override-*: regular batch of various overrides

[location/location-database.git] / overrides / override-a1.txt

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 6f04bd66db4431fdaf36de2027d0bd7387bf4417..284c3e84996bfdf086690f8937ea8e53341f9bf6 100644 (file)
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -28,6 +28,12 @@ descr:                               Maginfo
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS16255
+descr:                         IRIDIUM PROVIDER LTD
+remarks:                       VPN provider [high confidence, but not proofed] located in RU
+is-anonymous-proxy:    yes
+country:                       RU
+
 aut-num:                       AS23762
 descr:                         VPNsolutions Pty Ltd
 remarks:                       VPN provider
@@ -38,9 +44,14 @@ descr:                               VPN de Mexico, S.A. de C.V.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS32781
+descr:                         Defender cloud international LLC
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 aut-num:                       AS34962
 descr:                         Epik Network
-remarks:                       VPN provider
+remarks:                       Shady ISP and registrar, many prefixes announced refer to "anonymize" infrastructure
 is-anonymous-proxy:    yes
 
 aut-num:                       AS35029
@@ -60,12 +71,23 @@ descr:                              Asiamax Ltd. VPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS39770
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
 aut-num:                       AS43233
 descr:                         VPS 404 Ltd.
 remarks:                       VPN provider [high confidence, but not proofed] located in ES
 is-anonymous-proxy:    yes
 country:                       ES
 
+aut-num:                       AS44571
+descr:                         Netvillage Ltd.
+remarks:                       VPN provider [high confidence, but not proofed] located in or near RU
+is-anonymous-proxy:    yes
+country:                       RU
+
 aut-num:                       AS45792
 descr:                         Layer 3 VPN ASN
 remarks:                       VPN provider
@@ -76,6 +98,12 @@ descr:                               BeeVPN ApS
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS51381
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+country:                       RU
+
 aut-num:                       AS51446
 descr:                         SP Argaev Artem Sergeyevich / Foundation Respect My Privacy
 remarks:                       VPN provider [high confidence, but not proofed]
@@ -87,20 +115,31 @@ remarks:                   VPN provider (claims PA or BZ for some prefixes, but they are all hos
 is-anonymous-proxy:    yes
 country:                       CH
 
+aut-num:                       AS53559
+descr:                         KST Networks / ANONYMIZER
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 aut-num:                       AS54990
 descr:                         1337 Services LLC
 remarks:                       Tor relay and VPN provider, traces back to SE [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 country:                       SE
 
-aut-num:                       AS53559
-descr:                         KST Networks / ANONYMIZER
-remarks:                       VPN provider [high confidence, but not proofed]
+aut-num:                       AS55303
+descr:                         Eagle Sky Co., Lt[d ?]
+remarks:                       Autonomous System registered to offshore company, abuse contact is a freemail address, address says "0 Market Square, P.O. Box 364, Belize", seems to trace to some location in AP vicinity
 is-anonymous-proxy:    yes
+country:                       AP
 
-aut-num:                       AS55303
-descr:                         Eagle Sky Co., Lt
-remarks:                       Autonomous System registered to offshore company, abuse contact is a freemail address, address says "0 Market Square, P.O. Box 364, Belize"
+aut-num:                       AS56873
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
+aut-num:                       AS58110
+descr:                         IP Volume Ltd. / Epik
+remarks:                       Shady Autonomous System registered to letterbox company, possibly copycat operation of Epik registrar, many prefixes announced refer to "anonymize" infrastructure
 is-anonymous-proxy:    yes
 
 aut-num:                       AS58546
@@ -108,6 +147,16 @@ descr:                             Astrill VPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS60039
+descr:                         Geotelco Limited
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
+aut-num:                       AS60424
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
 aut-num:                       AS60729
 descr:                         Zwiebelfreunde e.V.
 remarks:                       Tor relay provider
@@ -118,6 +167,12 @@ descr:                             Quintex Alliance Consulting
 remarks:                       Tor relay provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS132825
+descr:                         Defense Australia Network
+remarks:                       ... seems to be loaded with proxies, and not located in AU after all (HK?)
+is-anonymous-proxy:    yes
+country:                       AP
+
 aut-num:                       AS135609
 descr:                         AMPR VPN
 remarks:                       VPN provider
@@ -128,10 +183,28 @@ descr:                            Anonymizer, Inc.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS205016
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
+aut-num:                       AS206819
+descr:                         ANSON NETWORK LIMITED
+remarks:                       Autonomous System registered to UK letterbox company, traces back through shady ISPs to TW
+is-anonymous-proxy:    yes
+country:                       TW
+
+aut-num:                       AS207688
+descr:                         DataHome S.A.
+remarks:                       VPN provider located in BR [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+country:                       BR
+
 aut-num:                       AS208294
-descr:                         Markus Koch
-remarks:                       Tor relay provider
+descr:                         CIA TRIAD SECURITY LLC
+remarks:                       Tor relay provider located in or near Berlin, DE
 is-anonymous-proxy:    yes
+country:                       DE
 
 aut-num:                       AS208323
 descr:                         Foundation for Applied Privacy
@@ -156,16 +229,53 @@ remarks:                  (Rogue) VPN provider
 is-anonymous-proxy:    yes
 country:                       EU
 
+aut-num:                       AS209854
+descr:                         Surfshark Ltd.
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 aut-num:                       AS210083
 descr:                         Privex Inc.
 remarks:                       VPN and Tor relay provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS201860
+descr:                         MyTelco Ltd
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
+aut-num:                       AS212052
+descr:                         BOET NOTIFY LTD.
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
+aut-num:                       AS212371
+descr:                         Evolve Proxies Ltd.
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
+aut-num:                       AS212786
+descr:                         Pooky L&W SDN BHD
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+country:                       GB
+
+aut-num:                       AS212824
+descr:                         WildProxies
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+country:                       NL
+
 aut-num:                       AS212987
 descr:                         NekoCloud Solutions Limited
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+aut-num:                       AS213224
+descr:                         Blue Black Squared Limited
+remarks:                       Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here
+is-anonymous-proxy:    yes
+
 aut-num:                       AS394087
 descr:                         Secure Internet LLC / PureVPN
 remarks:                       VPN provider
@@ -186,6 +296,11 @@ descr:                             Business VPN LLC
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+aut-num:                       AS398271
+descr:                         HardenedVPN[.]com LLC
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           2.57.171.0/24
 descr:                         VPN Consumer Network
 remarks:                       VPN provider
@@ -241,6 +356,16 @@ descr:                             Privax LTD / PRCDN Consumer Pool / AVAST s.r.o.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           5.182.34.0/24
+descr:                         Coca Proxies VOF
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           5.182.35.0/24
+descr:                         Coca Proxies VOF
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           5.249.160.0/24
 descr:                         VPNTunnel
 remarks:                       VPN provider
@@ -271,6 +396,11 @@ descr:                             CloudVPN Inc.
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           23.230.23.0/24
+descr:                         Colorberry VPN Services
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           23.239.176.0/22
 descr:                         CloudVPN Inc.
 remarks:                       VPN provider
@@ -366,6 +496,11 @@ descr:                             VPNHost SIA
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           45.14.80.0/22
+descr:                         ALTUS COMMUNICATIONS, INC.
+remarks:                       VPN and/or open proxy provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           45.41.132.0/24
 descr:                         VPN Consumer Network
 remarks:                       VPN provider
@@ -411,6 +546,11 @@ descr:                             Shtrauh Andrey
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+net:                           45.147.56.0/23
+descr:                         OLMERA GROUP LTD
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           45.151.115.0/24
 descr:                         ikoProxies [high confidence, but not proofed]
 remarks:                       VPN provider located in NL
@@ -424,7 +564,7 @@ is-anonymous-proxy: yes
 
 net:                           45.192.0.0/12
 descr:                         Cloud Innovation Ltd.
-remarks:                       hijacked AFRINIC IP chunk owned by an offshore company, routed to several dirty networks worldwide, cannot tell what is going on here
+remarks:                       hijacked (?) AFRINIC IP chunk owned by an offshore company, routed to several dirty networks worldwide, cannot tell what is going on here
 is-anonymous-proxy:    yes
 
 net:                           45.220.72.0/22
@@ -432,6 +572,16 @@ descr:                             Low budget VPN service
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           45.221.64.0/21
+descr:                         Secure Internet Limited
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           45.231.206.0/23
+descr:                         SENTRIGLOBAL LTD
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           46.36.200.0/22
 descr:                         IAPS Security Services, L.L.C.
 remarks:                       VPN provider
@@ -582,6 +732,30 @@ descr:                             icedoutproxies.com
 remarks:                       VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:    yes
 
+net:                           77.111.244.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located somewhere in EU
+is-anonymous-proxy:    yes
+country:                       EU
+
+net:                           77.111.245.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located in SG
+is-anonymous-proxy:    yes
+country:                       SG
+
+net:                           77.111.246.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located in US
+is-anonymous-proxy:    yes
+country:                       US
+
+net:                           77.111.247.0/24
+descr:                         HERN Labs AB
+remarks:                       VPN provider [high confidence, but not proofed] located in NL
+is-anonymous-proxy:    yes
+country:                       NL
+
 net:                           77.247.181.160/28
 descr:                         Zwiebelfreunde e.V.
 remarks:                       Tor relay provider
@@ -597,6 +771,12 @@ descr:                             Perfect Privacy LTD
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           85.92.100.0/22
+descr:                         LoadProxy, LLC
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+country:                       US
+
 net:                           85.203.23.0/24
 descr:                         VPN Consumer Network / falco-networks.com
 remarks:                       VPN provider
@@ -612,6 +792,16 @@ descr:                             VPN-Services / KDDI Corporation
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           85.203.53.0/24
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           85.208.112.0/22
+descr:                         VPNHOST SIA
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           88.81.248.0/24
 descr:                         TopNet ISP VPN
 remarks:                       VPN provider
@@ -632,6 +822,11 @@ descr:                             Privax LTD
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           92.50.201.0/24
+descr:                         "InsatCom-V, ISP: Leased lines, VPN (city Volgograd)"
+remarks:                       VPN provider (or something similar)
+is-anonymous-proxy:    yes
+
 net:                           92.118.39.0/24
 descr:                         CloudMine NET
 remarks:                       VPN provider [high confidence, but not proofed]
@@ -717,6 +912,11 @@ descr:                             VPN Consumer Network
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           104.165.145.0/24
+descr:                         Paceweb Proxy
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           104.238.32.0/24
 descr:                         VPN Consumer Network
 remarks:                       VPN provider
@@ -772,6 +972,11 @@ descr:                             PureVPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           107.186.38.0/24
+descr:                         Colorberry VPN services
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           109.70.100.0/24
 descr:                         Foundation for Applied Privacy
 remarks:                       Tor relay provider
@@ -827,6 +1032,11 @@ descr:                            GZ Systems Limited / PureVPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           142.252.111.0/24
+descr:                         Hurricane VPN
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           145.249.104.0/22
 descr:                         Liberty Services / IP Volume Inc.
 remarks:                       VPN provider [high confidence, but not proofed]
@@ -848,6 +1058,11 @@ descr:                            Cloud Innovation Ltd.
 remarks:                       hijacked AFRINIC IP chunk, owned by suspicous offshore company, scattered across dirty networks worldwide - not a safe place to go
 is-anonymous-proxy:    yes
 
+net:                           156.0.200.0/22
+descr:                         xTom Limited
+remarks:                       ... network operator thinks messing with countries and having an offshore company for it is funny :-/
+is-anonymous-proxy:    yes
+
 net:                           161.129.60.0/24
 descr:                         10VPN Hosting
 remarks:                       VPN provider
@@ -964,6 +1179,11 @@ descr:                            Access Now
 remarks:                       Tor relay provider
 is-anonymous-proxy:    yes
 
+net:                           176.119.142.0/24
+descr:                         Artykova Alina Biktimerovna / BroVPN
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           178.170.136.0/22
 descr:                         GZ Systems Limited / PureVPN
 remarks:                       VPN provider
@@ -1035,6 +1255,11 @@ remarks:                 (Rogue) VPN provider
 is-anonymous-proxy:    yes
 country:                       EU
 
+net:                           185.164.59.0/24
+descr:                         Buyproxies / Yuli Azarch
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           185.165.153.0/24
 descr:                         Privacy Matters VPN service / nVPN / David Craig
 remarks:                       (Rogue) VPN provider
@@ -1056,6 +1281,21 @@ descr:                           VPN Consumer Network Services
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           185.200.12.0/22
+descr:                         Wicked Technology Limited
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
+net:                           185.214.164.0/22
+descr:                         Tredinvest LLC / bestwest[.]host
+remarks:                       VPN provider or offering similar services [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
+net:                           185.215.113.0/24
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes
+
 net:                           185.220.100.0/22
 descr:                         Zwiebelfreunde e.V. / F3 Netze e.V. / The Calyx Institute
 remarks:                       Tor relay provider
@@ -1208,6 +1448,16 @@ descr:                           PureVPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           193.19.108.0/24
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           193.42.136.0/24
+descr:                         IntelligenceHosting
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           193.150.8.0/22
 descr:                         GZ Systems Limited / PureVPN
 remarks:                       VPN provider
@@ -1218,6 +1468,11 @@ descr:                           Anonymouse / Anonymous S.A.
 remarks:                       VPN and open proxy provider
 is-anonymous-proxy:    yes
 
+net:                           193.218.190.0/24
+descr:                         Private Internet Hosting LTD
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           194.5.96.0/22
 descr:                         Angelo Kreikamp trading as Forhosting / Privacy Online / Danilenko, Artyom / ...
 remarks:                       (Rogue) VPN provider
@@ -1233,6 +1488,21 @@ descr:                           NordVPN
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           194.87.207.0/24
+descr:                         Lynx Proxies Ltd.
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           194.110.84.0/24
+descr:                         NordVPN
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
+net:                           194.242.2.0/24
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           195.138.249.0/24
 descr:                         Perfect Privacy LTD
 remarks:                       VPN provider
@@ -1263,6 +1533,11 @@ descr:                           VPNClientPublics
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           198.44.224.0/19
+descr:                         Defender cloud international LLC
+remarks:                       VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:    yes
+
 net:                           199.249.223.0/24
 descr:                         Quintex Alliance Consulting
 remarks:                       Tor relay provider
@@ -1303,6 +1578,11 @@ descr:                           VPN Consumer Network Services
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           205.164.4.0/24
+descr:                         OpenVPN Technologies, Inc.
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           205.185.193.0/24
 descr:                         SecuredConnectivity
 remarks:                       VPN provider
@@ -1328,6 +1608,11 @@ descr:                           SecuredConnectivity
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           206.123.128.0/19
+descr:                         Secure Internet LLC
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           209.107.176.0/20
 descr:                         Google VPN
 remarks:                       VPN provider
@@ -1518,6 +1803,11 @@ descr:                           ProtonVPN AG
 remarks:                       VPN provider
 is-anonymous-proxy:    yes
 
+net:                           2a07:e340::/32
+descr:                         Mullvad VPN AB
+remarks:                       VPN provider
+is-anonymous-proxy:    yes
+
 net:                           2a09:50c0::/29
 descr:                         VPNHost SIA
 remarks:                       VPN provider
@@ -1562,3 +1852,8 @@ net:                              2c0f:f930::/32
 descr:                         Cyberdyne S.A.
 remarks:                       Tor relay provider
 is-anonymous-proxy:    yes
+
+net:                           2a10:9700::/29
+descr:                         1337TEAM LIMITED / eliteteam[.]to
+remarks:                       Owned by an offshore letterbox company, suspected rogue ISP
+is-anonymous-proxy:    yes