override-{a3,other,xd}: Another batch of various overrides

[location/location-database.git] / overrides / override-xd.txt

diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt
index f3c8bbb7528433d86a1322aa8269ef98a77c3e96..80c5736e5464e7e6e3d6e3c4e5f5254ca95d4e3b 100644 (file)
--- a/overrides/override-xd.txt
+++ b/overrides/override-xd.txt
@@ -172,6 +172,11 @@ remarks:   part of a dirty ISP conglomerate operating most likely out of SE, hijac
 country:       SE
 drop:          yes
 
+aut-num:       AS60930
+descr:         Intem LLC
+remarks:       leaf AS with upstream to other dirty hosters, brute-force attacks galore
+drop:          yes
+
 aut-num:       AS61414
 descr:         EDGENAP LTD
 remarks:       IP hijacking? Rogue ISP?
@@ -254,6 +259,12 @@ remarks:   another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, ta
 country:       BG
 drop:          yes
 
+aut-num:       AS202325
+descr:         4Media Ltd.
+remarks:       another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
+country:       BG
+drop:          yes
+
 aut-num:       AS202425
 descr:         IP Volume Inc.
 remarks:       bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
@@ -296,6 +307,12 @@ remarks:   IP hijacker in RU and dirty suballocations, not a safe place to go
 country:       RU
 drop:          yes
 
+aut-num:       AS206728
+descr:         Media Land LLC
+remarks:       bulletproof ISP, see: https://krebsonsecurity.com/2019/07/meet-the-worlds-biggest-bulletproof-hoster/
+country:       RU
+drop:          yes
+
 aut-num:       AS209272
 descr:         Alviva Holding Limited
 remarks:       bulletproof ISP operating from a war zone in eastern UA
@@ -314,6 +331,12 @@ remarks:   bulletproof ISP and IP hijacker, traces to RU
 country:       RU
 drop:          yes
 
+aut-num:       AS211805
+descr:         Media Land LLC
+remarks:       bulletproof ISP, see: https://krebsonsecurity.com/2019/07/meet-the-worlds-biggest-bulletproof-hoster/
+country:       RU
+drop:          yes
+
 aut-num:       AS211849
 descr:         Kakharov Orinbassar Maratuly
 remarks:       ISP and IP hijacker located in KZ, many RIR data for announced prefixes contain garbage
@@ -373,6 +396,12 @@ remarks:   ISP located in KR, tampers with RIR data
 country:       KR
 drop:          yes
 
+net:           195.133.20.0/24
+descr:         Tribeka Web Advisors S.A.
+remarks:       Tampers with RIR data, traces back to NL, not a safe place to route traffic to
+country:       NL
+drop:          yes
+
 net:           196.11.32.0/20
 descr:         Sanlam Life Insurance Limited
 remarks:       Stolen AfriNIC IPv4 space announced from NL?