override-{a1,other}: Regular batch of various overrides

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 70b97e10e211e584e05c3c974148efc775d61f77..5734c08d4f163213a3d36c60bf8d058738ec99de 100644 (file)
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -204,6 +204,11 @@ descr:                             Anonymizer, Inc.
 remarks:                       VPN provider
 is-anonymous-proxy:            yes
 
+aut-num:                       AS201860
+descr:                         MyTelco Ltd
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:            yes
+
 aut-num:                       AS205016
 descr:                         HERN Labs AB
 remarks:                       VPN provider [high confidence, but not proofed]
@@ -232,6 +237,11 @@ descr:                             V6 Networking LLC
 remarks:                       Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
 is-anonymous-proxy:            yes
 
+aut-num:                       AS208169
+descr:                         Artikel10 e.V.
+remarks:                       Tor relay provider
+is-anonymous-proxy:            yes
+
 aut-num:                       AS208256
 descr:                         Stingers, Inc.
 remarks:                       Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
@@ -248,12 +258,6 @@ descr:                             Foundation for Applied Privacy
 remarks:                       Tor relay provider
 is-anonymous-proxy:            yes
 
-aut-num:                       AS213005
-descr:                         Proxyseo Ltd.
-remarks:                       VPN provider located in ES
-is-anonymous-proxy:            yes
-country:                       ES
-
 aut-num:                       AS208476
 descr:                         Danilenko, Artyom
 remarks:                       (Rogue) VPN provider
@@ -281,11 +285,6 @@ descr:                             Privex Inc.
 remarks:                       VPN and Tor relay provider
 is-anonymous-proxy:            yes
 
-aut-num:                       AS201860
-descr:                         MyTelco Ltd
-remarks:                       VPN provider [high confidence, but not proofed]
-is-anonymous-proxy:            yes
-
 aut-num:                       AS212052
 descr:                         BOET NOTIFY LTD.
 remarks:                       VPN provider [high confidence, but not proofed]
@@ -313,6 +312,12 @@ descr:                             NekoCloud Solutions Limited
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:            yes
 
+aut-num:                       AS213005
+descr:                         Proxyseo Ltd.
+remarks:                       VPN provider located in ES
+is-anonymous-proxy:            yes
+country:                       ES
+
 aut-num:                       AS213224
 descr:                         Blue Black Squared Limited
 remarks:                       Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 997b37e37745cbc93e1e8706ca746348c71f4920..dab86a0efcceb125b98d20fe29c1042031dae6fa 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -344,6 +344,11 @@ descr:             ab stract / Peter Kolmisoppi
 remarks:       tampers with RIR data, traces back to SE
 country:       SE
 
+aut-num:       AS39782
+descr:         Rack Sphere Hosting S.A.
+remarks:       claims PA for some prefixes, but they are all hosted in CH
+country:       CH
+
 aut-num:       AS40034
 descr:         Confluence Networks Inc.
 remarks:       fake offshore location (VG), traces back to Austin, TX, US
@@ -409,6 +414,11 @@ descr:             NForce Entertainment B.V.
 remarks:       ISP located in NL, but some RIR data for announced prefixes contain garbage
 country:       NL
 
+aut-num:       AS43440
+descr:         Digitale Suisse AG
+remarks:       ISP located in CH, but some RIR data for announced prefixes contain garbage
+country:       CH
+
 aut-num:       AS43624
 descr:         PQ HOSTING S.R.L.
 remarks:       tampers with RIR data sometimes, traces back to NL
@@ -559,6 +569,11 @@ descr:             Cloudie Limited
 remarks:       part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 country:       AP
 
+aut-num:       AS56322
+descr:         ServerAstra Kft.
+remarks:       ISP located in HU, but some RIR data for announced prefixes contain garbage
+country:       HU
+
 aut-num:       AS56382
 descr:         vServer.site LTD
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
@@ -724,6 +739,11 @@ descr:             BGP Consultancy Pte Ltd
 remarks:       possibly invoved in IP hijacking, located somewhere in AP area
 country:       AP
 
+aut-num:       AS64122
+descr:         SWISS GLOBAL SERVICES S.A.S.
+remarks:       ... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them
+country:       CH
+
 aut-num:       AS64425
 descr:         SKB Enterprise B.V.
 remarks:       bulletproof ISP (linked to AS202425 et al.) located in NL
@@ -1124,6 +1144,11 @@ descr:           VPSSC Networks LTD
 remarks:       ISP located in UA, but RIR data for announced prefixes contain garbage
 country:       UA
 
+aut-num:       AS210848
+descr:         Telkom Internet LTD
+remarks:       shady ISP currently located in NL
+country:       NL
+
 aut-num:       AS211380
 descr:         PAYWISE HOLDING Sp. z.o.o.
 remarks:       ISP located in NL, but RIR data for announced prefixes contain garbage
@@ -1194,6 +1219,11 @@ descr:           Private Internet Hosting LTD
 remarks:       bulletproof ISP located in RU
 country:       RU
 
+aut-num:       AS213194
+descr:         Alfa Web Solutions Ltd.
+remarks:       shady ISP located in NL
+country:       NL
+
 aut-num:       AS213373
 descr:         IP Connect Inc.
 remarks:       fake offshore location (SC), traces back to NL