override-{a2,a3,other,xd}: Regular batch of various overrides

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt
index 0428f067adef1be49f51131c9e7b3cf4af0815fa..486055257aff064aa5ec49a385f54fff6dfeb903 100644 (file)
--- a/overrides/override-a2.txt
+++ b/overrides/override-a2.txt
@@ -522,6 +522,16 @@ descr:                                     ALMASFOOFA for Communication & Internet Ltd
 remarks:                               Satellite Internet provider [high confidence, but not proofed]
 is-satellite-provider:                 yes
 
+aut-num:                               AS262182
+descr:                                 Media Networks Latin America SAC
+remarks:                               Satellite Internet provider
+is-satellite-provider:                 yes
+
+aut-num:                               AS265515
+descr:                                 TELEVERA RED S. A. P. I. DE C.V.
+remarks:                               Satellite Internet provider
+is-satellite-provider:                 yes
+
 aut-num:                               AS265676
 descr:                                 INTERSAT S.A.
 remarks:                               Satellite Internet provider

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index 6651a0b707c24bd8ef4a3f434fb10b08ed9ec735..132e1bd524c9807be81024b65a786c8f4c862bd4 100644 (file)
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -355,6 +355,11 @@ descr:             CentralNic Ltd
 remarks:       Generic anycast network
 is-anycast:    yes
 
+aut-num:       AS204339
+descr:         Cyberflat s.r.o.
+remarks:       Generic anycast network
+is-anycast:    yes
+
 aut-num:       AS204914
 descr:         LABIXE LTD
 remarks:       Upstreams are CDNs and alike services, possibly used in an anycast-like manner

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index d50f8b258a9da8e20f9e045c84a75dc63cfeff74..54375d33bbe6e1dfba6e5d6b205ed39ba970f196 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -64,6 +64,11 @@ descr:               WNET TELECOM USA Corp.
 remarks:       traces back to various locations in UA, seems to tamper with RIR data
 country:       UA
 
+aut-num:       AS2588
+descr:         SIA "BITE Latvija"
+remarks:       ISP located in LV, but some RIR data for announced prefixes contain garbage
+country:       LV
+
 aut-num:       AS2856
 descr:         BTnet UK Regional network
 remarks:       ISP located in GB, but some RIR data for announced prefixes contain garbage
@@ -254,6 +259,11 @@ descr:             Beamspeed LLC
 remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
 country:       US
 
+aut-num:       AS14445
+descr:         PeaceWeb
+remarks:       According to its website, this ISP is active in US and GB - no IP networks allocated to the latter, however, but many tamper with RIR data. Pin this AS to US to protect our users.
+country:       US
+
 aut-num:       AS15440
 descr:         Baltneta
 remarks:       ISP located in LT, but some RIR data for announced prefixes contain garbage
@@ -269,6 +279,11 @@ descr:             "AZERONLINE LTD" JOINT ENTERPRISE
 remarks:       ISP located in AZ, but some RIR data for announced prefixes contain garbage
 country:       AZ
 
+aut-num:       AS15731
+descr:         InterLIR GmbH
+remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
+country:       DE
+
 aut-num:       AS16262
 descr:         Datacheap Ltd.
 remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -328,6 +343,11 @@ descr:             Neptune Networks, LLC
 remarks:       ISP located in US, but RIR data for announced prefixes contain garbage
 country:       US
 
+aut-num:       AS22653
+descr:         Cyber Wurx LLC
+remarks:       ISP located in US, but RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS23470
 descr:         ReliableSite.Net LLC
 remarks:       ISP located in US, but RIR data for announced prefixes contain garbage
@@ -613,6 +633,11 @@ descr:             ab stract / Peter Kolmisoppi
 remarks:       tampers with RIR data, traces back to SE
 country:       SE
 
+aut-num:       AS39368
+descr:         Idehpardazan-e-Electronic-e-Javanan Co. (Ltd.)
+remarks:       ISP located in IR, but some RIR data for announced prefixes contain garbage
+country:       IR
+
 aut-num:       AS39782
 descr:         Rack Sphere Hosting S.A.
 remarks:       claims PA for some prefixes, but they are all hosted in CH
@@ -753,11 +778,6 @@ descr:             diva-e Datacenters GmbH
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
 country:       DE
 
-aut-num:       AS44477
-descr:         IP Oleinichenko Denis
-remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
-country:       RU
-
 aut-num:       AS44486
 descr:         SYNLINQ
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
@@ -868,6 +888,16 @@ descr:             DigitalOne AG
 remarks:       Services appear to be hosted in RU, RIR data faked/incorrect
 country:       RU
 
+aut-num:       AS48430
+descr:         Perviy TSOD LLC
+remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
+country:       RU
+
+aut-num:       AS48678
+descr:         ENTECH BILISIM TEKNOLOJILERI SANAYI VE TICARET LIMITED SIRKETI
+remarks:       ISP located in TR, but some RIR data for announced prefixes contain garbage
+country:       TR
+
 aut-num:       AS48721
 descr:         ADM Service Ltd.
 remarks:       traces back to Vilnius, LT
@@ -933,6 +963,11 @@ descr:             Servercore B.V.
 remarks:       Selectel branch in NL
 country:       NL
 
+aut-num:       AS50225
+descr:         OMER AY
+remarks:       ISP located in TR, but many RIR data for announced prefixes contain garbage
+country:       TR
+
 aut-num:       AS50360
 descr:         Tamatiya EOOD / 4Vendeta
 remarks:       Questionable ISP located in BG, clients massively tamper with RIR data
@@ -948,15 +983,20 @@ descr:            Serverius Holding B.V.
 remarks:       ISP located in NL, but some RIR data for announced prefixes contain garbage
 country:       NL
 
+aut-num:       AS51089
+descr:         SALTYFISH TECH LTD
+remarks:       traceroutes dead-end somewhere near HK
+country:       HK
+
 aut-num:       AS51167
 descr:         Contabo GmbH
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
 country:       DE
 
-aut-num:       AS51089
-descr:         SALTYFISH TECH LTD
-remarks:       traceroutes dead-end somewhere near HK
-country:       HK
+aut-num:       AS51248
+descr:         Host-Telecom.com s.r.o.
+remarks:       ISP located in CZ, but some RIR data for announced prefixes contain garbage
+country:       CZ
 
 aut-num:       AS51558
 descr:         Smart Telecom S.A.R.L
@@ -1272,6 +1312,11 @@ descr:           XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED
 remarks:       ISP located in HK, tampers with RIR data
 country:       HK
 
+aut-num:       AS132726
+descr:         SanyuNet corp.
+remarks:       ISP located in JP, but some RIR data for announced prefixes contain garbage
+country:       JP
+
 aut-num:       AS132813
 descr:         HK AISI CLOUD COMPUTING LIMITED
 remarks:       ISP and/or IP hijacker located in HK, tampers with RIR data
@@ -1472,6 +1517,11 @@ descr:           Galaxy Broadband
 remarks:       ISP located in PK, but some RIR data need manual correction due to ARIN DB situation
 country:       PK
 
+aut-num:       AS139914
+descr:         WPP Hong Kong
+remarks:       ISP located in HK, but some RIR data need manual correction due to ARIN DB situation
+country:       HK
+
 aut-num:       AS139989
 descr:         CV Atha Media Prima
 remarks:       traces back to ID
@@ -1537,11 +1587,6 @@ descr:           E-Large (HongKong)
 remarks:       traceroutes dead-end in US, and measurements could not proof that this AS is being located elsewhere
 country:       US
 
-aut-num:       AS14445
-descr:         PeaceWeb
-remarks:       According to its website, this ISP is active in US and GB - no IP networks allocated to the latter, however, but many tamper with RIR data. Pin this AS to US to protect our users.
-country:       US
-
 aut-num:       AS196682
 descr:         FLP Kochenov Aleksej Vladislavovich
 remarks:       ISP located in UA, but RIR data for announced prefixes all say EU
@@ -1567,6 +1612,11 @@ descr:           Keminet SHPK
 remarks:       ISP located in AL, some RIR data for announced prefixes contain garbage
 country:       AL
 
+aut-num:       AS197890
+descr:         Andreas Fahl trading as Megaservers.de
+remarks:       ISP located in DE, some RIR data for announced prefixes contain garbage
+country:       DE
+
 aut-num:       AS200019
 descr:         ALEXHOST SRL
 remarks:       ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
@@ -1627,6 +1677,11 @@ descr:           FutureNow Incorporated
 remarks:       ISP located in BG, but RIR data for announced prefixes contain garbage
 country:       BG
 
+aut-num:       AS202335
+descr:         Hostland LLC
+remarks:       ... traces Back to NL
+country:       NL
+
 aut-num:       AS202492
 descr:         SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
 remarks:       fake offshore location (SC), traces back to RU
@@ -1687,6 +1742,11 @@ descr:           Rishikeshan Lavakumar
 remarks:       Network operator thinks messing with RIR data is funny... :-/
 country:       EU
 
+aut-num:       AS204868
+descr:         SC ITNS.NET SRL
+remarks:       ISP located in MD, but some RIR data for announced prefixes contain garbage
+country:       MD
+
 aut-num:       AS206446
 descr:         Evgeni Barabash trading as Active Cloud
 remarks:       ISP located in IL, but some RIR data for announced prefixes contain garbage
@@ -1702,6 +1762,11 @@ descr:           Network Management Ltd.
 remarks:       traceroutes dead-end somewhere in or near RU
 country:       RU
 
+aut-num:       AS205007
+descr:         Maxim Azarov trading as eServer
+remarks:       ISP located in RS, but some RIR data for announced prefixes contain garbage
+country:       RS
+
 aut-num:       AS205026
 descr:         Hauer Hosting Services Limited
 remarks:       ISP located in ES, but some RIR data for announced prefixes contain garbage
@@ -1717,6 +1782,11 @@ descr:           LEASEWEB UK LIMITED
 remarks:       ISP located in London, GB, but many RIR data for announced prefixes contain garbage
 country:       GB
 
+aut-num:       AS205570
+descr:         SIBA BILISIM TELEKOMUNIKASYON ELEKTRONIK ITH. IHR. LTD. STI.
+remarks:       ISP located in TR, but many RIR data for announced prefixes contain garbage
+country:       TR
+
 aut-num:       AS205675
 descr:         Hybrid LLC
 remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -1747,6 +1817,11 @@ descr:           HostSlim B.V.
 remarks:       ISP located in NL, but some RIR data for announced prefixes contain garbage
 country:       NL
 
+aut-num:       AS207326
+descr:         HostLAB Bilisim Teknolojileri A.S.
+remarks:       ISP located in TR, but many RIR data for announced prefixes contain garbage
+country:       TR
+
 aut-num:       AS207400
 descr:         AAEX NETWORK TECHNOLOGY LTD
 remarks:       ... traces back to HK
@@ -1777,6 +1852,11 @@ descr:           Altrosky Technology Ltd.
 remarks:       fake offshore location (SC), traces back to CZ and NL
 country:       EU
 
+aut-num:       AS207710
+descr:         SIA "Singularity Telecom"
+remarks:       All traces to this AS end in US, but RIR data for some announced prefixes seem to contain garbarge
+country:       US
+
 aut-num:       AS207711
 descr:         Inteldome Corporation
 remarks:       ... whose location we are unable to determine precisely, but its definitely not MH :-/
@@ -1837,6 +1917,11 @@ descr:           IP Men D.V
 remarks:       Jurisdiction of this is RU, we pin its location to it since (clients) tamper massively with RIR data :-/
 country:       RU
 
+aut-num:       AS209396
+descr:         SC ITNS.NET SRL
+remarks:       ISP located in MD, but some RIR data for announced prefixes contain garbage
+country:       MD
+
 aut-num:       AS209401
 descr:         Gudaev Maxim Amrakhovich
 remarks:       announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
@@ -1852,11 +1937,21 @@ descr:          MurVal LTD.
 remarks:       ... all traceroutes observed so far dead-end in BG
 country:       BG
 
+aut-num:       AS209961
+descr:         SC ITNS.NET SRL
+remarks:       ISP located in MD, but some RIR data for announced prefixes contain garbage
+country:       MD
+
 aut-num:       AS210119
 descr:         VPSSC Networks LTD
 remarks:       ISP located in UA, but RIR data for announced prefixes contain garbage
 country:       UA
 
+aut-num:       AS210439
+descr:         Semih Mehmet CAN
+remarks:       ISP located in TR, but some RIR data for announced prefixes contain garbage
+country:       TR
+
 aut-num:       AS210512
 descr:         Internet Technologies LLC
 remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -1887,11 +1982,6 @@ descr:           FORTR TELEKOMUNIKASYON SANAYI VE TICARET LIMITED SIRKETI
 remarks:       ISP located in TR, but some RIR data for announced prefixes contain garbage
 country:       TR
 
-aut-num:       AS211252
-descr:         Delis LLC
-remarks:       Shady Serverion customer in NL, many RIR data for announced prefixes contain garbage
-country:       NL
-
 aut-num:       AS211301
 descr:         Collin Schneeweiss
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
@@ -1937,10 +2027,10 @@ descr:          Harry Dowd
 remarks:       ISP located in GB, but RIR data for announced prefixes contain garbage
 country:       GB
 
-aut-num:       AS212913
-descr:         FOP Hornostay Mykhaylo Ivanovych
-remarks:       ISP located in RU, but some RIR data are inaccurate (UA)
-country:       RU
+aut-num:       AS212411
+descr:         MYWEB LIMITED
+remarks:       ISP located in NL, but RIR data for announced prefixes contain garbage
+country:       NL
 
 aut-num:       AS212477
 descr:         RoyaleHosting B.V.
@@ -1962,11 +2052,21 @@ descr:          RECONN LLC
 remarks:       ISP located in RU, but RIR data for announced prefixes contain garbage
 country:       RU
 
+aut-num:       AS212675
+descr:         ITGLOBALCOM RUS LLC
+remarks:       ISP located in KZ, but RIR data for announced prefixes contain garbage
+country:       KZ
+
 aut-num:       AS212738
 descr:         LUSOVPS UNIPESSOAL LDA
 remarks:       ISP located in PT
 country:       PT
 
+aut-num:       AS212913
+descr:         FOP Hornostay Mykhaylo Ivanovych
+remarks:       ISP located in RU, but some RIR data are inaccurate (UA)
+country:       RU
+
 aut-num:       AS212962
 descr:         Quality Area Ltd.
 remarks:       traceroutes dead-end somewhere near Crimera, UA
@@ -2094,8 +2194,8 @@ country:  US
 
 aut-num:       AS398343
 descr:         Baxet Group Inc.
-remarks:       traceroutes dead-end near Moscow, RU
-country:       RU
+remarks:       US branch of Baxet
+country:       US
 
 aut-num:       AS398823
 descr:         PEG TECH INC
@@ -2297,6 +2397,11 @@ descr:           EasyForex Ltd.
 remarks:       fake location (CY), traces to IE area
 country:       IE
 
+net:           91.235.234.0/23
+descr:         Express Courier LLC
+remarks:       Another silly attempt of a Russian ISP to set its location to UA
+country:       RU
+
 net:           91.243.32.0/19
 descr:         Petersburg Internet Network Ltd.
 remarks:       RIR data for suballocations contain garbage, they are all located in RU

diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt
index efbcbf17343b1aef9f0afeb68f537ea89b983dc1..8bcc827c8272ae7b72f41496c92686b333168ef6 100644 (file)
--- a/overrides/override-xd.txt
+++ b/overrides/override-xd.txt
@@ -89,6 +89,11 @@ remarks:     bulletproof ISP (related to AS202425 and AS57717) located in NL
 country:       NL
 drop:          yes
 
+aut-num:       AS44477
+descr:         STARK INDUSTRIES SOLUTIONS LTD
+remarks:       Rogue ISP in multiple locations, some RIR data contain garbage
+drop:          yes
+
 aut-num:       AS47154
 descr:         HUSAM A. H. HIJAZI
 remarks:       Rogue ISP located in NL
@@ -404,6 +409,11 @@ remarks:   another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, ta
 country:       BG
 drop:          yes
 
+aut-num:       AS204603
+descr:         Partner LLC / LetHost LLC
+remarks:       Bulletproof ISP
+drop:          yes
+
 aut-num:       AS204655
 descr:         Novogara Ltd.
 remarks:       bulletproof ISP (strongly linked to AS202425) located in NL
@@ -469,6 +479,18 @@ remarks:   bulletproof ISP and IP hijacker, traces to RU
 country:       RU
 drop:          yes
 
+aut-num:       AS211252
+descr:         Delis LLC
+remarks:       Bulletproof Serverion customer in NL, many RIR data for announced prefixes contain garbage
+country:       NL
+drop:          yes
+
+aut-num:       AS211138
+descr:         Private-Hosting di Cipriano Oscar
+remarks:       Bulletproof combahton GmbH customer in DE
+country:       DE
+drop:          yes
+
 aut-num:       AS211805
 descr:         Media Land LLC
 remarks:       bulletproof ISP, see: https://krebsonsecurity.com/2019/07/meet-the-worlds-biggest-bulletproof-hoster/