From: Peter Müller Date: Fri, 29 Apr 2022 21:08:12 +0000 (+0000) Subject: override-{a1,other,xd}: Regular batch of various overrides X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=14d2d4c8bbcffacc248ed524f9159ede223426e6;p=location%2Flocation-database.git override-{a1,other,xd}: Regular batch of various overrides Signed-off-by: Peter Müller --- diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 96bfe45..247597a 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -40,6 +40,11 @@ remarks: VPN provider [high confidence, but not proofed] located in RU is-anonymous-proxy: yes country: RU +aut-num: AS22363 +descr: Powerhouse Management, Inc. +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS23762 descr: VPNsolutions Pty Ltd remarks: VPN provider diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 925a661..ad968f1 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -199,6 +199,11 @@ descr: Beamspeed LLC remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS15440 +descr: Baltneta +remarks: ISP located in LT, but some RIR data for announced prefixes contain garbage +country: LT + aut-num: AS15611 descr: Iranian Research Organization for Science & Technology remarks: ISP located in IR, but some RIR data for announced prefixes contain garbage @@ -393,6 +398,11 @@ descr: PP Aleksandr Tatarets remarks: ... hosted out of DE country: DE +aut-num: AS34953 +descr: RelAix Networks GmbH +remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage +country: DE + aut-num: AS34985 descr: Kirin Communication Limited remarks: ISP located in JP, but some RIR data for announced prefixes contain garbage @@ -438,6 +448,11 @@ descr: Silverstar Invest Limited remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS35699 +descr: Adamo Telecom Iberia S.A. +remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage +country: ES + aut-num: AS35913 descr: DediPath LLC remarks: ISP located in US, but some RIR data for announced prefixes contain garbage @@ -633,6 +648,11 @@ descr: Vocom International Telecommunications AP Area remarks: ISP located in AP area, some RIR data for announced prefixes contain garbage country: AP +aut-num: AS45382 +descr: EHOSTIDC +remarks: ISP located in KR, some RIR data for announced prefixes contain garbage +country: KR + aut-num: AS45671 descr: Servers Australia Pty. Ltd. remarks: ISP located in AU, but some RIR data for announced prefixes contain garbage @@ -658,6 +678,11 @@ descr: Spectre Operations BV remarks: ISP located in NL, but some RIR data for suballocations of announced prefixes contain garbage country: NL +aut-num: AS47843 +descr: TOSE'EH ERTEBATAT NOVIN ARIA CO PJS +remarks: ISP located in IR, but some RIR data for announced prefixes contain garbage +country: IR + aut-num: AS48024 descr: NEROCLOUD Ltd. remarks: RIR data faked/incorrect, cannot trust this network @@ -708,6 +733,11 @@ descr: Selectel remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS49581 +descr: Ferdinand Zink trading as Tube-Hosting +remarks: hosted at the Skylink DC in NL +country: NL + aut-num: AS49612 descr: DDoS Guard Ltd. / Cognitive Cloud LLP remarks: another shady customer or branch of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU @@ -828,6 +858,11 @@ descr: Cloud 9 Ltd. remarks: ISP located in GE, but many RIR data for announced prefixes contain garbage country: GE +aut-num: AS57844 +descr: SPDNet Telekomunikasyon Hizmetleri Bilgi Teknolojileri Taahhut Sanayi Ve Ticaret A.S. +remarks: ISP located in TR, but some RIR data for announced prefixes contain garbage +country: TR + aut-num: AS58061 descr: Scalaxy B.V. remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage @@ -863,6 +898,11 @@ descr: INNETRA PC remarks: ... traceroutes dead-end in NL country: NL +aut-num: AS58272 +descr: LeaderTelecom B.V. +remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage +country: NL + aut-num: AS58879 descr: Shanghai Anchang Network Security Technology Co.,Ltd. remarks: ... network infrastructure is believed to be located in HK, has some links to ASLINE hijacking gang @@ -1208,6 +1248,11 @@ descr: Full Time Hosting remarks: ISP located in DE, tampers with RIR data country: DE +aut-num: AS140947 +descr: SnTHostings +remarks: ISP located in IN, but some RIR data for announced prefixes contain garbage +country: IN + aut-num: AS141677 descr: Nathosts Limited remarks: ... located in HK? @@ -1303,6 +1348,11 @@ descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS remarks: fake offshore location (SC), traces back to RU country: RU +aut-num: AS202505 +descr: NETBUDUR TELEKOMUNIKASYON LIMITED SIRKETI +remarks: ISP located in TR, but some RIR data for announced prefixes contain garbage +country: TR + aut-num: AS202920 descr: DataClub S.A. remarks: another shady customer of "DDoS Guard Ltd." @@ -1318,6 +1368,11 @@ descr: MismeNet Telecomunicaciones remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage country: ES +aut-num: AS203989 +descr: Bluephone SL +remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage +country: ES + aut-num: AS204136 descr: Kevin Holly trading as Silent Ghost e.U. remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/ @@ -1483,6 +1538,11 @@ descr: Internet Technologies LLC remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS210644 +descr: Des Capital B.V. +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS210654 descr: Des Capital B.V. remarks: Shady ISP located in NL, but RIR data for announced prefixes contain garbage @@ -1568,16 +1628,21 @@ descr: Alfa Web Solutions Ltd. remarks: shady ISP located in NL country: NL -aut-num: AS213373 -descr: IP Connect Inc. -remarks: fake offshore location (SC), traces back to NL -country: NL - aut-num: AS213296 descr: SIA "Singularity Telecom" remarks: Shady customer of AS31732 (Parsun Network Solutions Pty. Ltd.) located in AU, RIR data for announced prefixes contain garbage country: AU +aut-num: AS213371 +descr: ABC Consultancy +remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage +country: NL + +aut-num: AS213373 +descr: IP Connect Inc. +remarks: fake offshore location (SC), traces back to NL +country: NL + aut-num: AS262287 descr: Maxihost LTDA remarks: Many if not all prefixes announced by this AS trace back to BR, yet their RIR data contain mostly garbage. Also, Maxihost LTDA does not seem to be able to prevent cyber criminals from abusing it's services - tomorrows bulletproof ISP? @@ -1653,6 +1718,11 @@ descr: Maxihost LLC remarks: Many if not all prefixes announced by this AS trace back to US, yet their RIR data contain mostly garbage. Also, Maxihost LLC does not seem to be able to prevent cyber criminals from abusing it's services - tomorrows bulletproof ISP? country: US +aut-num: AS396073 +descr: Majestic Hosting Solutions, LLC +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS397423 descr: Tier.Net Technologies LLC remarks: ISP located in US, but some RIR data for announced prefixes contain garbage @@ -1778,6 +1848,11 @@ descr: Natalia Sokolova remarks: appears to tamper with RIR data, location pinning to RU for good measure country: RU +net: 45.154.205.0/24 +descr: K4X OU +remarks: traceroutes dead-end somewhere in NG +country: NG + net: 45.155.121.0/24 descr: Itace International Limited remarks: claims to be located in HK, but traces back to RO @@ -1923,6 +1998,11 @@ descr: Manx Telecom Limited remarks: Suballocation of Cogent, country code missing due to ARIN DB situation (https://community.ipfire.org/t/location-database-update-error-country-code/6451/) country: GB +net: 154.6.130.0/24 +descr: PSINet, Inc. +remarks: Suballocation of Cogent, country code missing due to ARIN DB situation +country: RO + net: 156.0.200.0/22 descr: xTom Limited remarks: fake offshore locations (AQ / PN / SS), traces back to US @@ -2088,6 +2168,11 @@ descr: NewMedia Express on behalf of Datacamp remarks: traces back to JP country: JP +net: 2404:f4c0:fd04::/48 +descr: LSHIY Group +remarks: Quirk in RIR data, GR != DE +country: DE + net: 2605:6400:3::/48 descr: BuyVM / FranTech remarks: Accurate country code missing due to ARIN DB situation, see also: #12774 diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index 062d551..7164673 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -256,7 +256,8 @@ drop: yes aut-num: AS140107 descr: CITIS CLOUD GROUP LIMITED -remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, location unknown (AP? HK? US?) +remarks: part of the "Asline" IP hijacking gang, tampers with RIR data +country: AP drop: yes aut-num: AS141159 @@ -438,6 +439,12 @@ remarks: ISP located in KR, tampers with RIR data country: KR drop: yes +aut-num: AS399674 +descr: INTERNET HOSTSPACE GLOBAL INC +remarks: Shady ISP located in US, solely announcing "Cloud Innovation Ltd." space - no one will miss it +country: US +drop: yes + net: 154.73.248.0/22 descr: Wirels Connect (PTY) Ltd remarks: Most likely stolen AfriNIC IPv4 space