override-other: mitigate tampered RIR data from customers of Tamatiya EOOD / 4Vendeta
AS50360 has an impressive history on providing IP transit services to
shady Autonomous Systems, and continues to do so. While the amount of
prefixes with tampered RIR data announced by AS50360 itself has ceased
within the past years, it's customers continue to propagate IP space
with faked country information.
We cannot trust these networks, which is why we pin them on BG
altogether, as they are all hosted in Sofia, Bulgaria:
1. X
2. X
3. AS9002 ae5-10.RT.TLP.SOF.BG.retn.net (87.245.232.164) <= RETN infrastructure in Telehouse Sofia, BG
4. AS9002 GW-Tamatiya.retn.net (87.245.240.159) <= Gateway to Tamatiya / 4Vendeta
5. AS50360 ip-25-22.4vendeta.com (195.230.25.22) <= And BOOM goes the dynamite...
6. (waiting for reply)
1. X
2. X
3. AS??? ge0-3.ams.OTEglobe.net (80.249.208.179)
4. AS??? 62.75.27.82 (62.75.27.82)
5. AS12713 62.75.3.2 (62.75.3.2)
6. AS57344 185.148.160.77 (185.148.160.77)
7. AS50360 ip-25-22.4vendeta.com (195.230.25.22)
8. (waiting for reply)
Signed-off-by: Peter Müller <peter.mueller@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>