From: "Peter Müller" <peter.mueller@ipfire.org>
To: location@lists.ipfire.org
Subject: [PATCH 2/2] override-{a2,other}: regular batch of various overrides
Date: Sat, 23 Oct 2021 10:56:34 +0200 [thread overview]
Message-ID: <7ec9ede6-3210-faaf-c1f7-77d3799b23cc@ipfire.org> (raw)
In-Reply-To: <b51248d6-31d0-a64f-4985-ef98624739d3@ipfire.org>
[-- Attachment #1: Type: text/plain, Size: 5161 bytes --]
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
---
overrides/override-a2.txt | 5 ++++
overrides/override-other.txt | 55 ++++++++++++++++++++++++++++++++++++
2 files changed, 60 insertions(+)
diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt
index df0d7e1..1a3cb57 100644
--- a/overrides/override-a2.txt
+++ b/overrides/override-a2.txt
@@ -316,6 +316,11 @@ descr: BusinessCom CZ spol. s r.o.
remarks: Satellite Internet provider
is-satellite-provider: yes
+aut-num: AS43256
+descr: Global Broadband Solution Inc.
+remarks: Satellite Internet provider
+is-satellite-provider: yes
+
aut-num: AS43905
descr: Telenor Satellite AS
remarks: Satellite Internet provider
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 581ca5a..0d36048 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -120,11 +120,21 @@ descr: RECONN LLC
remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
country: RU
+aut-num: AS13105
+descr: LUKOIL Technology Services GmbH
+remarks: T.I.L.: AT is RU, too
+country: RU
+
aut-num: AS13830
descr: Nexril
remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
country: US
+aut-num: AS15828
+descr: Blue Diamond Network Co., Ltd.
+remarks: Hiding behind fake ISP Navitgo LLC (AS59721), tampers with RIR data
+country: NL
+
aut-num: AS18013
descr: ASLINE LIMITED
remarks: IP hijacker, traces back to AP region
@@ -449,6 +459,11 @@ descr: PPTECHNOLOGY LIMITED
remarks: bulletproof ISP (related to AS204655) located in NL
country: NL
+aut-num: AS48158
+descr: DigitalOne AG
+remarks: Services appear to be hosted in RU, RIR data faked/incorrect
+country: RU
+
aut-num: AS48721
descr: ADM Service Ltd.
remarks: traces back to Vilnius, LT
@@ -614,6 +629,11 @@ descr: Batterflyai Media Ltd.
remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
country: RU
+aut-num: AS59721
+descr: Navitgo LLC
+remarks: Shady customer of AS50673, tampers with RIR data
+country: NL
+
aut-num: AS59753
descr: Vault Dweller OU
remarks: traceroutes dead-end somewhere in or near RU
@@ -844,6 +864,11 @@ descr: LUCIDACLOUD LIMITED
remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
country: HK
+aut-num: AS139773
+descr: Netex Limited
+remarks: traceroutes dead-end near Moscow, RU
+country: RU
+
aut-num: AS139811
descr: ANLIAN NETWORK TECHNOLOGY CO., LIMITED
remarks: ISP located in HK, tampers with RIR data
@@ -914,6 +939,11 @@ descr: Verdina Ltd.
remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
country: BG
+aut-num: AS201485
+descr: Luxoft Professional Romania S.R.L.
+remarks: serivces hosted in RU
+country: RU
+
aut-num: AS201912
descr: FutureNow Incorporated
remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
@@ -1184,6 +1214,11 @@ descr: Flyservers S.A.
remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
country: NL
+aut-num: AS269922
+descr: 68 MEDIA S.A.
+remarks: Fake offshore location (PA), traceroutes dead-end near Moscow, RU
+country: RU
+
aut-num: AS328383
descr: xTom Limited
remarks: ISP located in ZA, RIR data for announced prefixes contain garbage
@@ -1199,6 +1234,11 @@ descr: Datapacket Maroc SARL
remarks: bulletproof ISP (strongly linked to AS202425) located in NL
country: NL
+aut-num: AS328703
+descr: Seven Network Inc.
+remarks: traces back to ZA
+country: ZA
+
aut-num: AS394281
descr: Xhostserver LLC
remarks: shady ISP located in US, some RIR data for announced prefixes contain garbage
@@ -1219,6 +1259,11 @@ descr: Leaseweb USA, Inc.
remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
country: US
+aut-num: AS398343
+descr: Baxet Group Inc.
+remarks: traceroutes dead-end near Moscow, RU
+country: RU
+
aut-num: AS398478
descr: PEG TECH INC
remarks: ISP located in HK, tampers with RIR data
@@ -1249,6 +1294,11 @@ descr: Tcloudnet
remarks: Part of the "ASLINE" IP hijacking gang, HK vicinity seems to be part of US too for them :-/
country: AP
+aut-num: AS400039
+descr: Wolverine Trading, LLC
+remarks: IP hijacker located in US, tampers with RIR data
+country: US
+
net: 5.1.68.0/24
descr: GaiacomLC
remarks: routed to DE, inaccurate RIR data
@@ -1394,6 +1444,11 @@ descr: PSINet, Inc. (PSI) / Cogent Communications
remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
country: EU
+net: 149.22.96.0/19
+descr: Manx Telecom Limited
+remarks: Suballocation of Cogent, country code missing due to ARIN DB situation (https://community.ipfire.org/t/location-database-update-error-country-code/6451/)
+country: GB
+
net: 156.0.200.0/22
descr: xTom Limited
remarks: fake offshore locations (AQ / PN / SS), traces back to US
--
2.26.2
prev parent reply other threads:[~2021-10-23 8:56 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2021-10-23 8:55 [PATCH 1/2] override-a{1,2}: fix indentation Peter Müller
2021-10-23 8:56 ` Peter Müller [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=7ec9ede6-3210-faaf-c1f7-77d3799b23cc@ipfire.org \
--to=peter.mueller@ipfire.org \
--cc=location@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox