From b99c3bb8c4381dd41f24a9bfbfdf9adfb1b2e6ff Mon Sep 17 00:00:00 2001 From: =?utf8?q?Peter=20M=C3=BCller?= Date: Sat, 18 Jun 2022 16:27:47 +0000 Subject: [PATCH] override-{other,xd}: Regular batch of various overrides MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Peter Müller --- overrides/override-other.txt | 30 +++++++++++++++++++++++++----- overrides/override-xd.txt | 24 +++++++++++++++++++++--- 2 files changed, 46 insertions(+), 8 deletions(-) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 50621a8..94ba6f7 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -258,6 +258,11 @@ descr: EGIHosting remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS20649 +descr: FS Veri Merkezi Internet Teknolojileri Limited Sirketi +remarks: ISP located in TR, many RIR data for announced prefixes contain garbage +country: TR + aut-num: AS21100 descr: ITL LLC remarks: ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data @@ -603,6 +608,11 @@ descr: GigaNet Internet Service Provider Co remarks: ISP located in HU, but some RIR data for announced prefixes contain garbage country: HU +aut-num: AS42910 +descr: PremierDC Veri Merkezi Anonim Sirketi +remarks: ISP located in TR, but RIR data for announced prefixes contain garbage +country: TR + aut-num: AS42960 descr: VH Global Limited remarks: tampers with RIR data, traces back to AP area @@ -1113,6 +1123,11 @@ descr: SWISS GLOBAL SERVICES S.A.S. remarks: ... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them country: CH +aut-num: AS64267 +descr: Spirous LLC +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS131685 descr: Sun Network (Hong Kong) Limited remarks: ISP and/or IP hijacker located somewhere in AP @@ -1483,11 +1498,6 @@ descr: Rishikeshan Lavakumar remarks: Network operator thinks messing with RIR data is funny... :-/ country: EU -aut-num: AS204353 -descr: Global Offshore Limited -remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted -country: EU - aut-num: AS205026 descr: Hauer Hosting Services Limited remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage @@ -1678,6 +1688,11 @@ descr: JMT Paso Limited remarks: ISP located in NL, but RIR data for announced prefixes contain garbage country: NL +aut-num: AS211975 +descr: Sascha Wohlert +remarks: all prefixes announced by this AS appear to trace back to DE +country: DE + aut-num: AS211992 descr: WFD SERVICE LTD remarks: ISP located in NL, but RIR data for announced prefixes contain garbage @@ -2158,6 +2173,11 @@ descr: Psychz Networks remarks: Country code missing due to ARIN DB situation country: ES +net: 176.106.136.0/21 +descr: OOO "MediaSeti" +remarks: recently changed country code from RU to DE - probably not for good intentions +country: RU + net: 178.239.20.0/24 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd. remarks: fake location (BA), traces back to RO diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index 85b506b..def8a1e 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -52,7 +52,7 @@ drop: yes aut-num: AS39770 descr: 1337TEAM LIMITED / eliteteam[.]to -remarks: Owned by an offshore letterbox company, suspected rogue ISP +remarks: Bulletproof ISP drop: yes aut-num: AS41564 @@ -99,7 +99,7 @@ drop: yes aut-num: AS51381 descr: 1337TEAM LIMITED / eliteteam[.]to -remarks: Owned by an offshore letterbox company, suspected rogue ISP +remarks: Bulletproof ISP country: RU drop: yes @@ -141,7 +141,7 @@ drop: yes aut-num: AS56873 descr: 1337TEAM LIMITED / eliteteam[.]to -remarks: Owned by an offshore letterbox company, suspected rogue ISP +remarks: Bulletproof ISP drop: yes aut-num: AS57523 @@ -348,6 +348,12 @@ remarks: Bulletproof ISP in an extremely dirty neighborhood full of IP hijackers country: RU drop: yes +aut-num: AS204353 +descr: Global Offshore Limited +remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted +country: EU +drop: yes + aut-num: AS204428 descr: SS-Net remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data @@ -396,6 +402,12 @@ remarks: Shary Serverion customer and IP hijacker in NL, many RIR data for annou country: NL drop: yes +aut-num: AS210644 +descr: AEZA GROUP Ltd +remarks: In all networks currently propagated by this AS, one is unable to find anything that has even a patina of legitimacy +country: RU +drop: yes + aut-num: AS210848 descr: Telkom Internet LTD remarks: Rogue ISP (linked to AS202425) located in NL and RO @@ -438,6 +450,12 @@ remarks: Rogue ISP (linked to AS57717) located in NL country: NL drop: yes +aut-num: AS213254 +descr: OOO RAIT TELECOM +remarks: Bulletproof connectivity procurer for AS51381 +country: RU +drop: yes + aut-num: AS328543 descr: Sun Network Company Limited remarks: IP hijacker, traces back to AP region -- 2.39.2