diff mbox series

override-{a1,other}: Regular batch of various overrides

Message ID	20ba8a00-1146-f833-db2d-5ab8b70bf431@ipfire.org
State	Accepted
Commit	0d6eaee4af63e3b90e89b0599071f4b347c6c5aa
Headers	To: "IPFire: Location" <location@lists.ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= <peter.mueller@ipfire.org> Subject: [PATCH] override-{a1,other}: Regular batch of various overrides Message-ID: <20ba8a00-1146-f833-db2d-5ab8b70bf431@ipfire.org> Date: Wed, 10 Nov 2021 18:27:38 +0100 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit Precedence: list Errors-To: location-bounces@lists.ipfire.org Sender: "Location" <location-bounces@lists.ipfire.org>
Series	override-{a1,other}: Regular batch of various overrides \| override-{a1,other}: Regular batch of various overrides

Commit Message

Peter Müller Nov. 10, 2021, 5:27 p.m. UTC

  Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 overrides/override-a1.txt    | 27 ++++++++++++++++-----------
 overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++
 2 files changed, 46 insertions(+), 11 deletions(-)

diff mbox series

Patch

diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt
index 70b97e1..5734c08 100644
--- a/overrides/override-a1.txt
+++ b/overrides/override-a1.txt
@@ -204,6 +204,11 @@  descr:				Anonymizer, Inc.
 remarks:			VPN provider
 is-anonymous-proxy:		yes
 
+aut-num:			AS201860
+descr:				MyTelco Ltd
+remarks:			VPN provider [high confidence, but not proofed]
+is-anonymous-proxy:		yes
+
 aut-num:			AS205016
 descr:				HERN Labs AB
 remarks:			VPN provider [high confidence, but not proofed]
@@ -232,6 +237,11 @@  descr:				V6 Networking LLC
 remarks:			Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
 is-anonymous-proxy:		yes
 
+aut-num:			AS208169
+descr:				Artikel10 e.V.
+remarks:			Tor relay provider
+is-anonymous-proxy:		yes
+
 aut-num:			AS208256
 descr:				Stingers, Inc.
 remarks:			Loaded with proxies, see also: https://krebsonsecurity.com/2019/08/the-rise-of-bulletproof-residential-networks/
@@ -248,12 +258,6 @@  descr:				Foundation for Applied Privacy
 remarks:			Tor relay provider
 is-anonymous-proxy:		yes
 
-aut-num:			AS213005
-descr:				Proxyseo Ltd.
-remarks:			VPN provider located in ES
-is-anonymous-proxy:		yes
-country:			ES
-
 aut-num:			AS208476
 descr:				Danilenko, Artyom
 remarks:			(Rogue) VPN provider
@@ -281,11 +285,6 @@  descr:				Privex Inc.
 remarks:			VPN and Tor relay provider
 is-anonymous-proxy:		yes
 
-aut-num:			AS201860
-descr:				MyTelco Ltd
-remarks:			VPN provider [high confidence, but not proofed]
-is-anonymous-proxy:		yes
-
 aut-num:			AS212052
 descr:				BOET NOTIFY LTD.
 remarks:			VPN provider [high confidence, but not proofed]
@@ -313,6 +312,12 @@  descr:				NekoCloud Solutions Limited
 remarks:			VPN provider [high confidence, but not proofed]
 is-anonymous-proxy:		yes
 
+aut-num:			AS213005
+descr:				Proxyseo Ltd.
+remarks:			VPN provider located in ES
+is-anonymous-proxy:		yes
+country:			ES
+
 aut-num:			AS213224
 descr:				Blue Black Squared Limited
 remarks:			Owned by an offshore letterbox company, claims NL, but dead-ends in DE - hard to tell what is going on here
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 997b37e..dab86a0 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -344,6 +344,11 @@  descr:		ab stract / Peter Kolmisoppi
 remarks:	tampers with RIR data, traces back to SE
 country:	SE
 
+aut-num:	AS39782
+descr:		Rack Sphere Hosting S.A.
+remarks:	claims PA for some prefixes, but they are all hosted in CH
+country:	CH
+
 aut-num:	AS40034
 descr:		Confluence Networks Inc.
 remarks:	fake offshore location (VG), traces back to Austin, TX, US
@@ -409,6 +414,11 @@  descr:		NForce Entertainment B.V.
 remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
 country:	NL
 
+aut-num:	AS43440
+descr:		Digitale Suisse AG
+remarks:	ISP located in CH, but some RIR data for announced prefixes contain garbage
+country:	CH
+
 aut-num:	AS43624
 descr:		PQ HOSTING S.R.L.
 remarks:	tampers with RIR data sometimes, traces back to NL
@@ -559,6 +569,11 @@  descr:		Cloudie Limited
 remarks:	part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 country:	AP
 
+aut-num:	AS56322
+descr:		ServerAstra Kft.
+remarks:	ISP located in HU, but some RIR data for announced prefixes contain garbage
+country:	HU
+
 aut-num:	AS56382
 descr:		vServer.site LTD
 remarks:	ISP located in DE, but some RIR data for announced prefixes contain garbage
@@ -724,6 +739,11 @@  descr:		BGP Consultancy Pte Ltd
 remarks:	possibly invoved in IP hijacking, located somewhere in AP area
 country:	AP
 
+aut-num:	AS64122
+descr:		SWISS GLOBAL SERVICES S.A.S.
+remarks:	... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them
+country:	CH
+
 aut-num:	AS64425
 descr:		SKB Enterprise B.V.
 remarks:	bulletproof ISP (linked to AS202425 et al.) located in NL
@@ -1124,6 +1144,11 @@  descr:		VPSSC Networks LTD
 remarks:	ISP located in UA, but RIR data for announced prefixes contain garbage
 country:	UA
 
+aut-num:	AS210848
+descr:		Telkom Internet LTD
+remarks:	shady ISP currently located in NL
+country:	NL
+
 aut-num:	AS211380
 descr:		PAYWISE HOLDING Sp. z.o.o.
 remarks:	ISP located in NL, but RIR data for announced prefixes contain garbage
@@ -1194,6 +1219,11 @@  descr:		Private Internet Hosting LTD
 remarks:	bulletproof ISP located in RU
 country:	RU
 
+aut-num:	AS213194
+descr:		Alfa Web Solutions Ltd.
+remarks:	shady ISP located in NL
+country:	NL
+
 aut-num:	AS213373
 descr:		IP Connect Inc.
 remarks:	fake offshore location (SC), traces back to NL