override-{a3,other,xd}: Regular batch of various overrides

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index f5226dbaa06784738e40bac08e5ec4e06ea00f8b..2d607c8a6dbf9724859b8ca78e657f6002fea6c4 100644 (file)
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -263,6 +263,11 @@ descr:             TOONBOX STUDIO LTD
 remarks:       Generic anycast network [high confidence, but not proofed]
 is-anycast:    yes
 
+aut-num:       AS61227
+descr:         Nexthop AS
+remarks:       Generic anycast network
+is-anycast:    yes
+
 aut-num:       AS62766
 descr:         SJB Communications
 remarks:       Generic anycast network
@@ -298,6 +303,11 @@ descr:             SECURITYDAM LTD
 remarks:       Generic anycast network [high confidence, but not proofed]
 is-anycast:    yes
 
+aut-num:       AS199251
+descr:         MnogoByte LLC
+remarks:       Generic anycast network
+is-anycast:    yes
+
 aut-num:       AS199365
 descr:         ProstoDNS
 remarks:       Public anycast DNS resolver network

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index f99aba56b2e150b27f9e89ba263fbab531370bc7..b0cef90bf80c021dad5a96f0062cbf986d2921d4 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -139,6 +139,16 @@ descr:             Leaseweb USA, Inc.
 remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
 country:       US
 
+aut-num:       AS7029
+descr:         Windstream Communications LLC
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
+aut-num:       AS7545
+descr:         TPG Telecom Limited
+remarks:       ISP located in AU, but some RIR data for announced prefixes contain garbage
+country:       AU
+
 aut-num:       AS8283
 descr:         Netwerkvereniging Coloclue
 remarks:       ISP located in NL, but some RIR data for announced prefixes contain garbage
@@ -184,6 +194,11 @@ descr:             GHOSTnet GmbH
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
 country:       DE
 
+aut-num:       AS12637
+descr:         SEEWEB s.r.l.
+remarks:       ISP located in IT, but some RIR data for announced prefixes contain garbage
+country:       IT
+
 aut-num:       AS12679
 descr:         Sokolov Dmitry Nikolaevich
 remarks:       ISP located in RU, but many RIR data for announced prefixes contain garbage
@@ -353,6 +368,11 @@ descr:             Leaseweb Deutschland GmbH
 remarks:       ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage
 country:       DE
 
+aut-num:       AS28776
+descr:         ISV TECH LIMITED
+remarks:       ISP located in UA, but some RIR data for announced prefixes contain garbage (BZ)
+country:       UA
+
 aut-num:       AS29119
 descr:         AireNetworks
 remarks:       ISP located in ES, but some RIR data for announced prefixes contain garbage (BZ)
@@ -815,7 +835,7 @@ country:    EU
 
 aut-num:       AS49870
 descr:         Alsycon BV
-remarks:       ISP located in NL, but some RIR data for announced prefixes contain garbage
+remarks:       Shady ISP located in NL, but some RIR data for announced prefixes contain garbage
 country:       NL
 
 aut-num:       AS49921
@@ -1217,6 +1237,11 @@ descr:           Today Communication Co.,Ltd
 remarks:       ISP located in KH, some RIR data for announced prefixes contain garbage
 country:       KH
 
+aut-num:       AS135607
+descr:         Infinivan Incorporated
+remarks:       ISP located in PH, some RIR data for announced prefixes contain garbage
+country:       PH
+
 aut-num:       AS136167
 descr:         China Telecom (Macau) Company Limited
 remarks:       located in MO, yet some prefixes show CN or HK instead
@@ -1402,6 +1427,11 @@ descr:           netcup GmbH
 remarks:       ISP located in DE, some RIR data for announced prefixes contain garbage
 country:       DE
 
+Aaut-num:      AS197706
+descr:         Keminet SHPK
+remarks:       ISP located in AL, some RIR data for announced prefixes contain garbage
+country:       AL
+
 aut-num:       AS200019
 descr:         ALEXHOST SRL
 remarks:       ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
@@ -1618,7 +1648,7 @@ remarks:  claims CY for announced prefixes, but they are all hosted in NL
 country:       NL
 
 aut-num:       AS209371
-descr:         Cenk Aksit
+descr:         Enes Koken
 remarks:       shady ISP located in TR, but RIR data for announced prefixes contain garbage
 country:       TR
 
@@ -1692,6 +1722,11 @@ descr:           JMT Paso Limited
 remarks:       ISP located in NL, but RIR data for announced prefixes contain garbage
 country:       NL
 
+aut-num:       AS211936
+descr:         Rackdog, LLC
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS211975
 descr:         Sascha Wohlert
 remarks:       all prefixes announced by this AS appear to trace back to DE
@@ -1882,6 +1917,11 @@ descr:           PEG TECH INC
 remarks:       ISP and/or IP hijacker located in HK, tampers with RIR data
 country:       HK
 
+aut-num:       AS399045
+descr:         DediOutlet, LLC
+remarks:       ISP located in US, but some RIR data for announced prefixes contain garbage
+country:       US
+
 aut-num:       AS399471
 descr:         Serverion LLC
 remarks:       ISP located in NL, some RIR data contain garbage

diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt
index 1a4480b79cf7d370f175416950ec71e11eedf5c3..4c3312a7f83c90574a3bfda0983ac47a3b56a2e5 100644 (file)
--- a/overrides/override-xd.txt
+++ b/overrides/override-xd.txt
@@ -61,6 +61,12 @@ remarks:     shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in E
 country:       EU
 drop:          yes
 
+aut-num:       AS41909
+descr:         PINVDS OU
+remarks:       all cybercrime hosting, all the time
+country:       RU
+drop:          yes
+
 aut-num:       AS43092
 descr:         Kirin Communication Limited
 remarks:       Hijacks IP space and tampers with RIR data, traces back to JP
@@ -97,6 +103,11 @@ remarks:    Rogue ISP located in CH, but some RIR data for announced prefixes conta
 country:       CH
 drop:          yes
 
+aut-num:       AS49943
+descr:         IT Resheniya LLC
+remarks:       Rogue ISP
+drop:          yes
+
 aut-num:       AS51381
 descr:         1337TEAM LIMITED / eliteteam[.]to
 remarks:       Bulletproof ISP
@@ -185,6 +196,11 @@ remarks:   bulletproof ISP (related to AS57717) located in NL
 country:       NL
 drop:          yes
 
+aut-num:       AS59940
+descr:         Kanzas LLC
+remarks:       Rogue ISP
+drop:          yes
+
 aut-num:       AS60424
 descr:         1337TEAM LIMITED / eliteteam[.]to
 remarks:       Owned by an offshore letterbox company, suspected rogue ISP
@@ -470,7 +486,8 @@ drop:               yes
 
 aut-num:       AS393889
 descr:         EightJoy Network LLC
-remarks:       Most likely hijacked AS
+remarks:       Most likely hijacked or criminal AS
+country:       HK
 drop:          yes
 
 aut-num:       AS398478
@@ -497,6 +514,16 @@ remarks:   Shady ISP located in US, solely announcing "Cloud Innovation Ltd." spac
 country:       US
 drop:          yes
 
+aut-num:       AS400506
+descr:         Black Apple
+remarks:       Solely announces hijacked prefixes, no legitimate infrastructure
+drop:          yes
+
+net:           46.161.27.0/24
+descr:         MEGA HOLDINGS LIMITED
+remarks:       Based on domains ending up there, this network is entirely malicious
+drop:          yes
+
 net:           185.196.220.0/24
 descr:         Makut Investments
 remarks:       Long-running brute-force attack network