overrides/override-{a[1-3],other}.txt: weekly batch of override updates

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 9f64dd835fe9ae3fbff25cbb5ace9291f30e7d44..d4fe3796f7ba008363748aa813539bfbc0808ff6 100644 (file)
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -38,6 +38,11 @@ descr:                               VPN de Mexico, S.A. de C.V.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS34962
+descr:                         Epik Network
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 aut-num:                       AS35029
 descr:                         WebLine LTD
 remarks:                       (Rogue) VPN provider
@@ -55,6 +60,12 @@ descr:                               Asiamax Ltd. VPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS43233
+descr:                         VPS 404 Ltd.
+remarks:                       VPN provider [high confidence, but not proofed] located in ES
+is-anonymous-proxy:    yes
+country:                       ES
+
 aut-num:                       AS45792
 descr:                         Layer 3 VPN ASN
 remarks:                       VPN provider
@@ -132,6 +143,11 @@ descr:                             Privex Inc.
 remarks:                       VPN and Tor relay provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS212987
+descr:                         NekoCloud Solutions Limited
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 aut-num:                       AS394087
 descr:                         Secure Internet LLC / PureVPN
 remarks:                       VPN provider
@@ -322,6 +338,11 @@ descr:                             GZ Systems Limited / PureVPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           45.9.12.0/22
+descr:                         VPNHost SIA
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           45.12.144.0/22
 descr:                         VPNHost SIA
 remarks:                       VPN provider
@@ -1123,29 +1144,9 @@ descr:                           Canar VPN Range
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
-net:                           196.52.50.0/24
-descr:                         BGRVPN
-remarks:                       VPN provider
-is-anonymous-proxy:    yes
-
-net:                           196.53.164.0/22
-descr:                         BGRVPN
-remarks:                       VPN provider
-is-anonymous-proxy:    yes
-
-net:                           196.53.82.0/24
-descr:                         VPNetworks
-remarks:                       VPN provider
-is-anonymous-proxy:    yes
-
-net:                           196.53.83.0/24
-descr:                         VPNetworks
-remarks:                       VPN provider
-is-anonymous-proxy:    yes
-
-net:                           196.54.53.0/24
-descr:                         BGRVPN
-remarks:                       VPN provider
+net:                           196.52.0.0/14
+descr:                         LogicWeb Inc. / BGRVPN / Private Internet Access / VPNetworks / CookieProxy / etc. pp.
+remarks:                       large IP chunk mostly used by VPN providers
 is-anonymous-proxy:    yes
 
 net:                           197.221.161.0/24
@@ -1288,11 +1289,6 @@ descr:                           OVPN Integritet AB
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
-net:                           217.115.10.128/28
-descr:                         Chaos Computer Club e.V.
-remarks:                       Tor relay provider
-is-anonymous-proxy:    yes
-
 net:                           217.148.75.0/24
 descr:                         ITNow S.A. VPN pool / CAXIA
 remarks:                       VPN provider

diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt
index 88783d8d76b09ef36a3f9bf52513b365a43a01f1..8f0315956d48b9de39a9a589164b8d98cd0b8499 100644 (file)
--- a/overrides/override-a2.txt
+++ b/overrides/override-a2.txt
@@ -227,6 +227,11 @@ descr:                                     Alpha Sattelite Network
 remarks:                               Satellite Internet provider
 is-satellite-provider: yes
 
+aut-num:                               AS203770
+descr:                                 Matooma SAS
+remarks:                               Satellite Internet provider
+is-satellite-provider: yes
+
 aut-num:                               AS393582
 descr:                                 VIDEO DIRECT SATELLITE & ENTERTAINMENT / WisperISP
 remarks:                               Satellite Internet provider
@@ -927,6 +932,11 @@ descr:                                     Satellite Solutions Worldwide Ltd
 remarks:                               Satellite Internet provider
 is-satellite-provider: yes
 
+net:                                   145.249.96.0/21
+descr:                                 Media Broadcast Satellite GmbH
+remarks:                               Satellite Internet provider
+is-satellite-provider: yes
+
 net:                                   154.73.28.0/22
 descr:                                 RAWAFED Libya
 remarks:                               Satellite Internet provider

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index e692f4cf5094bc1e83336b9908b81b9ee5fad03c..26acb64c78affd52e771f0fc04954bac48c3d903 100644 (file)
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -184,6 +184,11 @@ descr:             subspace
 remarks:       Generic anycast network [high confidence, but not proofed]
 is-anycast:    yes
 
+net:           185.89.134.0/24
+descr:         Isset
+remarks:       Generic anycast network
+is-anycast:    yes
+
 net:           185.143.232.0/22
 descr:         Noyan Abr Arvan Co.
 remarks:       Generic anycast network
@@ -214,6 +219,11 @@ descr:             xTom / dns.sb
 remarks:       Public anycast DNS resolver
 is-anycast:    yes
 
+net:           196.55.0.0/24
+descr:         Epik Network
+remarks:       Generic anycast network
+is-anycast:    yes
+
 net:           196.216.168.0/24
 descr:         AfriNIC Anycast Services
 remarks:       Generic anycast network

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index f8e6799042339f44b88dd89eb816c2b15ae32818..67b70248c3edb4eb3d9f4a4a12fc74d12952406d 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -13,6 +13,11 @@
 # Please keep this file sorted.
 #
 
+aut-num:       AS12025
+descr:         Iron Mountain Data Center
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS24700
 descr:         Yes Networks Unlimited Ltd
 remarks:       traces to UA, but some RIR entries seem to contain garbage (VG)
@@ -33,11 +38,26 @@ descr:              Bunea TELECOM SRL
 remarks:       ISP located in RO, but some RIR data for announced prefixes contain garbage
 country:       RO
 
+aut-num:       AS42745
+descr:         Safe Value Limited
+remarks:       tampers with RIR data, traces back to somewhere in central Europe
+country:       EU
+
+aut-num:       AS42831
+descr:         UKSERVERS
+remarks:       ISP located in UK, but some RIR data for announced prefixes contain garbage
+country:       UK
+
 aut-num:       AS48090
 descr:         PPTECHNOLOGY LIMITED
 remarks:       bulletproof ISP (related to AS204655) located in NL
 country:       NL
 
+aut-num:       AS51558
+descr:         Smart Telecom S.A.R.L
+remarks:       tampers with RIR data, traces back to RU
+country:       RU
+
 aut-num:       AS56611
 descr:         REBA Communications BV
 remarks:       bulletproof ISP (related to AS202425) located in NL
@@ -103,6 +123,16 @@ descr:             Private Internet Hosting LTD
 remarks:       bulletproof ISP located in RU
 country:       RU
 
+aut-num:       AS213373
+descr:         IP Connect Inc.
+remarks:       fake offshore location (SC), traces back to NL
+country:       NL
+
+net:           5.252.32.0/22
+descr:         StormWall s.r.o.
+remarks:       claims to be located in DE, but traces back to somewhere in central Europe
+country:       EU
+
 net:           31.220.0.0/22
 descr:         Amarutu Technology Ltd. / KoDDoS / ESecurity
 remarks:       fake offshore location (BZ), traces back to NL
@@ -143,6 +173,11 @@ descr:             QWARTA LLC
 remarks:       fake location (US), WHOIS contact and traceroutes point to RU
 country:       RU
 
+net:           103.197.148.0/22
+descr:         I.C.S. Trabia-Network S.R.L.
+remarks:       fake offshore location (HK), traces back to MD
+country:       MD
+
 net:           178.239.20.0/24
 descr:         Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 remarks:       fake location (BA), traces back to RO
@@ -187,3 +222,8 @@ net:                2a02:e00:ffe9::/48
 descr:         Bradler & Krantz GmbH & Co. KG
 remarks:       allocated to DE, but actually announced from GB
 country:       GB
+
+net:           2a05:9f06::/31
+descr:         Sibyl System LTD
+remarks:       RIR data contain garbage
+country:       NL