* [PATCH 2/2] override-{a1,a3,other}: Regular batch of various overrides
2022-02-05 17:17 [PATCH 1/2] override-other: Fix netcup IP ranges actually located in AT Peter Müller
@ 2022-02-05 17:18 ` Peter Müller
0 siblings, 0 replies; 2+ messages in thread
From: Peter Müller @ 2022-02-05 17:18 UTC (permalink / raw)
To: location
[-- Attachment #1: Type: text/plain, Size: 4518 bytes --]
These came to my attention the other day.
Signed-off-by: Peter Müller <peter.mueller(a)ipfire.org>
---
overrides/override-a1.txt | 5 +++++
overrides/override-a3.txt | 5 +++++
overrides/override-other.txt | 32 ++++++++++++++++++++++++++------
3 files changed, 36 insertions(+), 6 deletions(-)
diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index a97e7ce..ec0234f 100644
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -1069,6 +1069,11 @@ descr: Panq B.V.
remarks: VPN provider [high confidence, but not proofed]
is-anonymous-proxy: yes
+net: 138.99.208.0/22
+descr: ESECURITY & ENTERTAINMENT LTD / PureVPN
+remarks: VPN provider
+is-anonymous-proxy: yes
+
net: 138.117.53.0/24
descr: Proxy Brazil / Global Flash Telecom
remarks: VPN provider [high confidence, but not proofed]
diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index ce51889..da78310 100644
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -1820,6 +1820,11 @@ descr: marbis GmbH
remarks: Generic anycast network [high confidence, but not proofed]
is-anycast: yes
+net: 2a04:de40:1c0::/42
+descr: CreeperHost LTD
+remarks: Generic anycast network
+is-anycast: yes
+
net: 2a05:7f00::/29
descr: nic.at GmbH and friends
remarks: TLD operator's anycast network
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 01cd324..dd411dc 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -87,7 +87,7 @@ remarks: has no sane AS name set in APNIC DB
aut-num: AS4842
descr: Tianhai InfoTech
-remarks: IP hijacker located somewhere in AP, tampers with RIR data
+remarks: ISP located somewhere in AP
country: AP
aut-num: AS5408
@@ -253,6 +253,11 @@ descr: Leaseweb Deutschland GmbH
remarks: ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage
country: DE
+aut-num: AS29405
+descr: ABGON Comunicaciones
+remarks: ISP located in SK, but some RIR data for announced prefixes contain garbage (BZ)
+country: SK
+
aut-num: AS30633
descr: Leaseweb USA, Inc.
remarks: ISP located in US, but some RIR data for announced prefixes contain garbage (BZ)
@@ -578,6 +583,11 @@ descr: DDoS Guard Ltd. / Cognitive Cloud LLP
remarks: another shady customer or branch of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
country: EU
+aut-num: AS49870
+descr: Alsycon BV
+remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
+country: NL
+
aut-num: AS49921
descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
@@ -718,11 +728,6 @@ descr: Vault Dweller OU
remarks: traceroutes dead-end somewhere in or near RU
country: RU
-aut-num: AS59796
-descr: Stormwall s.r.o
-remarks: appears to scatter across EU at least, RIR data contain garbage, might be an A3 candidate
-country: EU
-
aut-num: AS60144
descr: 3W Infra B.V.
remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
@@ -858,6 +863,11 @@ descr: Leaseweb Japan K.K.
remarks: ISP located in JP, some RIR data for announced prefixes contain garbage
country: JP
+aut-num: AS134428
+descr: Brother Internet Technology Co.,Ltd
+remarks: ISP located in HK, some RIR data for announced prefixes contain garbage
+country: HK
+
aut-num: AS134548
descr: DXTL Tseung Kwan O Service
remarks: tampers with RIR data, traces back to AP region
@@ -1038,6 +1048,11 @@ descr: AVATEL TELECOM
remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
country: ES
+aut-num: AS201702
+descr: skHosting.eu s.r.o.
+remarks: ISP located in SK, but some RIR data for announced prefixes contain garbage
+country: SK
+
aut-num: AS201118
descr: Intelcom Group Ltd.
remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -1648,6 +1663,11 @@ descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
remarks: fake offshore location (BZ), traces back to US
country: US
+net: 185.170.129.0/24
+descr: ICLIK SARL
+remarks: traces back to NL
+country: NL
+
net: 185.193.91.0/24
descr: Romanenko Stanislav Sergeevich
remarks: bulletproof ISP related to AS204655, traces back to BG
--
2.34.1
^ permalink raw reply [flat|nested] 2+ messages in thread