overrides-xd: Add ASNs of Dutch bulletproof ISP conglomerate "Ecatel"

See: https://www.nrc.nl/nieuws/2021/04/02/the-cesspool-of-the-internet-is-to-be-found-in-a-village-in-north-holland-a4038369

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>

diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 6d2aa52b1e0b30e912533071615c5b0c36975b9a..7d765346381aa0ddaf20d552635d9feafc6fa211 100644 (file)
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -478,11 +478,6 @@ descr:             Spectre Operations BV
 remarks:       ISP located in NL, but some RIR data for suballocations of announced prefixes contain garbage
 country:       NL
 
-aut-num:       AS48090
-descr:         PPTECHNOLOGY LIMITED
-remarks:       bulletproof ISP (related to AS204655) located in NL
-country:       NL
-
 aut-num:       AS48158
 descr:         DigitalOne AG
 remarks:       Services appear to be hosted in RU, RIR data faked/incorrect
@@ -593,11 +588,6 @@ descr:             vServer.site LTD
 remarks:       ISP located in DE, but some RIR data for announced prefixes contain garbage
 country:       DE
 
-aut-num:       AS56611
-descr:         REBA Communications BV
-remarks:       bulletproof ISP (related to AS202425) located in NL
-country:       NL
-
 aut-num:       AS56851
 descr:         PE Skurykhin Mukola Volodumurovuch
 remarks:       tampers with RIR data, traces back to UA
@@ -608,11 +598,6 @@ descr:             Hostkey B.V.
 remarks:       ISP located in NL, but some RIR data for announced prefixes contain garbage
 country:       NL
 
-aut-num:       AS57717
-descr:         FiberXpress BV
-remarks:       bulletproof ISP (related to AS202425) located in NL
-country:       NL
-
 aut-num:       AS57756
 descr:         Telefonica LLC
 remarks:       ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -728,21 +713,11 @@ descr:            Vivo Trade L.P.
 remarks:       another shady customer of "DDoS Guard Ltd."
 country:       RU
 
-aut-num:       AS62068
-descr:         SpectraIP B.V.
-remarks:       bulletproof ISP (linked to AS202425 et al.) located in NL
-country:       NL
-
 aut-num:       AS62079
 descr:         Ibernap Management S.L.
 remarks:       traces back to various locations in US
 country:       US
 
-aut-num:       AS62355
-descr:         Network Dedicated SAS
-remarks:       bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
-country:       NL
-
 aut-num:       AS62468
 descr:         VpsQuan L.L.C.
 remarks:       claims to be located in US, but traces to HK
@@ -768,11 +743,6 @@ descr:             SWISS GLOBAL SERVICES S.A.S.
 remarks:       ... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them
 country:       CH
 
-aut-num:       AS64425
-descr:         SKB Enterprise B.V.
-remarks:       bulletproof ISP (linked to AS202425 et al.) located in NL
-country:       NL
-
 aut-num:       AS64437
 descr:         NForce Entertainment BV
 remarks:       currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL
@@ -1008,21 +978,11 @@ descr:           4Media Ltd.
 remarks:       another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
 country:       BG
 
-aut-num:       AS202425
-descr:         IP Volume Inc.
-remarks:       bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
-country:       NL
-
 aut-num:       AS202492
 descr:         SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
 remarks:       fake offshore location (SC), traces back to RU
 country:       RU
 
-aut-num:       AS202769
-descr:         Cooperative Investments LLC
-remarks:       bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
-country:       NL
-
 aut-num:       AS202920
 descr:         DataClub S.A.
 remarks:       another shady customer of "DDoS Guard Ltd."
@@ -1053,11 +1013,6 @@ descr:           Global Offshore Limited
 remarks:       part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
 country:       EU
 
-aut-num:       AS204655
-descr:         Novogara Ltd.
-remarks:       bulletproof ISP (strongly linked to AS202425) located in NL
-country:       NL
-
 aut-num:       AS205026
 descr:         Hauer Hosting Services Limited
 remarks:       ISP located in ES, but some RIR data for announced prefixes contain garbage
@@ -1293,11 +1248,6 @@ descr:           Sun Network Company Limited
 remarks:       IP hijacker, traces back to AP region
 country:       AP
 
-aut-num:       AS328671
-descr:         Datapacket Maroc SARL
-remarks:       bulletproof ISP (strongly linked to AS202425) located in NL
-country:       NL
-
 aut-num:       AS328703
 descr:         Seven Network Inc.
 remarks:       traces back to ZA

diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt
index 8318b49710befff5ac02c36ebb9876853b9c2fc5..7df61888db410b64410cc3db46916f8b356e045e 100644 (file)
--- a/overrides/override-xd.txt
+++ b/overrides/override-xd.txt
@@ -25,3 +25,63 @@
 #
 # Please keep this file sorted.
 #
+
+aut-num:       AS48090
+descr:         PPTECHNOLOGY LIMITED
+remarks:       bulletproof ISP (related to AS204655) located in NL
+country:       NL
+drop:          yes
+
+aut-num:       AS56611
+descr:         REBA Communications BV
+remarks:       bulletproof ISP (related to AS202425) located in NL
+country:       NL
+drop:          yes
+
+aut-num:       AS57717
+descr:         FiberXpress BV
+remarks:       bulletproof ISP (related to AS202425) located in NL
+country:       NL
+drop:          yes
+
+aut-num:       AS62068
+descr:         SpectraIP B.V.
+remarks:       bulletproof ISP (linked to AS202425 et al.) located in NL
+country:       NL
+drop:          yes
+
+aut-num:       AS62355
+descr:         Network Dedicated SAS
+remarks:       bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
+country:       NL
+drop:          yes
+
+aut-num:       AS64425
+descr:         SKB Enterprise B.V.
+remarks:       bulletproof ISP (linked to AS202425 et al.) located in NL
+country:       NL
+drop:          yes
+
+aut-num:       AS202425
+descr:         IP Volume Inc.
+remarks:       bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
+country:       NL
+drop:          yes
+
+aut-num:       AS202769
+descr:         Cooperative Investments LLC
+remarks:       bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
+country:       NL
+drop:          yes
+
+aut-num:       AS204655
+descr:         Novogara Ltd.
+remarks:       bulletproof ISP (strongly linked to AS202425) located in NL
+country:       NL
+drop:          yes
+
+aut-num:       AS328671
+descr:         Datapacket Maroc SARL
+remarks:       bulletproof ISP (strongly linked to AS202425) located in NL
+country:       NL
+drop:          yes