From patchwork Mon Oct 5 15:46:38 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3507 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4C4lMf5ry1z3x0l for ; Mon, 5 Oct 2020 15:46:54 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4C4lMf3ScNz10R; Mon, 5 Oct 2020 15:46:53 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4C4lMc6PW9z2xWn; Mon, 5 Oct 2020 15:46:52 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4C4lMb1V8Vz2xX7 for ; Mon, 5 Oct 2020 15:46:51 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4C4lMW1FSmzpZ for ; Mon, 5 Oct 2020 15:46:46 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1601912810; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=3P2WbHn9gVQC01O7a2QjJVwmhTzW83ZSdvu9E9/mwiY=; b=XBHvdEjSA5a7dtfTyI2yaQqgwN5xlNCTHbq+gV11BRzQxxYipVQagwiHngPktJwR3GXNSk Tbasqw5WI5xM7ZAA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1601912810; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=3P2WbHn9gVQC01O7a2QjJVwmhTzW83ZSdvu9E9/mwiY=; b=OvI/NmKdGSdNac2nuZ+UoZoyMKid9lyjiLOJRWkEr1ziShuQqLUi7DOZFnYQj1GJOv1bs7 4Xk+84dBpGNVMTXCqSzutmCoe8bmAKWOdCZkwSXfelQOXt+RdsnhDapuBf14hub3yW9RTi 27kPkZgS/efQsK17K3LXZ2wUo2ecP5IRL6j1FE/g0UHT2YFLAuIpqBQYiXrK4aCJcXE7Nh jZjZX/tEgL5PRPlmjhtRj6zUTiP0EGtNBbpa2Pjq/qNZrFYEcjdGXrgepK4fuMlbaWnEJ5 tMJSDX7pmEUGFV5d+YL2XIHY8OklOhfO0gcvQ5E0UvC5BtA/bDZQEGw013WtrQ== To: location@lists.ipfire.org From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH] overrides/override-{a[1-3],other}.txt: weekly batch of override updates Message-ID: <8c231ebc-ce36-a258-952c-009feda4a870@ipfire.org> Date: Mon, 5 Oct 2020 15:46:38 +0000 MIME-Version: 1.0 Content-Language: en-US Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=peter.mueller@ipfire.org X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-a1.txt | 52 +++++++++++++++++------------------- overrides/override-a2.txt | 10 +++++++ overrides/override-a3.txt | 10 +++++++ overrides/override-other.txt | 40 +++++++++++++++++++++++++++ 4 files changed, 84 insertions(+), 28 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 9f64dd8..d4fe379 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -38,6 +38,11 @@ descr: VPN de Mexico, S.A. de C.V. remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS34962 +descr: Epik Network +remarks: VPN provider +is-anonymous-proxy: yes + aut-num: AS35029 descr: WebLine LTD remarks: (Rogue) VPN provider @@ -55,6 +60,12 @@ descr: Asiamax Ltd. VPN remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS43233 +descr: VPS 404 Ltd. +remarks: VPN provider [high confidence, but not proofed] located in ES +is-anonymous-proxy: yes +country: ES + aut-num: AS45792 descr: Layer 3 VPN ASN remarks: VPN provider @@ -132,6 +143,11 @@ descr: Privex Inc. remarks: VPN and Tor relay provider is-anonymous-proxy: yes +aut-num: AS212987 +descr: NekoCloud Solutions Limited +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS394087 descr: Secure Internet LLC / PureVPN remarks: VPN provider @@ -322,6 +338,11 @@ descr: GZ Systems Limited / PureVPN remarks: VPN provider is-anonymous-proxy: yes +net: 45.9.12.0/22 +descr: VPNHost SIA +remarks: VPN provider +is-anonymous-proxy: yes + net: 45.12.144.0/22 descr: VPNHost SIA remarks: VPN provider @@ -1123,29 +1144,9 @@ descr: Canar VPN Range remarks: VPN provider is-anonymous-proxy: yes -net: 196.52.50.0/24 -descr: BGRVPN -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.53.164.0/22 -descr: BGRVPN -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.53.82.0/24 -descr: VPNetworks -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.53.83.0/24 -descr: VPNetworks -remarks: VPN provider -is-anonymous-proxy: yes - -net: 196.54.53.0/24 -descr: BGRVPN -remarks: VPN provider +net: 196.52.0.0/14 +descr: LogicWeb Inc. / BGRVPN / Private Internet Access / VPNetworks / CookieProxy / etc. pp. +remarks: large IP chunk mostly used by VPN providers is-anonymous-proxy: yes net: 197.221.161.0/24 @@ -1288,11 +1289,6 @@ descr: OVPN Integritet AB remarks: VPN provider is-anonymous-proxy: yes -net: 217.115.10.128/28 -descr: Chaos Computer Club e.V. -remarks: Tor relay provider -is-anonymous-proxy: yes - net: 217.148.75.0/24 descr: ITNow S.A. VPN pool / CAXIA remarks: VPN provider diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index 88783d8..8f03159 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -227,6 +227,11 @@ descr: Alpha Sattelite Network remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS203770 +descr: Matooma SAS +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS393582 descr: VIDEO DIRECT SATELLITE & ENTERTAINMENT / WisperISP remarks: Satellite Internet provider @@ -927,6 +932,11 @@ descr: Satellite Solutions Worldwide Ltd remarks: Satellite Internet provider is-satellite-provider: yes +net: 145.249.96.0/21 +descr: Media Broadcast Satellite GmbH +remarks: Satellite Internet provider +is-satellite-provider: yes + net: 154.73.28.0/22 descr: RAWAFED Libya remarks: Satellite Internet provider diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index e692f4c..26acb64 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -184,6 +184,11 @@ descr: subspace remarks: Generic anycast network [high confidence, but not proofed] is-anycast: yes +net: 185.89.134.0/24 +descr: Isset +remarks: Generic anycast network +is-anycast: yes + net: 185.143.232.0/22 descr: Noyan Abr Arvan Co. remarks: Generic anycast network @@ -214,6 +219,11 @@ descr: xTom / dns.sb remarks: Public anycast DNS resolver is-anycast: yes +net: 196.55.0.0/24 +descr: Epik Network +remarks: Generic anycast network +is-anycast: yes + net: 196.216.168.0/24 descr: AfriNIC Anycast Services remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index f8e6799..67b7024 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -13,6 +13,11 @@ # Please keep this file sorted. # +aut-num: AS12025 +descr: Iron Mountain Data Center +remarks: ISP located in US, but some RIR data for announced prefixes contain garbage +country: US + aut-num: AS24700 descr: Yes Networks Unlimited Ltd remarks: traces to UA, but some RIR entries seem to contain garbage (VG) @@ -33,11 +38,26 @@ descr: Bunea TELECOM SRL remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage country: RO +aut-num: AS42745 +descr: Safe Value Limited +remarks: tampers with RIR data, traces back to somewhere in central Europe +country: EU + +aut-num: AS42831 +descr: UKSERVERS +remarks: ISP located in UK, but some RIR data for announced prefixes contain garbage +country: UK + aut-num: AS48090 descr: PPTECHNOLOGY LIMITED remarks: bulletproof ISP (related to AS204655) located in NL country: NL +aut-num: AS51558 +descr: Smart Telecom S.A.R.L +remarks: tampers with RIR data, traces back to RU +country: RU + aut-num: AS56611 descr: REBA Communications BV remarks: bulletproof ISP (related to AS202425) located in NL @@ -103,6 +123,16 @@ descr: Private Internet Hosting LTD remarks: bulletproof ISP located in RU country: RU +aut-num: AS213373 +descr: IP Connect Inc. +remarks: fake offshore location (SC), traces back to NL +country: NL + +net: 5.252.32.0/22 +descr: StormWall s.r.o. +remarks: claims to be located in DE, but traces back to somewhere in central Europe +country: EU + net: 31.220.0.0/22 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to NL @@ -143,6 +173,11 @@ descr: QWARTA LLC remarks: fake location (US), WHOIS contact and traceroutes point to RU country: RU +net: 103.197.148.0/22 +descr: I.C.S. Trabia-Network S.R.L. +remarks: fake offshore location (HK), traces back to MD +country: MD + net: 178.239.20.0/24 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd. remarks: fake location (BA), traces back to RO @@ -187,3 +222,8 @@ net: 2a02:e00:ffe9::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from GB country: GB + +net: 2a05:9f06::/31 +descr: Sibyl System LTD +remarks: RIR data contain garbage +country: NL