES Germany GmbH
diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index 3c38b69..d810d93 100644
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -177,6 +177,12 @@ descr:		Hybula B.V.
 remarks:	Generic anycast network
 is-anycast:	yes
 
+aut-num:	AS57724
+descr:		DDOS-GUARD LTD
+remarks:	shady CDN, customers massively tampers with RIR data, we cannot trust this network
+is-anycast:	yes
+country:	RU
+
 aut-num:	AS57926
 descr:		SafeDNS, Inc.
 remarks:	Public anycast DNS resolver network [high confidence, but not proofed]
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 454d1d5..045b515 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -13,6 +13,18 @@
 # Please keep this file sorted.
 #
 
+aut-num:	AS1739
+as-name:	Tampere University of Technology
+remarks:	has no sane AS name set in RIPE DB
+
+aut-num:	AS1768
+as-name:	NCNIC
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS1769
+as-name:	NCNIC
+remarks:	has no sane AS name set in APNIC DB
+
 aut-num:	AS1820
 descr:		WNET TELECOM USA Corp.
 remarks:	traces back to various locations in UA, seems to tamper with RIR data
@@ -28,6 +40,22 @@ descr:		Dimension Data
 remarks:	ISP (?) located in ZA, but some RIR data for announced prefixes contain garbage
 country:	ZA
 
+aut-num:	AS4134
+as-name:	Chinanet Backbone
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS4754
+as-name:	Software Technology Park of India
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS4800
+as-name:	Indonesia Network Information Center
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS4814
+as-name:	China169 Beijing Broadband Network
+remarks:	has no sane AS name set in APNIC DB
+
 aut-num:	AS4842
 descr:		Tianhai InfoTech
 remarks:	IP hijacker located somewhere in AP, massively tampers with RIR data
@@ -38,6 +66,10 @@ descr:		XNNET LLC
 remarks:	traces back to an unknown oversea location (HK?), seems to tamper with RIR data
 country:	AP
 
+aut-num:	AS6412
+as-name:	Zajil International Telecom Company
+remarks:	has no sane AS name set in RIPE DB
+
 aut-num:	AS7203
 descr:		Leaseweb USA, Inc.
 remarks:	ISP located in US, but some RIR data for announced prefixes contain garbage
@@ -68,6 +100,10 @@ descr:		ASLINE LIMITED
 remarks:	IP hijacker, traces back to AP region
 country:	AP
 
+aut-num:	AS18185
+as-name:	Northern Taiwan Community University
+remarks:	has no sane AS name set in APNIC DB
+
 aut-num:	AS18254
 descr:		KLAYER LLC
 remarks:	part of the "Asline" IP hijacking gang, traces back to AP region
@@ -128,6 +164,11 @@ descr:		Leaseweb USA, Inc.
 remarks:	ISP located in US, but some RIR data for announced prefixes contain garbage (BZ)
 country:	US
 
+aut-num:	AS30823
+descr:		combahton GmbH
+remarks:	ISP located in DE, but some RIR data for announced prefixes contain garbage
+country:	DE
+
 aut-num:	AS34224
 descr:		Neterra Ltd.
 remarks:	ISP located in BG, but some RIR data for announced prefixes contain garbage
@@ -168,6 +209,11 @@ descr:		Silverstar Invest Limited
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:	RU
 
+aut-num:	AS37155
+descr:		NetOne Telecomunicacoes (defunct)
+remarks:	spamming bogon located in or near Luanda, AO - formerly allocated to NetOne Telecomunicacoes
+country:	AO
+
 aut-num:	AS38197
 descr:		Sun Network (Hong Kong) Limited
 remarks:	ISP located in HK (duh!), but some RIR data for announced prefixes contain garbage
@@ -268,6 +314,11 @@ descr:		IP Oleinichenko Denis
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:	RU
 
+aut-num:	AS44592
+descr:		Skylink Data Center BV
+remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
+country:	NL
+
 aut-num:	AS44992
 descr:		KeonWoo PARK
 remarks:	claims US for its prefixes announced, but traces back to KR
@@ -318,6 +369,11 @@ descr:		Selectel
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:	RU
 
+aut-num:	AS49612
+descr:		DDoS Guard Ltd. / Cognitive Cloud LLP
+remarks:	another shady customer or branch of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
+country:	EU
+
 aut-num:	AS49921
 descr:		F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
 remarks:	claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
@@ -388,11 +444,6 @@ descr:		FiberXpress BV
 remarks:	bulletproof ISP (related to AS202425) located in NL
 country:	NL
 
-aut-num:	AS57724
-descr:		DDOS-GUARD LTD
-remarks:	shady ISP, customers massively tamper with RIR data, we cannot trust this network
-country:	RU
-
 aut-num:	AS57756
 descr:		Telefonica LLC
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -643,6 +694,11 @@ descr:		Wujidun Network Limited
 remarks:	part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 country:	AP
 
+aut-num:	AS140941
+descr:		Full Time Hosting
+remarks:	ISP located in DE, tampers with RIR data
+country:	DE
+
 aut-num:	AS196682
 descr:		FLP Kochenov Aleksej Vladislavovich
 remarks:	ISP located in UA, but RIR data for announced prefixes all say EU
-- 
2.26.2

             reply	other threads:[~2021-08-06 15:06 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-08-06 15:06 Peter Müller [this message]
2021-08-06 15:07 ` [PATCH 2/2] overrides: clarify file contents and policies Peter Müller
2021-08-06 15:20   ` Michael Tremer
2021-08-08 15:16     ` Peter Müller

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4349f4fb-29b6-8fc4-0e96-7d94c5feb0d0@ipfire.org \
    --to=peter.mueller@ipfire.org \
    --cc=location@lists.ipfire.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox