override-*: regular batch of various overrides

[location/location-database.git] / overrides / override-a1.txt

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 3a65232d7eeb5c2eac8e5da492fb1cbe0db9310b..284c3e84996bfdf086690f8937ea8e53341f9bf6 100644 (file)
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -44,6 +44,11 @@ descr:                               VPN de Mexico, S.A. de C.V.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS32781
+descr:                         Defender cloud international LLC
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 aut-num:                       AS34962
 descr:                         Epik Network
 remarks:                       Shady ISP and registrar, many prefixes announced refer to "anonymize" infrastructure
@@ -66,12 +71,23 @@ descr:                              Asiamax Ltd. VPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS39770
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
 aut-num:                       AS43233
 descr:                         VPS 404 Ltd.
 remarks:                       VPN provider [high confidence, but not proofed] located in ES
 is-anonymous-proxy:    yes
 country:                       ES
 
+aut-num:                       AS44571
+descr:                         Netvillage Ltd.
+remarks:                       VPN provider [high confidence, but not proofed] located in or near RU
+is-anonymous-proxy:    yes
+country:                       RU
+
 aut-num:                       AS45792
 descr:                         Layer 3 VPN ASN
 remarks:                       VPN provider
@@ -82,6 +98,12 @@ descr:                               BeeVPN ApS
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS51381
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+country:                       RU
+
 aut-num:                       AS51446
 descr:                         SP Argaev Artem Sergeyevich / Foundation Respect My Privacy
 remarks:                       VPN provider [high confidence, but not proofed]
@@ -93,23 +115,28 @@ remarks:                   VPN provider (claims PA or BZ for some prefixes, but they are all hos
 is-anonymous-proxy:    yes
 country:                       CH
 
+aut-num:                       AS53559
+descr:                         KST Networks / ANONYMIZER
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 aut-num:                       AS54990
 descr:                         1337 Services LLC
 remarks:                       Tor relay and VPN provider, traces back to SE [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 country:                       SE
 
-aut-num:                       AS53559
-descr:                         KST Networks / ANONYMIZER
-remarks:                       VPN provider [high confidence, but not proofed]
-is-anonymous-proxy:    yes
-
 aut-num:                       AS55303
 descr:                         Eagle Sky Co., Lt[d ?]
 remarks:                       Autonomous System registered to offshore company, abuse contact is a freemail address, address says "0 Market Square, P.O. Box 364, Belize", seems to trace to some location in AP vicinity
 is-anonymous-proxy:    yes
 country:                       AP
 
+aut-num:                       AS56873
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
 aut-num:                       AS58110
 descr:                         IP Volume Ltd. / Epik
 remarks:                       Shady Autonomous System registered to letterbox company, possibly copycat operation of Epik registrar, many prefixes announced refer to "anonymize" infrastructure
@@ -125,6 +152,11 @@ descr:                             Geotelco Limited
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+aut-num:                       AS60424
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
 aut-num:                       AS60729
 descr:                         Zwiebelfreunde e.V.
 remarks:                       Tor relay provider
@@ -135,6 +167,12 @@ descr:                             Quintex Alliance Consulting
 remarks:                       Tor relay provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS132825
+descr:                         Defense Australia Network
+remarks:                       ... seems to be loaded with proxies, and not located in AU after all (HK?)
+is-anonymous-proxy:    yes
+country:                       AP
+
 aut-num:                       AS135609
 descr:                         AMPR VPN
 remarks:                       VPN provider
@@ -145,6 +183,11 @@ descr:                             Anonymizer, Inc.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS205016
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 aut-num:                       AS206819
 descr:                         ANSON NETWORK LIMITED
 remarks:                       Autonomous System registered to UK letterbox company, traces back through shady ISPs to TW
@@ -158,9 +201,10 @@ is-anonymous-proxy:        yes
 country:                       BR
 
 aut-num:                       AS208294
-descr:                         Markus Koch
-remarks:                       Tor relay provider
+descr:                         CIA TRIAD SECURITY LLC
+remarks:                       Tor relay provider located in or near Berlin, DE
 is-anonymous-proxy:    yes
+country:                       DE
 
 aut-num:                       AS208323
 descr:                         Foundation for Applied Privacy
@@ -205,17 +249,33 @@ descr:                            BOET NOTIFY LTD.
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+aut-num:                       AS212371
+descr:                         Evolve Proxies Ltd.
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 aut-num:                       AS212786
 descr:                         Pooky L&W SDN BHD
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 country:                       GB
 
+aut-num:                       AS212824
+descr:                         WildProxies
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+country:                       NL
+
 aut-num:                       AS212987
 descr:                         NekoCloud Solutions Limited
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+aut-num:                       AS213224
+descr:                         Blue Black Squared Limited
+remarks:                       Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here
+is-anonymous-proxy:    yes
+
 aut-num:                       AS394087
 descr:                         Secure Internet LLC / PureVPN
 remarks:                       VPN provider
@@ -236,6 +296,11 @@ descr:                             Business VPN LLC
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS398271
+descr:                         HardenedVPN[.]com LLC
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           2.57.171.0/24
 descr:                         VPN Consumer Network
 remarks:                       VPN provider
@@ -431,6 +496,11 @@ descr:                             VPNHost SIA
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           45.14.80.0/22
+descr:                         ALTUS COMMUNICATIONS, INC.
+remarks:                       VPN and/or open proxy provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           45.41.132.0/24
 descr:                         VPN Consumer Network
 remarks:                       VPN provider
@@ -476,6 +546,11 @@ descr:                             Shtrauh Andrey
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+net:                           45.147.56.0/23
+descr:                         OLMERA GROUP LTD
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           45.151.115.0/24
 descr:                         ikoProxies [high confidence, but not proofed]
 remarks:                       VPN provider located in NL
@@ -489,7 +564,7 @@ is-anonymous-proxy: yes
 
 net:                           45.192.0.0/12
 descr:                         Cloud Innovation Ltd.
-remarks:                       hijacked AFRINIC IP chunk owned by an offshore company, routed to several dirty networks worldwide, cannot tell what is going on here
+remarks:                       hijacked (?) AFRINIC IP chunk owned by an offshore company, routed to several dirty networks worldwide, cannot tell what is going on here
 is-anonymous-proxy:    yes
 
 net:                           45.220.72.0/22
@@ -497,6 +572,16 @@ descr:                             Low budget VPN service
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           45.221.64.0/21
+descr:                         Secure Internet Limited
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           45.231.206.0/23
+descr:                         SENTRIGLOBAL LTD
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           46.36.200.0/22
 descr:                         IAPS Security Services, L.L.C.
 remarks:                       VPN provider
@@ -647,6 +732,30 @@ descr:                             icedoutproxies.com
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+net:                           77.111.244.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located somewhere in EU
+is-anonymous-proxy:    yes
+country:                       EU
+
+net:                           77.111.245.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located in SG
+is-anonymous-proxy:    yes
+country:                       SG
+
+net:                           77.111.246.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located in US
+is-anonymous-proxy:    yes
+country:                       US
+
+net:                           77.111.247.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located in NL
+is-anonymous-proxy:    yes
+country:                       NL
+
 net:                           77.247.181.160/28
 descr:                         Zwiebelfreunde e.V.
 remarks:                       Tor relay provider
@@ -683,6 +792,16 @@ descr:                             VPN-Services / KDDI Corporation
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           85.203.53.0/24
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           85.208.112.0/22
+descr:                         VPNHOST SIA
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           88.81.248.0/24
 descr:                         TopNet ISP VPN
 remarks:                       VPN provider
@@ -939,6 +1058,11 @@ descr:                            Cloud Innovation Ltd.
 remarks:                       hijacked AFRINIC IP chunk, owned by suspicous offshore company, scattered across dirty networks worldwide - not a safe place to go
 is-anonymous-proxy:    yes
 
+net:                           156.0.200.0/22
+descr:                         xTom Limited
+remarks:                       ... network operator thinks messing with countries and having an offshore company for it is funny :-/
+is-anonymous-proxy:    yes
+
 net:                           161.129.60.0/24
 descr:                         10VPN Hosting
 remarks:                       VPN provider
@@ -1131,6 +1255,11 @@ remarks:                 (Rogue) VPN provider
 is-anonymous-proxy:    yes
 country:                       EU
 
+net:                           185.164.59.0/24
+descr:                         Buyproxies / Yuli Azarch
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           185.165.153.0/24
 descr:                         Privacy Matters VPN service / nVPN / David Craig
 remarks:                       (Rogue) VPN provider
@@ -1162,6 +1291,11 @@ descr:                           Tredinvest LLC / bestwest[.]host
 remarks:                       VPN provider or offering similar services [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+net:                           185.215.113.0/24
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
 net:                           185.220.100.0/22
 descr:                         Zwiebelfreunde e.V. / F3 Netze e.V. / The Calyx Institute
 remarks:                       Tor relay provider
@@ -1314,6 +1448,11 @@ descr:                           PureVPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           193.19.108.0/24
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           193.42.136.0/24
 descr:                         IntelligenceHosting
 remarks:                       VPN provider [high confidence, but not proofed]
@@ -1354,6 +1493,16 @@ descr:                           Lynx Proxies Ltd.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           194.110.84.0/24
+descr:                         NordVPN
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           194.242.2.0/24
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           195.138.249.0/24
 descr:                         Perfect Privacy LTD
 remarks:                       VPN provider
@@ -1384,6 +1533,11 @@ descr:                           VPNClientPublics
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           198.44.224.0/19
+descr:                         Defender cloud international LLC
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           199.249.223.0/24
 descr:                         Quintex Alliance Consulting
 remarks:                       Tor relay provider
@@ -1454,6 +1608,11 @@ descr:                           SecuredConnectivity
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           206.123.128.0/19
+descr:                         Secure Internet LLC
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           209.107.176.0/20
 descr:                         Google VPN
 remarks:                       VPN provider
@@ -1644,6 +1803,11 @@ descr:                           ProtonVPN AG
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           2a07:e340::/32
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           2a09:50c0::/29
 descr:                         VPNHost SIA
 remarks:                       VPN provider
@@ -1688,3 +1852,8 @@ net:                              2c0f:f930::/32
 descr:                         Cyberdyne S.A.
 remarks:                       Tor relay provider
 is-anonymous-proxy:    yes
+
+net:                           2a10:9700::/29
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes