From: Peter Müller Date: Tue, 28 Jun 2022 16:10:40 +0000 (+0000) Subject: override-{a3,other,xd}: Regular batch of various overrides X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f6f93e7189a06a348b47f35ddeef0bc82ab7e0ba;p=location%2Flocation-database.git override-{a3,other,xd}: Regular batch of various overrides Signed-off-by: Peter Müller --- diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index f5226db..2d607c8 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -263,6 +263,11 @@ descr: TOONBOX STUDIO LTD remarks: Generic anycast network [high confidence, but not proofed] is-anycast: yes +aut-num: AS61227 +descr: Nexthop AS +remarks: Generic anycast network +is-anycast: yes + aut-num: AS62766 descr: SJB Communications remarks: Generic anycast network @@ -298,6 +303,11 @@ descr: SECURITYDAM LTD remarks: Generic anycast network [high confidence, but not proofed] is-anycast: yes +aut-num: AS199251 +descr: MnogoByte LLC +remarks: Generic anycast network +is-anycast: yes + aut-num: AS199365 descr: ProstoDNS remarks: Public anycast DNS resolver network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index f99aba5..b0cef90 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -139,6 +139,16 @@ descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS7029 +descr: Windstream Communications LLC +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + +aut-num: AS7545 +descr: TPG Telecom Limited +remarks: ISP located in AU, but some RIR data for announced prefixes contain garbage +country: AU + aut-num: AS8283 descr: Netwerkvereniging Coloclue remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage @@ -184,6 +194,11 @@ descr: GHOSTnet GmbH remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage country: DE +aut-num: AS12637 +descr: SEEWEB s.r.l. +remarks: ISP located in IT, but some RIR data for announced prefixes contain garbage +country: IT + aut-num: AS12679 descr: Sokolov Dmitry Nikolaevich remarks: ISP located in RU, but many RIR data for announced prefixes contain garbage @@ -353,6 +368,11 @@ descr: Leaseweb Deutschland GmbH remarks: ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage country: DE +aut-num: AS28776 +descr: ISV TECH LIMITED +remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage (BZ) +country: UA + aut-num: AS29119 descr: AireNetworks remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage (BZ) @@ -815,7 +835,7 @@ country: EU aut-num: AS49870 descr: Alsycon BV -remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage +remarks: Shady ISP located in NL, but some RIR data for announced prefixes contain garbage country: NL aut-num: AS49921 @@ -1217,6 +1237,11 @@ descr: Today Communication Co.,Ltd remarks: ISP located in KH, some RIR data for announced prefixes contain garbage country: KH +aut-num: AS135607 +descr: Infinivan Incorporated +remarks: ISP located in PH, some RIR data for announced prefixes contain garbage +country: PH + aut-num: AS136167 descr: China Telecom (Macau) Company Limited remarks: located in MO, yet some prefixes show CN or HK instead @@ -1402,6 +1427,11 @@ descr: netcup GmbH remarks: ISP located in DE, some RIR data for announced prefixes contain garbage country: DE +Aaut-num: AS197706 +descr: Keminet SHPK +remarks: ISP located in AL, some RIR data for announced prefixes contain garbage +country: AL + aut-num: AS200019 descr: ALEXHOST SRL remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network @@ -1618,7 +1648,7 @@ remarks: claims CY for announced prefixes, but they are all hosted in NL country: NL aut-num: AS209371 -descr: Cenk Aksit +descr: Enes Koken remarks: shady ISP located in TR, but RIR data for announced prefixes contain garbage country: TR @@ -1692,6 +1722,11 @@ descr: JMT Paso Limited remarks: ISP located in NL, but RIR data for announced prefixes contain garbage country: NL +aut-num: AS211936 +descr: Rackdog, LLC +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS211975 descr: Sascha Wohlert remarks: all prefixes announced by this AS appear to trace back to DE @@ -1882,6 +1917,11 @@ descr: PEG TECH INC remarks: ISP and/or IP hijacker located in HK, tampers with RIR data country: HK +aut-num: AS399045 +descr: DediOutlet, LLC +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS399471 descr: Serverion LLC remarks: ISP located in NL, some RIR data contain garbage diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index 1a4480b..4c3312a 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -61,6 +61,12 @@ remarks: shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in E country: EU drop: yes +aut-num: AS41909 +descr: PINVDS OU +remarks: all cybercrime hosting, all the time +country: RU +drop: yes + aut-num: AS43092 descr: Kirin Communication Limited remarks: Hijacks IP space and tampers with RIR data, traces back to JP @@ -97,6 +103,11 @@ remarks: Rogue ISP located in CH, but some RIR data for announced prefixes conta country: CH drop: yes +aut-num: AS49943 +descr: IT Resheniya LLC +remarks: Rogue ISP +drop: yes + aut-num: AS51381 descr: 1337TEAM LIMITED / eliteteam[.]to remarks: Bulletproof ISP @@ -185,6 +196,11 @@ remarks: bulletproof ISP (related to AS57717) located in NL country: NL drop: yes +aut-num: AS59940 +descr: Kanzas LLC +remarks: Rogue ISP +drop: yes + aut-num: AS60424 descr: 1337TEAM LIMITED / eliteteam[.]to remarks: Owned by an offshore letterbox company, suspected rogue ISP @@ -470,7 +486,8 @@ drop: yes aut-num: AS393889 descr: EightJoy Network LLC -remarks: Most likely hijacked AS +remarks: Most likely hijacked or criminal AS +country: HK drop: yes aut-num: AS398478 @@ -497,6 +514,16 @@ remarks: Shady ISP located in US, solely announcing "Cloud Innovation Ltd." spac country: US drop: yes +aut-num: AS400506 +descr: Black Apple +remarks: Solely announces hijacked prefixes, no legitimate infrastructure +drop: yes + +net: 46.161.27.0/24 +descr: MEGA HOLDINGS LIMITED +remarks: Based on domains ending up there, this network is entirely malicious +drop: yes + net: 185.196.220.0/24 descr: Makut Investments remarks: Long-running brute-force attack network