From bad39a5b425a15566a168f3cfdae3d814e5e0d1d Mon Sep 17 00:00:00 2001 From: =?utf8?q?Peter=20M=C3=BCller?= Date: Mon, 11 Nov 2024 11:07:05 +0000 Subject: [PATCH] override-{a1,other,xd}: Regular batch of various overrides MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Peter Müller --- overrides/override-a1.txt | 6 ++++++ overrides/override-other.txt | 5 +++++ overrides/override-xd.txt | 6 ++++++ 3 files changed, 17 insertions(+) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 9f9f81e..2393a4c 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -232,6 +232,12 @@ remarks: VPN provider located in ES is-anonymous-proxy: yes country: ES +aut-num: AS214503 +descr: QuxLabs AB +remarks: Tor relay provider who thinks messing with country codes is funny :-/ +is-anonymous-proxy: yes +country: SE + aut-num: AS269726 descr: CHAMORRO ELADIO OSCAR (PROXY-AR) remarks: VPN provider [high confidence, but not proofed] diff --git a/overrides/override-other.txt b/overrides/override-other.txt index ecfaebb..530ed0b 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -743,6 +743,11 @@ descr: Idehpardazan-e-Electronic-e-Javanan Co. (Ltd.) remarks: ISP located in IR, but some RIR data for announced prefixes contain garbage country: IR +aut-num: AS39614 +descr: Dawico Deutschland GmbH +remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage +country: DE + aut-num: AS39782 descr: Rack Sphere Hosting S.A. remarks: claims PA for some prefixes, but they are all hosted in CH diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index 122e9f4..ae87688 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -49,6 +49,12 @@ remarks: all cybercrime hosting, all the time country: RU drop: yes +aut-num: AS42624 +descr: Global-Data System IT Corporation (f/k/a Simple Carrier LLC) +remarks: Bulletproof ISP tampering with RIR data, used to trace back to NL +country: NL +drop: yes + aut-num: AS44477 descr: STARK INDUSTRIES SOLUTIONS LTD remarks: Rogue ISP in multiple locations, some RIR data contain garbage -- 2.47.2