override-{a3,other,xd}: Another batch of various overrides

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index 6ad49e10d79eb192fb22cd6ac2f9516851f6570f..64bb1f1a53bccd2db781dfd12cffcf460affa734 100644 (file)
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -155,6 +155,11 @@ descr:             Community DNS Limited
 remarks:       Public anycast DNS nameserver network [high confidence, but not proofed]
 is-anycast:    yes
 
+aut-num:       AS49227
+descr:         Ukrainian Internet Names Center LTD
+remarks:       TLD operator's anycast network
+is-anycast:    yes
+
 aut-num:       AS43278
 descr:         Instance Group LLC
 remarks:       Generic anycast network [high confidence, but not proofed], RIR data contain garbage

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 19ac9b7967b00da3f792293cf0daf1782e158a6a..f9e534dc97d1df91ea41756ecdf1674fdbb6196f 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -1198,11 +1198,6 @@ descr:           FutureNow Incorporated
 remarks:       ISP located in BG, but RIR data for announced prefixes contain garbage
 country:       BG
 
-aut-num:       AS202325
-descr:         4Media Ltd.
-remarks:       another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
-country:       BG
-
 aut-num:       AS202492
 descr:         SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
 remarks:       fake offshore location (SC), traces back to RU
@@ -1383,6 +1378,11 @@ descr:           VPSSC Networks LTD
 remarks:       ISP located in UA, but RIR data for announced prefixes contain garbage
 country:       UA
 
+aut-num:       AS210512
+descr:         Internet Technologies LLC
+remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
+country:       RU
+
 aut-num:       AS210654
 descr:         Des Capital B.V.
 remarks:       Shady ISP located in NL, but RIR data for announced prefixes contain garbage
@@ -1390,7 +1390,7 @@ country:  NL
 
 aut-num:       AS211252
 descr:         Delis LLC
-remarks:       Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage
+remarks:       Shady Serverion customer in NL, many RIR data for announced prefixes contain garbage
 country:       NL
 
 aut-num:       AS211301
@@ -1798,6 +1798,11 @@ descr:           Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 remarks:       fake location (BA), traces back to RO
 country:       RO
 
+net:           179.60.147.0/24
+descr:         Flyservers S.A.
+remarks:       traces back to NL
+country:       NL
+
 net:           179.60.151.0/24
 descr:         DATAHOME S.A.
 remarks:       traces back to BR

diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt
index f3c8bbb7528433d86a1322aa8269ef98a77c3e96..80c5736e5464e7e6e3d6e3c4e5f5254ca95d4e3b 100644 (file)
--- a/overrides/override-xd.txt
+++ b/overrides/override-xd.txt
@@ -172,6 +172,11 @@ remarks:   part of a dirty ISP conglomerate operating most likely out of SE, hijac
 country:       SE
 drop:          yes
 
+aut-num:       AS60930
+descr:         Intem LLC
+remarks:       leaf AS with upstream to other dirty hosters, brute-force attacks galore
+drop:          yes
+
 aut-num:       AS61414
 descr:         EDGENAP LTD
 remarks:       IP hijacking? Rogue ISP?
@@ -254,6 +259,12 @@ remarks:   another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, ta
 country:       BG
 drop:          yes
 
+aut-num:       AS202325
+descr:         4Media Ltd.
+remarks:       another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
+country:       BG
+drop:          yes
+
 aut-num:       AS202425
 descr:         IP Volume Inc.
 remarks:       bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
@@ -296,6 +307,12 @@ remarks:   IP hijacker in RU and dirty suballocations, not a safe place to go
 country:       RU
 drop:          yes
 
+aut-num:       AS206728
+descr:         Media Land LLC
+remarks:       bulletproof ISP, see: https://krebsonsecurity.com/2019/07/meet-the-worlds-biggest-bulletproof-hoster/
+country:       RU
+drop:          yes
+
 aut-num:       AS209272
 descr:         Alviva Holding Limited
 remarks:       bulletproof ISP operating from a war zone in eastern UA
@@ -314,6 +331,12 @@ remarks:   bulletproof ISP and IP hijacker, traces to RU
 country:       RU
 drop:          yes
 
+aut-num:       AS211805
+descr:         Media Land LLC
+remarks:       bulletproof ISP, see: https://krebsonsecurity.com/2019/07/meet-the-worlds-biggest-bulletproof-hoster/
+country:       RU
+drop:          yes
+
 aut-num:       AS211849
 descr:         Kakharov Orinbassar Maratuly
 remarks:       ISP and IP hijacker located in KZ, many RIR data for announced prefixes contain garbage
@@ -373,6 +396,12 @@ remarks:   ISP located in KR, tampers with RIR data
 country:       KR
 drop:          yes
 
+net:           195.133.20.0/24
+descr:         Tribeka Web Advisors S.A.
+remarks:       Tampers with RIR data, traces back to NL, not a safe place to route traffic to
+country:       NL
+drop:          yes
+
 net:           196.11.32.0/20
 descr:         Sanlam Life Insurance Limited
 remarks:       Stolen AfriNIC IPv4 space announced from NL?