override-{a3,other,xd}: Regular batch of various overrides

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index 64bb1f1a53bccd2db781dfd12cffcf460affa734..87bd07edb4f52f434d1b7bff06671792ac17400f 100644 (file)
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -345,7 +345,7 @@ is-anycast: yes
 
 aut-num:       AS209813
 descr:         Fast Content Delivery Ltd.
-remarks:       Generic anycast network
+remarks:       Shady CDN with a lot of abusive activity going on there, anycast network
 is-anycast:    yes
 
 aut-num:       AS210004

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index f89a2f02d65a22107c5b25541802d2a4cf6eb188..e4bf3cb7f4324d56cdc55ef5310857306fa3482a 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -218,6 +218,11 @@ aut-num:   AS18185
 name:          Northern Taiwan Community University
 remarks:       has no sane AS name set in APNIC DB
 
+aut-num:       AS18450
+descr:         WebNX, Inc.
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS18530
 descr:         Isomedia, Inc.
 remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
@@ -338,6 +343,11 @@ descr:             Parsun Network Solutions Pty. Ltd.
 remarks:       Shady ISP located in AU, but some RIR data for announced prefixes contain garbage
 country:       AU
 
+aut-num:       AS31400
+descr:         diva-e Datacenters GmbH
+remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
+country:       DE
+
 aut-num:       AS32489
 descr:         Amanah Tech Inc.
 remarks:       ISP located in CA, but some RIR data for announced prefixes contain garbage
@@ -423,6 +433,11 @@ descr:             DediPath LLC
 remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
 country:       US
 
+aut-num:       AS35916
+descr:         Multacom Corporation
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS37155
 descr:         NetOne Telecomunicacoes (defunct)
 remarks:       spamming bogon located in or near Luanda, AO - formerly allocated to NetOne Telecomunicacoes
@@ -558,6 +573,11 @@ descr:             NbIServ
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
 country:       DE
 
+aut-num:       AS44066
+descr:         diva-e Datacenters GmbH
+remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
+country:       DE
+
 aut-num:       AS44477
 descr:         IP Oleinichenko Denis
 remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -603,6 +623,11 @@ descr:             Network and Security Solutions Limited
 remarks:       ISP located in HK, but some RIR data for announced prefixes contain garbage
 country:       HK
 
+aut-num:       AS46841
+descr:         Fork Networking, LLC
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS47105
 descr:         Dreamtorrent Corp
 remarks:       traceroutes dead-end somewhere in or near RU
@@ -633,6 +658,11 @@ descr:             GAIJIN NETWORK LTD
 remarks:       fake offshore location (CY), traces back to RU
 country:       RU
 
+aut-num:       AS49063
+descr:         Dataline Ltd
+remarks:       ISP located in RU, but some RIR data for suballocations of announced prefixes contain garbage
+country:       RU
+
 aut-num:       AS49392
 descr:         LLC Baxet
 remarks:       tampers with RIR data, traces back to RU
@@ -678,6 +708,11 @@ descr:             Tamatiya EOOD / 4Vendeta
 remarks:       Questionable ISP located in BG, clients massively tamper with RIR data
 country:       BG
 
+aut-num:       AS50386
+descr:         LLC "Communication Industrial complex"
+remarks:       ISP located in KZ, but at least one /24 announced by it thinks it is located in AT
+country:       KZ
+
 aut-num:       AS50673
 descr:         Serverius Holding B.V.
 remarks:       ISP located in NL, but some RIR data for announced prefixes contain garbage
@@ -708,6 +743,11 @@ descr:             WhiteHat Inc.
 remarks:       tampers with RIR data
 country:       EU
 
+aut-num:       AS52423
+descr:         Data Miners S.A. ( Racknation.cr )
+remarks:       ISP located in CR, but some RIR data for announced prefixes contain garbage
+country:       CR
+
 aut-num:       AS55330
 descr:         AFGHANTELECOM GOVERNMENT COMMUNICATION NETWORK
 remarks:       For some reason, some "Airbus Defence and Space AS" prefixes are announced by this one...
@@ -978,16 +1018,16 @@ descr:           Sky Digital Co., Ltd.
 remarks:       IP hijacker located in TW, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
 country:       TW
 
-aut-num:       AS135097
-descr:         LUOGELANG (FRANCE) LIMITED
-remarks:       Shady ISP located in HK, RIR data for announced prefixes contain garbage
-country:       HK
-
 aut-num:       AS136167
 descr:         China Telecom (Macau) Company Limited
 remarks:       located in MO, yet some prefixes show CN or HK instead
 country:       MO
 
+aut-num:       AS136255
+descr:         Telecom International Myanmar Co., Ltd
+remarks:       ISP located in MY, some RIR data for announced prefixes contain garbage
+country:       MY
+
 aut-num:       AS136274
 descr:         Cloud Servers Pvt Ltd
 remarks:       ISP located in NL, all RIR data for announced prefixes contain garbage
@@ -1243,6 +1283,11 @@ descr:           LEASEWEB UK LIMITED
 remarks:       ISP located in London, GB, but many RIR data for announced prefixes contain garbage
 country:       GB
 
+aut-num:       AS205675
+descr:         Hybrid LLC
+remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
+country:       RU
+
 aut-num:       AS206397
 descr:         Genius Guard / Genius Security Ltd.
 remarks:       another shady customer of "DDoS Guard Ltd.", probably located in RU
@@ -1403,6 +1448,11 @@ descr:           PAYWISE HOLDING Sp. z.o.o.
 remarks:       ISP located in NL, but RIR data for announced prefixes contain garbage
 country:       NL
 
+aut-num:       AS211585
+descr:         Canopus It Solutions Pvt Ltd
+remarks:       ISP located in TR, _all_ RIR data for announced prefixes contain garbage, tempted to add a "drop" flag as well :-/
+country:       TR
+
 aut-num:       AS211839
 descr:         JMT Paso Limited
 remarks:       ISP located in NL, but RIR data for announced prefixes contain garbage
@@ -1488,6 +1538,11 @@ descr:           WIID Telecomunicai¿½i¿½es do Brasil
 remarks:       ... traces back to NL
 country:       NL
 
+aut-num:       AS264763
+descr:         RACKNATION S.A.
+remarks:       ISP located in CR, but this AS appears to be used in US for DDoS mitigation
+country:       US
+
 aut-num:       AS267784
 descr:         Flyservers S.A.
 remarks:       ISP located in NL, but RIR data for most announced prefixes contain garbage
@@ -2023,6 +2078,11 @@ descr:           Bradler & Krantz GmbH & Co. KG
 remarks:       allocated to DE, but actually announced from GB
 country:       GB
 
+net:           2a05:3484:272::/48
+descr:         ONER INVESTMENTS Ltd
+remarks:       allocated to PL, but actually announced from RU
+country:       RU
+
 net:           2a05:9f06::/31
 descr:         Sibyl System LTD
 remarks:       RIR data contain garbage

diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt
index ef09b2c271e917f06eb99b882996811c03259a15..c8ea8955cd886eeb29429387927d0d521c51d024 100644 (file)
--- a/overrides/override-xd.txt
+++ b/overrides/override-xd.txt
@@ -44,6 +44,12 @@ remarks:     IP hijacker located in US, massively tampers with RIR data
 country:       US
 drop:          yes
 
+aut-num:       AS24567
+descr:         QT Inc.
+remarks:       IP hijacker operating out of AP area (HK or TW?)
+country:       AP
+drop:          yes
+
 aut-num:       AS39770
 descr:         1337TEAM LIMITED / eliteteam[.]to
 remarks:       Owned by an offshore letterbox company, suspected rogue ISP
@@ -200,6 +206,12 @@ remarks:   ISP and/or IP hijacker located in HK
 country:       HK
 drop:          yes
 
+aut-num:       AS135097
+descr:         LUOGELANG (FRANCE) LIMITED
+remarks:       Shady ISP located in HK, RIR data for announced prefixes contain garbage, solely announcing "Cloud Innovation Ltd." space - no one will miss it
+country:       HK
+drop:          yes
+
 aut-num:       AS136545
 descr:         Blue Data Center
 remarks:       IP hijacker located somewhere in AP area, tampers with RIR data