override-*: another bunch of various overrides

Including fixed statements for ASNs without a sane AS name in RIR DBs.
My fault, again. :-/

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 77d5b08109bfba2daf452219f79d27b93277d6e6..7cd03594606cfd5a938fdb9a367e51fd3d03de45 100644 (file)
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -307,6 +307,11 @@ descr:                             HardenedVPN[.]com LLC
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS399928
+descr:                         STELLAR PROXIES
+remarks:                       VPN or open proxy provider
+is-anonymous-proxy:    yes
+
 net:                           2.57.171.0/24
 descr:                         VPN Consumer Network
 remarks:                       VPN provider
@@ -818,6 +823,11 @@ descr:                             ThinkTech Technology Industrial CO. Limited
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           91.109.176.0/20
+descr:                         IELO-LIAZO SERVICES SAS
+remarks:                       (Rogue) VPN provider hosting C&Cs en masse
+is-anonymous-proxy:    yes
+
 net:                           91.193.75.0/24
 descr:                         KGB Hosting d.o.o. / David Craig
 remarks:                       (Rogue) VPN provider

diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt
index 223b4df0ec43c77ca3795b592ffe7f6f36a1f5ed..dcf8aace4493d6cb9422605b8dbf09e3cc379501 100644 (file)
--- a/overrides/override-a2.txt
+++ b/overrides/override-a2.txt
@@ -411,6 +411,12 @@ descr:                                     IPStar
 remarks:                               Satellite Internet provider [high confidence, but not proofed]
 is-satellite-provider: yes
 
+aut-num:                               AS136796
+descr:                                 CoreLink Japan
+remarks:                               Satellite Internet provider [high confidence, but not proofed] located in JP
+is-satellite-provider: yes
+country:                               JP
+
 aut-num:                               AS136940
 descr:                                 ComSat Ltd.
 remarks:                               Satellite Internet provider
@@ -426,6 +432,12 @@ descr:                                     Alpha Sattelite Network
 remarks:                               Satellite Internet provider
 is-satellite-provider: yes
 
+aut-num:                               AS198247
+descr:                                 YahClick / Star Satellite Communications Company - PJSC
+remarks:                               Satellite Internet provider, RIR data indicates prefixes are hosted in Abu Dhabi, AE
+is-satellite-provider: yes
+country:                               AE
+
 aut-num:                               AS198381
 descr:                                 YahClick / Star Satellite Communications Company - PJSC
 remarks:                               Satellite Internet provider, RIR data indicates prefixes are hosted in ES
@@ -469,6 +481,12 @@ descr:                                     Intersat Telekomunikacije d.o.o.
 remarks:                               Satellite Internet provider
 is-satellite-provider: yes
 
+aut-num:                               AS208428
+descr:                                 YahClick / Star Satellite Communications Company - PJSC
+remarks:                               Satellite Internet provider, pinning to AE since other announcements made by this organisation contain garbage
+is-satellite-provider: yes
+country:                               AE
+
 aut-num:                               AS208484
 descr:                                 EuroSkyPark GmbH
 remarks:                               Satellite Internet provider
@@ -1634,6 +1652,12 @@ descr:                                   Satellite Ltd
 remarks:                               Satellite Internet provider
 is-satellite-provider: yes
 
+net:                                   185.192.56.0/22
+descr:                                 CoreLink Communications
+remarks:                               Chinese satellite Internet provider [high confidence, but not proofed]
+is-satellite-provider: yes
+country:                               AP
+
 net:                                   185.200.224.0/22
 descr:                                 Level421 GmbH
 remarks:                               Satellite Internet provider

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index b07d4b8eb58a3dfe7edfb538340853683de6dd2a..83bfb24ba2eda3cc78a7677e04e5857c1be3b6a9 100644 (file)
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -150,6 +150,11 @@ descr:             ANEXIA Internetdienstleistungs GmbH
 remarks:       Public anycast DNS nameserver network [high confidence, but not proofed]
 is-anycast:    yes
 
+aut-num:       AS42909
+descr:         Community DNS Limited
+remarks:       Public anycast DNS nameserver network [high confidence, but not proofed]
+is-anycast:    yes
+
 aut-num:       AS43278
 descr:         Instance Group LLC
 remarks:       Generic anycast network [high confidence, but not proofed], RIR data contain garbage
@@ -978,6 +983,16 @@ descr:             Communications Regulatory Authority
 remarks:       Generic anycast network
 is-anycast:    yes
 
+net:           184.24.0.0/13
+descr:         Akamai Technologies, Inc.
+remarks:       IP chunk in use for providing CDN services worldwide, subnets scatter across various Autonomous Systems
+is-anycast:    yes
+
+net:           184.84.0.0/14
+descr:         Akamai Technologies, Inc.
+remarks:       IP chunk in use for providing CDN services worldwide, subnets scatter across various Autonomous Systems
+is-anycast:    yes
+
 net:           185.20.53.0/24
 descr:         Exascale Limited
 remarks:       Generic anycast network

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index d232fc696c84b290523f4bab4e99ed3523a4996f..b0ee0ca87cb2910c047bb3423d457ec7d2235d7a 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -24,15 +24,15 @@
 #
 
 aut-num:       AS1739
-as-name:       Tampere University of Technology
+name:          Tampere University of Technology
 remarks:       has no sane AS name set in RIPE DB
 
 aut-num:       AS1768
-as-name:       NCNIC
+name:          NCNIC
 remarks:       has no sane AS name set in APNIC DB
 
 aut-num:       AS1769
-as-name:       NCNIC
+name:          NCNIC
 remarks:       has no sane AS name set in APNIC DB
 
 aut-num:       AS1820
@@ -51,19 +51,24 @@ remarks:    ISP (?) located in ZA, but some RIR data for announced prefixes contain
 country:       ZA
 
 aut-num:       AS4134
-as-name:       Chinanet Backbone
+name:          Chinanet Backbone
 remarks:       has no sane AS name set in APNIC DB
 
 aut-num:       AS4754
-as-name:       Software Technology Park of India
+name:          Software Technology Park of India
 remarks:       has no sane AS name set in APNIC DB
 
+aut-num:       AS4785
+descr:         xTom Limited
+remarks:       ISP located in JP, RIR data for announced prefixes contain garbage
+country:       JP
+
 aut-num:       AS4800
-as-name:       Indonesia Network Information Center
+name:          Indonesia Network Information Center
 remarks:       has no sane AS name set in APNIC DB
 
 aut-num:       AS4814
-as-name:       China169 Beijing Broadband Network
+name:          China169 Beijing Broadband Network
 remarks:       has no sane AS name set in APNIC DB
 
 aut-num:       AS4842
@@ -77,7 +82,7 @@ remarks:      traces back to an unknown oversea location (HK?), seems to tamper with
 country:       AP
 
 aut-num:       AS6412
-as-name:       Zajil International Telecom Company
+name:          Zajil International Telecom Company
 remarks:       has no sane AS name set in RIPE DB
 
 aut-num:       AS7203
@@ -90,6 +95,11 @@ descr:               MTS PJSC
 remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:       RU
 
+aut-num:       AS9312
+descr:         xTom Hong Kong Limited
+remarks:       ISP located in HK, RIR data for announced prefixes contain garbage
+country:       HK
+
 aut-num:       AS12025
 descr:         Iron Mountain Data Center
 remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
@@ -105,13 +115,18 @@ descr:            RECONN LLC
 remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:       RU
 
+aut-num:       AS13830
+descr:         Nexril
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS18013
 descr:         ASLINE LIMITED
 remarks:       IP hijacker, traces back to AP region
 country:       AP
 
 aut-num:       AS18185
-as-name:       Northern Taiwan Community University
+name:          Northern Taiwan Community University
 remarks:       has no sane AS name set in APNIC DB
 
 aut-num:       AS18254
@@ -119,6 +134,11 @@ descr:             KLAYER LLC
 remarks:       part of the "Asline" IP hijacking gang, traces back to AP region
 country:       AP
 
+aut-num:       AS18779
+descr:         EGIHosting
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS21100
 descr:         ITL LLC
 remarks:       ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data
@@ -129,6 +149,11 @@ descr:             DDOSING NETWORK
 remarks:       IP hijacker located somewhere in AP, massively tampers with RIR data
 country:       AP
 
+aut-num:       AS23858
+descr:         xTom Pty. Ltd.
+remarks:       ISP located in AU, RIR data for announced prefixes contain garbage
+country:       AU
+
 aut-num:       AS24009
 descr:         HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
 remarks:       IP hijacker (?) located in HK, tampers with RIR data
@@ -179,11 +204,31 @@ descr:            combahton GmbH
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
 country:       DE
 
+aut-num:       AS30982
+descr:         CAFE Informatique et telecommunications (defunct)
+remarks:       spamming bogon located in TG - formerly allocated to CAFE Informatique et telecommunications
+country:       TG
+
+aut-num:       AS31133
+descr:         PJSC MegaFon
+remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
+country:       RU
+
+aut-num:       AS31732
+descr:         Parsun Network Solutions Pty. Ltd.
+remarks:       Shady ISP located in AU, but some RIR data for announced prefixes contain garbage
+country:       AU
+
 aut-num:       AS34224
 descr:         Neterra Ltd.
 remarks:       ISP located in BG, but some RIR data for announced prefixes contain garbage
 country:       BG
 
+aut-num:       AS34665
+descr:         Petersburg Internet Network Ltd.
+remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
+country:       RU
+
 aut-num:       AS35042
 descr:         IP Interactive UG (haftungsbeschraenkt)
 remarks:       ISP located in BG, but RIR data for announced prefixes contain garbage
@@ -224,6 +269,16 @@ descr:             NetOne Telecomunicacoes (defunct)
 remarks:       spamming bogon located in or near Luanda, AO - formerly allocated to NetOne Telecomunicacoes
 country:       AO
 
+aut-num:       AS37475
+descr:         HTT Telecom S.A (defunct)
+remarks:       spamming bogon located in CM - formerly allocated to HTT Telecom S.A
+country:       CM
+
+aut-num:       AS37529
+descr:         Gestora de Infraestructuras de Telecomunicaciones de Guinea Ecuatorial
+remarks:       announces bogons out of GQ
+country:       GQ
+
 aut-num:       AS38197
 descr:         Sun Network (Hong Kong) Limited
 remarks:       ISP located in HK (duh!), but some RIR data for announced prefixes contain garbage
@@ -334,6 +389,11 @@ descr:             KeonWoo PARK
 remarks:       claims US for its prefixes announced, but traces back to KR
 country:       KR
 
+aut-num:       AS45671
+descr:         Servers Australia Pty. Ltd.
+remarks:       ISP located in AU, but some RIR data for announced prefixes contain garbage
+country:       AU
+
 aut-num:       AS45753
 descr:         Network and Security Solutions Limited
 remarks:       ISP located in HK, but some RIR data for announced prefixes contain garbage
@@ -424,6 +484,16 @@ descr:             WhiteHat Inc.
 remarks:       tampers with RIR data
 country:       EU
 
+aut-num:       AS54600
+descr:         PEG TECH INC
+remarks:       ISP and/or IP hijacker located in US this time, tampers with RIR data
+country:       US
+
+aut-num:       AS55836
+descr:         Reliance Jio Infocomm Limited
+remarks:       ISP located in IN, but some RIR data for announced prefixes contain garbage
+country:       IN
+
 aut-num:       AS55933
 descr:         Cloudie Limited
 remarks:       part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
@@ -639,6 +709,11 @@ descr:             Cloud Servers Pvt Ltd
 remarks:       ISP located in NL, all RIR data for announced prefixes contain garbage
 country:       NL
 
+aut-num:       AS136384
+descr:         Optix Pakistan (Pvt.) Limited
+remarks:       ISP located in PK, some RIR data for announced prefixes (bogons?) contain garbage
+country:       PK
+
 aut-num:       AS136800
 descr:         ICIDC NETWORK
 remarks:       IP hijacker located somehwere in AP, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
@@ -661,7 +736,7 @@ country:    AP
 
 aut-num:       AS138195
 descr:         MOACK.Co.LTD
-remarks:       ISP located KR in, some RIR data for announced prefixes contain garbage
+remarks:       ISP located in KR, some RIR data for announced prefixes contain garbage
 country:       KR
 
 aut-num:       AS138571
@@ -911,7 +986,7 @@ country:    NL
 
 aut-num:       AS211849
 descr:         Kakharov Orinbassar Maratuly
-remarks:       ISP located in RU, but RIR data for announced prefixes contain garbage
+remarks:       ISP and/or IP hijacker located in RU, but RIR data for announced prefixes contain garbage
 country:       RU
 
 aut-num:       AS211992
@@ -969,6 +1044,11 @@ descr:            IP Connect Inc.
 remarks:       fake offshore location (SC), traces back to NL
 country:       NL
 
+aut-num:       AS213296
+descr:         SIA "Singularity Telecom"
+remarks:       Shady customer of AS31732 (Parsun Network Solutions Pty. Ltd.) located in AU, RIR data for announced prefixes contain garbage
+country:       AU
+
 aut-num:       AS262254
 descr:         DDOS-GUARD CORP.
 remarks:       fake offshore location (BZ), traces back to RU
@@ -979,6 +1059,11 @@ descr:            Flyservers S.A.
 remarks:       ISP located in NL, but RIR data for most announced prefixes contain garbage
 country:       NL
 
+aut-num:       AS328383
+descr:         xTom Limited
+remarks:       ISP located in ZA, RIR data for announced prefixes contain garbage
+country:       ZA
+
 aut-num:       AS328543
 descr:         Sun Network Company Limited
 remarks:       IP hijacker, traces back to AP region
@@ -989,6 +1074,11 @@ descr:            Datapacket Maroc SARL
 remarks:       bulletproof ISP (strongly linked to AS202425) located in NL
 country:       NL
 
+aut-num:       AS394281
+descr:         Xhostserver LLC
+remarks:       shady ISP located in US, some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS394380
 descr:         Leaseweb USA, Inc.
 remarks:       ISP located in Dallas, TX, US, but some RIR data for announced prefixes contain garbage
@@ -1159,6 +1249,11 @@ descr:           PSINet, Inc. (PSI) / Cogent Communications
 remarks:       Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
 country:       EU
 
+net:           156.0.200.0/22
+descr:         xTom Limited
+remarks:       fake offshore locations (AQ / PN / SS), traces back to US
+country:       US
+
 net:           178.239.20.0/24
 descr:         Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 remarks:       fake location (BA), traces back to RO
@@ -1259,6 +1354,11 @@ descr:           NetConn Services Ltd
 remarks:       APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
 country:       AP
 
+net:           2a00:6340:c000::/34
+descr:         Openfactory GmbH
+remarks:       ... who thinks assigning networks to AQ is funny :-/
+country:       EU
+
 net:           2402:e940:f00::/48
 descr:         Wind Cloud Network Technology Co Ltd.
 remarks:       appears to be used out of Tokyo, JP
@@ -1284,6 +1384,11 @@ descr:           Sibyl System LTD
 remarks:       RIR data contain garbage
 country:       NL
 
+net:           2a06:1281:5::/48
+descr:         Alexander Nicholson
+remarks:       allocated to NO, but actually announced from FR
+country:       FR
+
 net:           2a06:e80::/29
 descr:         Datashield, Inc.
 remarks:       fake offshore location (SC), traces back to NL
@@ -1294,6 +1399,11 @@ descr:           Securebit AG
 remarks:       ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
 country:       CH
 
+net:           2a10:ccc0:3000::/40
+descr:         Securebit AG
+remarks:       ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
+country:       CH
+
 net:           2a0e:b100:3000::/40
 descr:         4b42 UG (haftungsbeschränkt)
 remarks:       ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/