[1/2] overrides: regular batch of various overrides

Message ID 4349f4fb-29b6-8fc4-0e96-7d94c5feb0d0@ipfire.org
State Accepted
Commit cad28e20f09258fcda9db98819ed41942542a353
Headers
Series [1/2] overrides: regular batch of various overrides |

Commit Message

Peter Müller Aug. 6, 2021, 3:06 p.m. UTC
  This includes sane AS names for some Autonomous Systems whose operators
did not set helpful ones in the corresponding RIR DB.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 overrides/override-a2.txt    |  9 +++--
 overrides/override-a3.txt    |  6 ++++
 overrides/override-other.txt | 66 +++++++++++++++++++++++++++++++++---
 3 files changed, 73 insertions(+), 8 deletions(-)
  

Patch

diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt
index 4aac6ea..502948f 100644
--- a/overrides/override-a2.txt
+++ b/overrides/override-a2.txt
@@ -420,18 +420,21 @@  is-satellite-provider:	yes
 
 aut-num:				AS198381
 descr:					YahClick / Star Satellite Communications Company - PJSC
-remarks:				Satellite Internet provider
+remarks:				Satellite Internet provider, RIR data indicates prefixes are hosted in ES
 is-satellite-provider:	yes
+country:				ES
 
 aut-num:				AS198394
 descr:					YahClick / Star Satellite Communications Company - PJSC
-remarks:				Satellite Internet provider
+remarks:				Satellite Internet provider, RIR data indicates prefixes are hosted in GR
 is-satellite-provider:	yes
+country:				GR
 
 aut-num:				AS198504
 descr:					YahClick / Star Satellite Communications Company - PJSC
-remarks:				Satellite Internet provider
+remarks:				Satellite Internet provider, RIR data indicates prefixes are hosted in LU
 is-satellite-provider:	yes
+country:				LU
 
 aut-num:				AS201554
 descr:					SES Germany GmbH
diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index 3c38b69..d810d93 100644
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -177,6 +177,12 @@  descr:		Hybula B.V.
 remarks:	Generic anycast network
 is-anycast:	yes
 
+aut-num:	AS57724
+descr:		DDOS-GUARD LTD
+remarks:	shady CDN, customers massively tampers with RIR data, we cannot trust this network
+is-anycast:	yes
+country:	RU
+
 aut-num:	AS57926
 descr:		SafeDNS, Inc.
 remarks:	Public anycast DNS resolver network [high confidence, but not proofed]
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index 454d1d5..045b515 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -13,6 +13,18 @@ 
 # Please keep this file sorted.
 #
 
+aut-num:	AS1739
+as-name:	Tampere University of Technology
+remarks:	has no sane AS name set in RIPE DB
+
+aut-num:	AS1768
+as-name:	NCNIC
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS1769
+as-name:	NCNIC
+remarks:	has no sane AS name set in APNIC DB
+
 aut-num:	AS1820
 descr:		WNET TELECOM USA Corp.
 remarks:	traces back to various locations in UA, seems to tamper with RIR data
@@ -28,6 +40,22 @@  descr:		Dimension Data
 remarks:	ISP (?) located in ZA, but some RIR data for announced prefixes contain garbage
 country:	ZA
 
+aut-num:	AS4134
+as-name:	Chinanet Backbone
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS4754
+as-name:	Software Technology Park of India
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS4800
+as-name:	Indonesia Network Information Center
+remarks:	has no sane AS name set in APNIC DB
+
+aut-num:	AS4814
+as-name:	China169 Beijing Broadband Network
+remarks:	has no sane AS name set in APNIC DB
+
 aut-num:	AS4842
 descr:		Tianhai InfoTech
 remarks:	IP hijacker located somewhere in AP, massively tampers with RIR data
@@ -38,6 +66,10 @@  descr:		XNNET LLC
 remarks:	traces back to an unknown oversea location (HK?), seems to tamper with RIR data
 country:	AP
 
+aut-num:	AS6412
+as-name:	Zajil International Telecom Company
+remarks:	has no sane AS name set in RIPE DB
+
 aut-num:	AS7203
 descr:		Leaseweb USA, Inc.
 remarks:	ISP located in US, but some RIR data for announced prefixes contain garbage
@@ -68,6 +100,10 @@  descr:		ASLINE LIMITED
 remarks:	IP hijacker, traces back to AP region
 country:	AP
 
+aut-num:	AS18185
+as-name:	Northern Taiwan Community University
+remarks:	has no sane AS name set in APNIC DB
+
 aut-num:	AS18254
 descr:		KLAYER LLC
 remarks:	part of the "Asline" IP hijacking gang, traces back to AP region
@@ -128,6 +164,11 @@  descr:		Leaseweb USA, Inc.
 remarks:	ISP located in US, but some RIR data for announced prefixes contain garbage (BZ)
 country:	US
 
+aut-num:	AS30823
+descr:		combahton GmbH
+remarks:	ISP located in DE, but some RIR data for announced prefixes contain garbage
+country:	DE
+
 aut-num:	AS34224
 descr:		Neterra Ltd.
 remarks:	ISP located in BG, but some RIR data for announced prefixes contain garbage
@@ -168,6 +209,11 @@  descr:		Silverstar Invest Limited
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:	RU
 
+aut-num:	AS37155
+descr:		NetOne Telecomunicacoes (defunct)
+remarks:	spamming bogon located in or near Luanda, AO - formerly allocated to NetOne Telecomunicacoes
+country:	AO
+
 aut-num:	AS38197
 descr:		Sun Network (Hong Kong) Limited
 remarks:	ISP located in HK (duh!), but some RIR data for announced prefixes contain garbage
@@ -268,6 +314,11 @@  descr:		IP Oleinichenko Denis
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:	RU
 
+aut-num:	AS44592
+descr:		Skylink Data Center BV
+remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
+country:	NL
+
 aut-num:	AS44992
 descr:		KeonWoo PARK
 remarks:	claims US for its prefixes announced, but traces back to KR
@@ -318,6 +369,11 @@  descr:		Selectel
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
 country:	RU
 
+aut-num:	AS49612
+descr:		DDoS Guard Ltd. / Cognitive Cloud LLP
+remarks:	another shady customer or branch of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
+country:	EU
+
 aut-num:	AS49921
 descr:		F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
 remarks:	claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
@@ -388,11 +444,6 @@  descr:		FiberXpress BV
 remarks:	bulletproof ISP (related to AS202425) located in NL
 country:	NL
 
-aut-num:	AS57724
-descr:		DDOS-GUARD LTD
-remarks:	shady ISP, customers massively tamper with RIR data, we cannot trust this network
-country:	RU
-
 aut-num:	AS57756
 descr:		Telefonica LLC
 remarks:	ISP located in RU, but some RIR data for announced prefixes contain garbage
@@ -643,6 +694,11 @@  descr:		Wujidun Network Limited
 remarks:	part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 country:	AP
 
+aut-num:	AS140941
+descr:		Full Time Hosting
+remarks:	ISP located in DE, tampers with RIR data
+country:	DE
+
 aut-num:	AS196682
 descr:		FLP Kochenov Aleksej Vladislavovich
 remarks:	ISP located in UA, but RIR data for announced prefixes all say EU