overrides/override-{a[1-3],other}.txt: weekly batch of override updates

Message ID 8c231ebc-ce36-a258-952c-009feda4a870@ipfire.org
State Accepted
Commit cc71dff1876922969bd75d2e988c4ddef3d876c0
Headers show
Series
  • overrides/override-{a[1-3],other}.txt: weekly batch of override updates
Related show

Commit Message

Peter Müller Oct. 5, 2020, 3:46 p.m. UTC
Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 overrides/override-a1.txt    | 52 +++++++++++++++++-------------------
 overrides/override-a2.txt    | 10 +++++++
 overrides/override-a3.txt    | 10 +++++++
 overrides/override-other.txt | 40 +++++++++++++++++++++++++++
 4 files changed, 84 insertions(+), 28 deletions(-)

Patch

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 9f64dd8..d4fe379 100644
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -38,6 +38,11 @@  descr:				VPN de Mexico, S.A. de C.V.
 remarks:			VPN provider
 is-anonymous-proxy:	yes
 
+aut-num:			AS34962
+descr:				Epik Network
+remarks:			VPN provider
+is-anonymous-proxy:	yes
+
 aut-num:			AS35029
 descr:				WebLine LTD
 remarks:			(Rogue) VPN provider
@@ -55,6 +60,12 @@  descr:				Asiamax Ltd. VPN
 remarks:			VPN provider
 is-anonymous-proxy:	yes
 
+aut-num:			AS43233
+descr:				VPS 404 Ltd.
+remarks:			VPN provider [high confidence, but not proofed] located in ES
+is-anonymous-proxy:	yes
+country:			ES
+
 aut-num:			AS45792
 descr:				Layer 3 VPN ASN
 remarks:			VPN provider
@@ -132,6 +143,11 @@  descr:				Privex Inc.
 remarks:			VPN and Tor relay provider
 is-anonymous-proxy:	yes
 
+aut-num:			AS212987
+descr:				NekoCloud Solutions Limited
+remarks:			VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:	yes
+
 aut-num:			AS394087
 descr:				Secure Internet LLC / PureVPN
 remarks:			VPN provider
@@ -322,6 +338,11 @@  descr:				GZ Systems Limited / PureVPN
 remarks:			VPN provider
 is-anonymous-proxy:	yes
 
+net:				45.9.12.0/22
+descr:				VPNHost SIA
+remarks:			VPN provider
+is-anonymous-proxy:	yes
+
 net:				45.12.144.0/22
 descr:				VPNHost SIA
 remarks:			VPN provider
@@ -1123,29 +1144,9 @@  descr:				Canar VPN Range
 remarks:			VPN provider
 is-anonymous-proxy:	yes
 
-net:				196.52.50.0/24
-descr:				BGRVPN
-remarks:			VPN provider
-is-anonymous-proxy:	yes
-
-net:				196.53.164.0/22
-descr:				BGRVPN
-remarks:			VPN provider
-is-anonymous-proxy:	yes
-
-net:				196.53.82.0/24
-descr:				VPNetworks
-remarks:			VPN provider
-is-anonymous-proxy:	yes
-
-net:				196.53.83.0/24
-descr:				VPNetworks
-remarks:			VPN provider
-is-anonymous-proxy:	yes
-
-net:				196.54.53.0/24
-descr:				BGRVPN
-remarks:			VPN provider
+net:				196.52.0.0/14
+descr:				LogicWeb Inc. / BGRVPN / Private Internet Access / VPNetworks / CookieProxy / etc. pp.
+remarks:			large IP chunk mostly used by VPN providers
 is-anonymous-proxy:	yes
 
 net:				197.221.161.0/24
@@ -1288,11 +1289,6 @@  descr:				OVPN Integritet AB
 remarks:			VPN provider
 is-anonymous-proxy:	yes
 
-net:				217.115.10.128/28
-descr:				Chaos Computer Club e.V.
-remarks:			Tor relay provider
-is-anonymous-proxy:	yes
-
 net:				217.148.75.0/24
 descr:				ITNow S.A. VPN pool / CAXIA
 remarks:			VPN provider
diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt
index 88783d8..8f03159 100644
--- a/overrides/override-a2.txt
+++ b/overrides/override-a2.txt
@@ -227,6 +227,11 @@  descr:					Alpha Sattelite Network
 remarks:				Satellite Internet provider
 is-satellite-provider:	yes
 
+aut-num:				AS203770
+descr:					Matooma SAS
+remarks:				Satellite Internet provider
+is-satellite-provider:	yes
+
 aut-num:				AS393582
 descr:					VIDEO DIRECT SATELLITE & ENTERTAINMENT / WisperISP
 remarks:				Satellite Internet provider
@@ -927,6 +932,11 @@  descr:					Satellite Solutions Worldwide Ltd
 remarks:				Satellite Internet provider
 is-satellite-provider:	yes
 
+net:					145.249.96.0/21
+descr:					Media Broadcast Satellite GmbH
+remarks:				Satellite Internet provider
+is-satellite-provider:	yes
+
 net:					154.73.28.0/22
 descr:					RAWAFED Libya
 remarks:				Satellite Internet provider
diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index e692f4c..26acb64 100644
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -184,6 +184,11 @@  descr:		subspace
 remarks:	Generic anycast network [high confidence, but not proofed]
 is-anycast:	yes
 
+net:		185.89.134.0/24
+descr:		Isset
+remarks:	Generic anycast network
+is-anycast:	yes
+
 net:		185.143.232.0/22
 descr:		Noyan Abr Arvan Co.
 remarks:	Generic anycast network
@@ -214,6 +219,11 @@  descr:		xTom / dns.sb
 remarks:	Public anycast DNS resolver
 is-anycast:	yes
 
+net:		196.55.0.0/24
+descr:		Epik Network
+remarks:	Generic anycast network
+is-anycast:	yes
+
 net:		196.216.168.0/24
 descr:		AfriNIC Anycast Services
 remarks:	Generic anycast network
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index f8e6799..67b7024 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -13,6 +13,11 @@ 
 # Please keep this file sorted.
 #
 
+aut-num:	AS12025
+descr:		Iron Mountain Data Center
+remarks:	ISP located in US, but some RIR data for announced prefixes contain garbage
+country:	US
+
 aut-num:	AS24700
 descr:		Yes Networks Unlimited Ltd
 remarks:	traces to UA, but some RIR entries seem to contain garbage (VG)
@@ -33,11 +38,26 @@  descr:		Bunea TELECOM SRL
 remarks:	ISP located in RO, but some RIR data for announced prefixes contain garbage
 country:	RO
 
+aut-num:	AS42745
+descr:		Safe Value Limited
+remarks:	tampers with RIR data, traces back to somewhere in central Europe
+country:	EU
+
+aut-num:	AS42831
+descr:		UKSERVERS
+remarks:	ISP located in UK, but some RIR data for announced prefixes contain garbage
+country:	UK
+
 aut-num:	AS48090
 descr:		PPTECHNOLOGY LIMITED
 remarks:	bulletproof ISP (related to AS204655) located in NL
 country:	NL
 
+aut-num:	AS51558
+descr:		Smart Telecom S.A.R.L
+remarks:	tampers with RIR data, traces back to RU
+country:	RU
+
 aut-num:	AS56611
 descr:		REBA Communications BV
 remarks:	bulletproof ISP (related to AS202425) located in NL
@@ -103,6 +123,16 @@  descr:		Private Internet Hosting LTD
 remarks:	bulletproof ISP located in RU
 country:	RU
 
+aut-num:	AS213373
+descr:		IP Connect Inc.
+remarks:	fake offshore location (SC), traces back to NL
+country:	NL
+
+net:		5.252.32.0/22
+descr:		StormWall s.r.o.
+remarks:	claims to be located in DE, but traces back to somewhere in central Europe
+country:   	EU
+
 net:		31.220.0.0/22
 descr:		Amarutu Technology Ltd. / KoDDoS / ESecurity
 remarks:	fake offshore location (BZ), traces back to NL
@@ -143,6 +173,11 @@  descr:		QWARTA LLC
 remarks:	fake location (US), WHOIS contact and traceroutes point to RU
 country:   	RU
 
+net:		103.197.148.0/22
+descr:		I.C.S. Trabia-Network S.R.L.
+remarks:	fake offshore location (HK), traces back to MD
+country:   	MD
+
 net:		178.239.20.0/24
 descr:		Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 remarks:	fake location (BA), traces back to RO
@@ -187,3 +222,8 @@  net:		2a02:e00:ffe9::/48
 descr:		Bradler & Krantz GmbH & Co. KG
 remarks:	allocated to DE, but actually announced from GB
 country:   	GB
+
+net:		2a05:9f06::/31
+descr:		Sibyl System LTD
+remarks:	RIR data contain garbage
+country:   	NL