From: Peter Müller Date: Sat, 9 Apr 2022 16:32:38 +0000 (+0000) Subject: override-{a3,other,xd}: Regular batch of various overrides X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9013e8501d29513b0790c8e298c2a0af6bb5e8af;p=location%2Flocation-database.git override-{a3,other,xd}: Regular batch of various overrides Signed-off-by: Peter Müller --- diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 64bb1f1..87bd07e 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -345,7 +345,7 @@ is-anycast: yes aut-num: AS209813 descr: Fast Content Delivery Ltd. -remarks: Generic anycast network +remarks: Shady CDN with a lot of abusive activity going on there, anycast network is-anycast: yes aut-num: AS210004 diff --git a/overrides/override-other.txt b/overrides/override-other.txt index f89a2f0..e4bf3cb 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -218,6 +218,11 @@ aut-num: AS18185 name: Northern Taiwan Community University remarks: has no sane AS name set in APNIC DB +aut-num: AS18450 +descr: WebNX, Inc. +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS18530 descr: Isomedia, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage @@ -338,6 +343,11 @@ descr: Parsun Network Solutions Pty. Ltd. remarks: Shady ISP located in AU, but some RIR data for announced prefixes contain garbage country: AU +aut-num: AS31400 +descr: diva-e Datacenters GmbH +remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage +country: DE + aut-num: AS32489 descr: Amanah Tech Inc. remarks: ISP located in CA, but some RIR data for announced prefixes contain garbage @@ -423,6 +433,11 @@ descr: DediPath LLC remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS35916 +descr: Multacom Corporation +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS37155 descr: NetOne Telecomunicacoes (defunct) remarks: spamming bogon located in or near Luanda, AO - formerly allocated to NetOne Telecomunicacoes @@ -558,6 +573,11 @@ descr: NbIServ remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage country: DE +aut-num: AS44066 +descr: diva-e Datacenters GmbH +remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage +country: DE + aut-num: AS44477 descr: IP Oleinichenko Denis remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage @@ -603,6 +623,11 @@ descr: Network and Security Solutions Limited remarks: ISP located in HK, but some RIR data for announced prefixes contain garbage country: HK +aut-num: AS46841 +descr: Fork Networking, LLC +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS47105 descr: Dreamtorrent Corp remarks: traceroutes dead-end somewhere in or near RU @@ -633,6 +658,11 @@ descr: GAIJIN NETWORK LTD remarks: fake offshore location (CY), traces back to RU country: RU +aut-num: AS49063 +descr: Dataline Ltd +remarks: ISP located in RU, but some RIR data for suballocations of announced prefixes contain garbage +country: RU + aut-num: AS49392 descr: LLC Baxet remarks: tampers with RIR data, traces back to RU @@ -678,6 +708,11 @@ descr: Tamatiya EOOD / 4Vendeta remarks: Questionable ISP located in BG, clients massively tamper with RIR data country: BG +aut-num: AS50386 +descr: LLC "Communication Industrial complex" +remarks: ISP located in KZ, but at least one /24 announced by it thinks it is located in AT +country: KZ + aut-num: AS50673 descr: Serverius Holding B.V. remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage @@ -708,6 +743,11 @@ descr: WhiteHat Inc. remarks: tampers with RIR data country: EU +aut-num: AS52423 +descr: Data Miners S.A. ( Racknation.cr ) +remarks: ISP located in CR, but some RIR data for announced prefixes contain garbage +country: CR + aut-num: AS55330 descr: AFGHANTELECOM GOVERNMENT COMMUNICATION NETWORK remarks: For some reason, some "Airbus Defence and Space AS" prefixes are announced by this one... @@ -978,16 +1018,16 @@ descr: Sky Digital Co., Ltd. remarks: IP hijacker located in TW, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data country: TW -aut-num: AS135097 -descr: LUOGELANG (FRANCE) LIMITED -remarks: Shady ISP located in HK, RIR data for announced prefixes contain garbage -country: HK - aut-num: AS136167 descr: China Telecom (Macau) Company Limited remarks: located in MO, yet some prefixes show CN or HK instead country: MO +aut-num: AS136255 +descr: Telecom International Myanmar Co., Ltd +remarks: ISP located in MY, some RIR data for announced prefixes contain garbage +country: MY + aut-num: AS136274 descr: Cloud Servers Pvt Ltd remarks: ISP located in NL, all RIR data for announced prefixes contain garbage @@ -1243,6 +1283,11 @@ descr: LEASEWEB UK LIMITED remarks: ISP located in London, GB, but many RIR data for announced prefixes contain garbage country: GB +aut-num: AS205675 +descr: Hybrid LLC +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS206397 descr: Genius Guard / Genius Security Ltd. remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU @@ -1403,6 +1448,11 @@ descr: PAYWISE HOLDING Sp. z.o.o. remarks: ISP located in NL, but RIR data for announced prefixes contain garbage country: NL +aut-num: AS211585 +descr: Canopus It Solutions Pvt Ltd +remarks: ISP located in TR, _all_ RIR data for announced prefixes contain garbage, tempted to add a "drop" flag as well :-/ +country: TR + aut-num: AS211839 descr: JMT Paso Limited remarks: ISP located in NL, but RIR data for announced prefixes contain garbage @@ -1488,6 +1538,11 @@ descr: WIID Telecomunicai¿½i¿½es do Brasil remarks: ... traces back to NL country: NL +aut-num: AS264763 +descr: RACKNATION S.A. +remarks: ISP located in CR, but this AS appears to be used in US for DDoS mitigation +country: US + aut-num: AS267784 descr: Flyservers S.A. remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage @@ -2023,6 +2078,11 @@ descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from GB country: GB +net: 2a05:3484:272::/48 +descr: ONER INVESTMENTS Ltd +remarks: allocated to PL, but actually announced from RU +country: RU + net: 2a05:9f06::/31 descr: Sibyl System LTD remarks: RIR data contain garbage diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index ef09b2c..c8ea895 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -44,6 +44,12 @@ remarks: IP hijacker located in US, massively tampers with RIR data country: US drop: yes +aut-num: AS24567 +descr: QT Inc. +remarks: IP hijacker operating out of AP area (HK or TW?) +country: AP +drop: yes + aut-num: AS39770 descr: 1337TEAM LIMITED / eliteteam[.]to remarks: Owned by an offshore letterbox company, suspected rogue ISP @@ -200,6 +206,12 @@ remarks: ISP and/or IP hijacker located in HK country: HK drop: yes +aut-num: AS135097 +descr: LUOGELANG (FRANCE) LIMITED +remarks: Shady ISP located in HK, RIR data for announced prefixes contain garbage, solely announcing "Cloud Innovation Ltd." space - no one will miss it +country: HK +drop: yes + aut-num: AS136545 descr: Blue Data Center remarks: IP hijacker located somewhere in AP area, tampers with RIR data