override-{a1,other}: regular batch of overrides

Message ID 20201212202044.12481-1-peter.mueller@ipfire.org
State Accepted
Commit 4ec8abc52d0d1f3dfe82aa3cb143151381dcbc4f
Headers
Series override-{a1,other}: regular batch of overrides |

Commit Message

Peter Müller Dec. 12, 2020, 8:20 p.m. UTC
  Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 overrides/override-a1.txt    |  6 +++++
 overrides/override-other.txt | 51 ++++++++++++++++++++++++++++++------
 2 files changed, 49 insertions(+), 8 deletions(-)
  

Patch

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 7aca339..a0a4404 100644
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -1007,6 +1007,12 @@  descr:				Angelo Kreikamp trading as Forhosting / Freedom of Speech VPN / nVPN /
 remarks:			(Rogue) VPN provider
 is-anonymous-proxy:	yes
 
+net:				185.244.29.0/24
+descr:				NINAZU VPN Service / Gerber EDV / David Craig
+remarks:			(Rogue VPN provider), fake location (SC), traces back to NL
+is-anonymous-proxy:	yes
+country:			NL
+
 net:				188.72.80.0/21
 descr:				GZ Systems Limited / PureVPN
 remarks:			VPN provider
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 98ea79b..fb60d97 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -13,6 +13,16 @@ 
 # Please keep this file sorted.
 #
 
+aut-num:	AS6134
+descr:		XNNET LLC
+remarks:	traces back to an unknown oversea location (Hong Kong?), seems to tamper with RIR data
+country:	HK
+
+aut-num:	AS8359
+descr:		MTS PJSC
+remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
+country:	RU
+
 aut-num:	AS12025
 descr:		Iron Mountain Data Center
 remarks:	ISP located in US, but some RIR data for announced prefixes contain garbage
@@ -78,10 +88,10 @@  descr:		UKSERVERS
 remarks:	ISP located in GB, but some RIR data for announced prefixes contain garbage
 country:	GB
 
-aut-num:	AS44446
-descr:		OOO SibirInvest
-remarks:	bulletproof ISP (related to AS204655), traces back to NL and BG
-country:	EU
+aut-num:	AS42960
+descr:		Cloud Management LLC
+remarks:	tampers with RIR data, traces back to HK
+country:	HK
 
 aut-num:	AS48090
 descr:		PPTECHNOLOGY LIMITED
@@ -103,6 +113,11 @@  descr:		Smart Telecom S.A.R.L
 remarks:	tampers with RIR data, traces back to RU
 country:	RU
 
+aut-num:	AS55933
+descr:		Cloudie Limited
+remarks:	part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
+country:	AP
+
 aut-num:	AS56611
 descr:		REBA Communications BV
 remarks:	bulletproof ISP (related to AS202425) located in NL
@@ -188,6 +203,11 @@  descr:		IP Connect Inc.
 remarks:	fake offshore location (SC), traces back to NL
 country:	NL
 
+aut-num:	AS328543
+descr:		Sun Network Company Limited
+remarks:	IP hijacker, traces back to AP region
+country:	AP
+
 aut-num:	AS398478
 descr:		PEG TECH INC
 remarks:	ISP located in HK, tampers with RIR data
@@ -253,20 +273,35 @@  descr:		FlokiNET Ltd.
 remarks:	fake offshore location (SC), traces back to RO
 country:   	RO
 
+net:		185.175.93.0/24
+descr:		Perfect Hosting Solutions
+remarks:	bulletproof ISP related to AS204655, traces back to BG
+country:	BG
+
 net:		185.169.253.0/24
 descr:		Amarutu Technology Ltd. / KoDDoS / ESecurity
 remarks:	fake offshore location (BZ), traces back to US
 country:   	US
 
+net:		185.193.91.0/24
+descr:		Romanenko Stanislav Sergeevich
+remarks:	bulletproof ISP related to AS204655, traces back to BG
+country:	BG
+
 net:		185.193.124.0/22
 descr:		ab stract / Njalla
 remarks:	bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
 country:   	SE
 
-net:		185.244.29.0/24
-descr:		NINAZU VPN Service / Gerber EDV / David Craig
-remarks:	bulletproof ISP, fake location (SC), traces back to GB
-country:   	GB
+net:		185.227.152.0/22
+descr:		XinYuan Interconnect (HONG KONG [sic!]) Limited
+remarks:	claims to be located in DE, traces back to HK
+country:	HK
+
+net:		190.2.128.0/19
+descr:		WorldStream (LATAM) BV
+remarks:	LACNIC IP chunk solely used in NL (inaccurate data)
+country:	NL
 
 net:		193.29.12.0/22
 descr:		Bunea TELECOM SRL