[PATCH 1/2] override-other: Fix netcup IP ranges actually located in AT

[PATCH 1/2] override-other: Fix netcup IP ranges actually located in AT

[Peter Müller]

[-- Attachment #1: Type: text/plain, Size: 1337 bytes --]

See: https://lists.ipfire.org/pipermail/location/2022-January/000519.html

Reported-by: Martin Gebhardt <martin.gebhardt(a)linkspartei.org>
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
---
 overrides/override-other.txt | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index b74c1e3..01cd324 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -1518,6 +1518,11 @@ descr:		Amarutu Technology Ltd. / KoDDoS / ESecurity
 remarks:	fake offshore location (BZ), traces back to US
 country:   	US
 
+net:		89.58.16.0/22
+descr:		netcup GmbH
+remarks:	https://lists.ipfire.org/pipermail/location/2022-January/000519.html
+country:	AT
+
 net:		91.90.120.0/24
 descr:		M247 LTD, Greenland Infrastructure
 remarks:	... traces back to CA
@@ -1773,6 +1778,11 @@ descr:		Securebit AG
 remarks:	... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
 country:   	CH
 
+net:		2a0a:4cc0::/40
+descr:		netcup GmbH
+remarks:	https://lists.ipfire.org/pipermail/location/2022-January/000519.html
+country:	AT
+
 net:		2a0e:b100:3000::/40
 descr:		4b42 UG (haftungsbeschränkt)
 remarks:	... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
-- 
2.34.1

[PATCH 2/2] override-{a1,a3,other}: Regular batch of various overrides

[Peter Müller]

[-- Attachment #1: Type: text/plain, Size: 4518 bytes --]

These came to my attention the other day.

Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
---
 overrides/override-a1.txt    |  5 +++++
 overrides/override-a3.txt    |  5 +++++
 overrides/override-other.txt | 32 ++++++++++++++++++++++++++------
 3 files changed, 36 insertions(+), 6 deletions(-)

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index a97e7ce..ec0234f 100644
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -1069,6 +1069,11 @@ descr:				Panq B.V.
 remarks:			VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:		yes
 
+net:				138.99.208.0/22
+descr:				ESECURITY & ENTERTAINMENT LTD / PureVPN
+remarks:			VPN provider
+is-anonymous-proxy:		yes
+
 net:				138.117.53.0/24
 descr:				Proxy Brazil / Global Flash Telecom
 remarks:			VPN provider [high confidence, but not proofed]
diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index ce51889..da78310 100644
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -1820,6 +1820,11 @@ descr:		marbis GmbH
 remarks:	Generic anycast network [high confidence, but not proofed]
 is-anycast:	yes
 
+net:		2a04:de40:1c0::/42
+descr:		CreeperHost LTD
+remarks:	Generic anycast network
+is-anycast:	yes
+
 net:		2a05:7f00::/29
 descr:		nic.at GmbH and friends
 remarks:	TLD operator's anycast network
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 01cd324..dd411dc 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -87,7 +87,7 @@ remarks:	has no sane AS name set in APNIC DB
 
 aut-num:	AS4842
 descr:		Tianhai InfoTech
-remarks:	IP hijacker located somewhere in AP, tampers with RIR data
+remarks:	ISP located somewhere in AP
 country:	AP
 
 aut-num:	AS5408
@@ -253,6 +253,11 @@ descr:		Leaseweb Deutschland GmbH
 remarks:	ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage
 country:	DE
 
+aut-num:	AS29405
+descr:		ABGON Comunicaciones
+remarks:	ISP located in SK, but some RIR data for announced prefixes contain garbage (BZ)
+country:	SK
+
 aut-num:	AS30633
 descr:		Leaseweb USA, Inc.
 remarks:	ISP located in US, but some RIR data for announced prefixes contain garbage (BZ)
@@ -578,6 +583,11 @@ descr:		DDoS Guard Ltd. / Cognitive Cloud LLP
 remarks:	another shady customer or branch of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
 country:	EU
 
+aut-num:	AS49870
+descr:		Alsycon BV
+remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
+country:	NL
+
 aut-num:	AS49921
 descr:		F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
 remarks:	claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
@@ -718,11 +728,6 @@ descr:		Vault Dweller OU
 remarks:	traceroutes dead-end somewhere in or near RU
 country:	RU
 
-aut-num:	AS59796
-descr:		Stormwall s.r.o
-remarks:	appears to scatter across EU at least, RIR data contain garbage, might be an A3 candidate
-country:	EU
-
 aut-num:	AS60144
 descr:		3W Infra B.V.
 remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
@@ -858,6 +863,11 @@ descr:		Leaseweb Japan K.K.
 remarks:	ISP located in JP, some RIR data for announced prefixes contain garbage
 country:	JP
 
+aut-num:	AS134428
+descr:		Brother Internet Technology Co.,Ltd
+remarks:	ISP located in HK, some RIR data for announced prefixes contain garbage
+country:	HK
+
 aut-num:	AS134548
 descr:		DXTL Tseung Kwan O Service
 remarks:	tampers with RIR data, traces back to AP region
@@ -1038,6 +1048,11 @@ descr:		AVATEL TELECOM
 remarks:	ISP located in ES, but some RIR data for announced prefixes contain garbage
 country:	ES
 
+aut-num:	AS201702
+descr:		skHosting.eu s.r.o.
+remarks:	ISP located in SK, but some RIR data for announced prefixes contain garbage
+country:	SK
+
 aut-num:	AS201118
 descr:		Intelcom Group Ltd.
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -1648,6 +1663,11 @@ descr:		Amarutu Technology Ltd. / KoDDoS / ESecurity
 remarks:	fake offshore location (BZ), traces back to US
 country:   	US
 
+net:		185.170.129.0/24
+descr:		ICLIK SARL
+remarks:	traces back to NL
+country:	NL
+
 net:		185.193.91.0/24
 descr:		Romanenko Stanislav Sergeevich
 remarks:	bulletproof ISP related to AS204655, traces back to BG
-- 
2.34.1