override-{a1,other}: regular batch of overrides

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 7aca3393ba3839781a72c40e56d9f3ee7000a1b6..a0a440465618d17fcbbb811405f33a56807af28f 100644 (file)
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -1007,6 +1007,12 @@ descr:                           Angelo Kreikamp trading as Forhosting / Freedom of Speech VPN / nVPN /
 remarks:                       (Rogue) VPN provider
 is-anonymous-proxy:    yes
 
+net:                           185.244.29.0/24
+descr:                         NINAZU VPN Service / Gerber EDV / David Craig
+remarks:                       (Rogue VPN provider), fake location (SC), traces back to NL
+is-anonymous-proxy:    yes
+country:                       NL
+
 net:                           188.72.80.0/21
 descr:                         GZ Systems Limited / PureVPN
 remarks:                       VPN provider

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 98ea79b9d71e24b9aa23ad1a642d00a290765c9a..fb60d97c8ea17e337b7435ce604b67d5a7faf4c5 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -13,6 +13,16 @@
 # Please keep this file sorted.
 #
 
+aut-num:       AS6134
+descr:         XNNET LLC
+remarks:       traces back to an unknown oversea location (Hong Kong?), seems to tamper with RIR data
+country:       HK
+
+aut-num:       AS8359
+descr:         MTS PJSC
+remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
+country:       RU
+
 aut-num:       AS12025
 descr:         Iron Mountain Data Center
 remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
@@ -78,10 +88,10 @@ descr:              UKSERVERS
 remarks:       ISP located in GB, but some RIR data for announced prefixes contain garbage
 country:       GB
 
-aut-num:       AS44446
-descr:         OOO SibirInvest
-remarks:       bulletproof ISP (related to AS204655), traces back to NL and BG
-country:       EU
+aut-num:       AS42960
+descr:         Cloud Management LLC
+remarks:       tampers with RIR data, traces back to HK
+country:       HK
 
 aut-num:       AS48090
 descr:         PPTECHNOLOGY LIMITED
@@ -103,6 +113,11 @@ descr:             Smart Telecom S.A.R.L
 remarks:       tampers with RIR data, traces back to RU
 country:       RU
 
+aut-num:       AS55933
+descr:         Cloudie Limited
+remarks:       part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
+country:       AP
+
 aut-num:       AS56611
 descr:         REBA Communications BV
 remarks:       bulletproof ISP (related to AS202425) located in NL
@@ -188,6 +203,11 @@ descr:             IP Connect Inc.
 remarks:       fake offshore location (SC), traces back to NL
 country:       NL
 
+aut-num:       AS328543
+descr:         Sun Network Company Limited
+remarks:       IP hijacker, traces back to AP region
+country:       AP
+
 aut-num:       AS398478
 descr:         PEG TECH INC
 remarks:       ISP located in HK, tampers with RIR data
@@ -253,20 +273,35 @@ descr:            FlokiNET Ltd.
 remarks:       fake offshore location (SC), traces back to RO
 country:       RO
 
+net:           185.175.93.0/24
+descr:         Perfect Hosting Solutions
+remarks:       bulletproof ISP related to AS204655, traces back to BG
+country:       BG
+
 net:           185.169.253.0/24
 descr:         Amarutu Technology Ltd. / KoDDoS / ESecurity
 remarks:       fake offshore location (BZ), traces back to US
 country:       US
 
+net:           185.193.91.0/24
+descr:         Romanenko Stanislav Sergeevich
+remarks:       bulletproof ISP related to AS204655, traces back to BG
+country:       BG
+
 net:           185.193.124.0/22
 descr:         ab stract / Njalla
 remarks:       bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
 country:       SE
 
-net:           185.244.29.0/24
-descr:         NINAZU VPN Service / Gerber EDV / David Craig
-remarks:       bulletproof ISP, fake location (SC), traces back to GB
-country:       GB
+net:           185.227.152.0/22
+descr:         XinYuan Interconnect (HONG KONG [sic!]) Limited
+remarks:       claims to be located in DE, traces back to HK
+country:       HK
+
+net:           190.2.128.0/19
+descr:         WorldStream (LATAM) BV
+remarks:       LACNIC IP chunk solely used in NL (inaccurate data)
+country:       NL
 
 net:           193.29.12.0/22
 descr:         Bunea TELECOM SRL