From patchwork Wed Jan 13 19:11:18 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3802 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4DGH9V00FYz3whw for ; Wed, 13 Jan 2021 19:11:25 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4DGH9T48XDzgl; Wed, 13 Jan 2021 19:11:25 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4DGH9T3FhNz2xb4; Wed, 13 Jan 2021 19:11:25 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4DGH9S45hXz2xkX for ; Wed, 13 Jan 2021 19:11:24 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4DGH9R09mJzgl for ; Wed, 13 Jan 2021 19:11:22 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1610565084; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=iCx12rBmxdNC4qRzJX36nm18wj9GQLX1xg4Sq9mOk0U=; b=3kqO/OwKst0feeGMyDtnIz26TFT7735XI9+3BC2VpP2Uqklg4cShix/p69dlqUt7q/JhXe CEeYlv4koFMj6gAQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1610565084; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=iCx12rBmxdNC4qRzJX36nm18wj9GQLX1xg4Sq9mOk0U=; b=tQrBBaPVKfVXdlcaEf7apzXgzjMmZBsjj0pLsa2DP66gjI1ynNyJ+Htk6Qf6mtXHts23qZ whUd0/fnPREQTmxe9s8GWfETD6F50J5TvcNJmZIU8HyqNZOgVLOzJoJlGIemEu+ZYjU3Xs 69Hzg8+7KdbXxbatd2+15F1v58QvOCUmM2G34b2wxN8PAUgGeUJUcznDcoDYSY/P6g2bqU Q3ET6oUiUWWewbGuBG96+9e9ACs+U4g+ZQToj9PM+ZW3Xnxhswn6kTL7lYFxfTJx8ke7+U wxam7Ta0YcQ2Wm3A+8CFStjr506TNBPax8wOXaNEk9Qn0YKROOBevyx6nTs8dg== To: location@lists.ipfire.org From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH] overrides-*: regular batch of overrides Message-ID: <5d1455de-1ec4-4e73-2a3b-1a09cf904bbc@ipfire.org> Date: Wed, 13 Jan 2021 20:11:18 +0100 MIME-Version: 1.0 Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-a1.txt | 31 ++++++++++++++++++++++++++++++- overrides/override-a2.txt | 20 ++++++++++++++++++++ overrides/override-a3.txt | 10 ++++++++++ overrides/override-other.txt | 24 ++++++++++++++++++++++-- 4 files changed, 82 insertions(+), 3 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 91bf3b3..6f04bd6 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -138,6 +138,12 @@ descr: Foundation for Applied Privacy remarks: Tor relay provider is-anonymous-proxy: yes +aut-num: AS213005 +descr: Proxyseo Ltd. +remarks: VPN provider located in ES +is-anonymous-proxy: yes +country: ES + aut-num: AS208476 descr: Danilenko, Artyom remarks: (Rogue) VPN provider @@ -646,6 +652,11 @@ descr: Azimut-R VPN Service remarks: VPN provider is-anonymous-proxy: yes +net: 95.140.81.0/24 +descr: Electron telecom VPN Users +remarks: VPN provider +is-anonymous-proxy: yes + net: 95.154.64.0/18 descr: Octopusnet VPN remarks: VPN provider @@ -1018,6 +1029,12 @@ descr: OVPN Integritet AB remarks: VPN provider is-anonymous-proxy: yes +net: 185.162.88.0/24 +descr: Freedom of Speech VPN / nVPN / David Craig / ... +remarks: (Rogue) VPN provider +is-anonymous-proxy: yes +country: EU + net: 185.165.153.0/24 descr: Privacy Matters VPN service / nVPN / David Craig remarks: (Rogue) VPN provider @@ -1028,6 +1045,12 @@ descr: ACQUESPA-VPN remarks: VPN provider is-anonymous-proxy: yes +net: 185.174.40.0/24 +descr: Freedom of Speech VPN / nVPN / David Craig / ... +remarks: (Rogue) VPN provider +is-anonymous-proxy: yes +country: EU + net: 185.198.240.0/24 descr: VPN Consumer Network Services remarks: VPN provider @@ -1038,6 +1061,12 @@ descr: Zwiebelfreunde e.V. / F3 Netze e.V. / The Calyx Institute remarks: Tor relay provider is-anonymous-proxy: yes +net: 185.231.113.0/24 +descr: Freedom of Speech VPN / nVPN / David Craig / ... +remarks: (Rogue) VPN provider +is-anonymous-proxy: yes +country: EU + net: 185.232.143.0/24 descr: VKVPN remarks: VPN provider @@ -1050,7 +1079,7 @@ is-anonymous-proxy: yes net: 185.244.29.0/24 descr: NINAZU VPN Service / Gerber EDV / David Craig -remarks: (Rogue VPN provider), fake location (SC), traces back to NL +remarks: (Rogue) VPN provider, fake location (SC), traces back to NL is-anonymous-proxy: yes country: NL diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index ffc0303..cd4807e 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -328,6 +328,21 @@ descr: Alpha Sattelite Network remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS198381 +descr: YahClick / Star Satellite Communications Company - PJSC +remarks: Satellite Internet provider +is-satellite-provider: yes + +aut-num: AS198394 +descr: YahClick / Star Satellite Communications Company - PJSC +remarks: Satellite Internet provider +is-satellite-provider: yes + +aut-num: AS198504 +descr: YahClick / Star Satellite Communications Company - PJSC +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS201554 descr: SES Germany GmbH remarks: Satellite Internet provider @@ -338,6 +353,11 @@ descr: Matooma SAS remarks: Satellite Internet provider is-satellite-provider: yes +aut-num: AS206283 +descr: YahClick / Star Satellite Communications Company - PJSC +remarks: Satellite Internet provider +is-satellite-provider: yes + aut-num: AS208756 descr: ALCON TELECOM LTD remarks: Satellite Internet provider diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 381ffbe..136b678 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -1020,6 +1020,16 @@ descr: XINDI Networks SRL remarks: Generic anycast network is-anycast: yes +net: 185.174.42.0/24 +descr: SquareFlow / ENAXIM +remarks: Generic anycast network +is-anycast: yes + +net: 185.174.43.0/24 +descr: SquareFlow / ENAXIM / DarkData LLC +remarks: Generic anycast network [high confidence, but not proofed] +is-anycast: yes + net: 185.177.217.0/24 descr: Adman LLC remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 1bd3c2a..7fe50db 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -65,7 +65,7 @@ country: BG aut-num: AS35251 descr: NetLab -remarks: tampers with RIR data, most probabyl located in HK +remarks: tampers with RIR data, most probably located in HK country: HK aut-num: AS35478 @@ -88,6 +88,11 @@ descr: Confluence Networks Inc. remarks: fake offshore location (VG), traces back to Austin, TX, US country: US +aut-num: AS41466 +descr: Treidinvest LLC +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS42397 descr: Bunea TELECOM SRL remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage @@ -153,9 +158,14 @@ descr: FOP Gubina Lubov Petrivna remarks: bulletproof ISP operating from a war zone in eastern UA country: UA +aut-num: AS59580 +descr: Batterflyai Media Ltd. +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS62355 descr: Network Dedicated SAS -remarks: bulletproof ISP, claims to be located in CH, but traces to NL +remarks: bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL country: NL aut-num: AS62468 @@ -223,6 +233,16 @@ descr: Novogara Ltd. remarks: bulletproof ISP (strongly linked to AS202425) located in NL country: NL +aut-num: AS205026 +descr: Hauer Hosting Services Limited +remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage +country: ES + +aut-num: AS207046 +descr: Xtudio Networks S.L.U. +remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage +country: ES + aut-num: AS207616 descr: Altrosky Technology Ltd. remarks: fake offshore location (SC), traces back to CZ and NL