From: Peter Müller Date: Fri, 25 Mar 2022 07:47:20 +0000 (+0000) Subject: override-{a3,other,xd}: Another batch of various overrides X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f57880612aff8d8454a5472fb04f8bc31f4fdae4;p=location%2Flocation-database.git override-{a3,other,xd}: Another batch of various overrides Signed-off-by: Peter Müller --- diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 6ad49e1..64bb1f1 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -155,6 +155,11 @@ descr: Community DNS Limited remarks: Public anycast DNS nameserver network [high confidence, but not proofed] is-anycast: yes +aut-num: AS49227 +descr: Ukrainian Internet Names Center LTD +remarks: TLD operator's anycast network +is-anycast: yes + aut-num: AS43278 descr: Instance Group LLC remarks: Generic anycast network [high confidence, but not proofed], RIR data contain garbage diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 19ac9b7..f9e534d 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -1198,11 +1198,6 @@ descr: FutureNow Incorporated remarks: ISP located in BG, but RIR data for announced prefixes contain garbage country: BG -aut-num: AS202325 -descr: 4Media Ltd. -remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data -country: BG - aut-num: AS202492 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS remarks: fake offshore location (SC), traces back to RU @@ -1383,6 +1378,11 @@ descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garbage country: UA +aut-num: AS210512 +descr: Internet Technologies LLC +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS210654 descr: Des Capital B.V. remarks: Shady ISP located in NL, but RIR data for announced prefixes contain garbage @@ -1390,7 +1390,7 @@ country: NL aut-num: AS211252 descr: Delis LLC -remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage +remarks: Shady Serverion customer in NL, many RIR data for announced prefixes contain garbage country: NL aut-num: AS211301 @@ -1798,6 +1798,11 @@ descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd. remarks: fake location (BA), traces back to RO country: RO +net: 179.60.147.0/24 +descr: Flyservers S.A. +remarks: traces back to NL +country: NL + net: 179.60.151.0/24 descr: DATAHOME S.A. remarks: traces back to BR diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index f3c8bbb..80c5736 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -172,6 +172,11 @@ remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijac country: SE drop: yes +aut-num: AS60930 +descr: Intem LLC +remarks: leaf AS with upstream to other dirty hosters, brute-force attacks galore +drop: yes + aut-num: AS61414 descr: EDGENAP LTD remarks: IP hijacking? Rogue ISP? @@ -254,6 +259,12 @@ remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, ta country: BG drop: yes +aut-num: AS202325 +descr: 4Media Ltd. +remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data +country: BG +drop: yes + aut-num: AS202425 descr: IP Volume Inc. remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL @@ -296,6 +307,12 @@ remarks: IP hijacker in RU and dirty suballocations, not a safe place to go country: RU drop: yes +aut-num: AS206728 +descr: Media Land LLC +remarks: bulletproof ISP, see: https://krebsonsecurity.com/2019/07/meet-the-worlds-biggest-bulletproof-hoster/ +country: RU +drop: yes + aut-num: AS209272 descr: Alviva Holding Limited remarks: bulletproof ISP operating from a war zone in eastern UA @@ -314,6 +331,12 @@ remarks: bulletproof ISP and IP hijacker, traces to RU country: RU drop: yes +aut-num: AS211805 +descr: Media Land LLC +remarks: bulletproof ISP, see: https://krebsonsecurity.com/2019/07/meet-the-worlds-biggest-bulletproof-hoster/ +country: RU +drop: yes + aut-num: AS211849 descr: Kakharov Orinbassar Maratuly remarks: ISP and IP hijacker located in KZ, many RIR data for announced prefixes contain garbage @@ -373,6 +396,12 @@ remarks: ISP located in KR, tampers with RIR data country: KR drop: yes +net: 195.133.20.0/24 +descr: Tribeka Web Advisors S.A. +remarks: Tampers with RIR data, traces back to NL, not a safe place to route traffic to +country: NL +drop: yes + net: 196.11.32.0/20 descr: Sanlam Life Insurance Limited remarks: Stolen AfriNIC IPv4 space announced from NL?