overrides-{a3,other}: regular batch of overrides

Message ID 49e7d5f5-096f-24b3-0b9f-66273fc8f150@ipfire.org
State Accepted
Commit 7b2d58d1936131f786fca3b75eadf5b5b7581509
Headers
Series overrides-{a3,other}: regular batch of overrides |

Commit Message

Peter Müller Dec. 31, 2020, 10:38 a.m. UTC
  This time, we primarily correct locataion data for "Datashield, Inc."
networks...

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
---
 overrides/override-a3.txt    |  5 +++++
 overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++
 2 files changed, 35 insertions(+)
  

Comments

Michael Tremer Jan. 7, 2021, 1:13 p.m. UTC | #1
Thank you. Merged.

> On 31 Dec 2020, at 10:38, Peter Müller <peter.mueller@ipfire.org> wrote:
> 
> This time, we primarily correct locataion data for "Datashield, Inc."
> networks...
> 
> Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
> ---
> overrides/override-a3.txt    |  5 +++++
> overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++
> 2 files changed, 35 insertions(+)
> 
> diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
> index 1112e6d..381ffbe 100644
> --- a/overrides/override-a3.txt
> +++ b/overrides/override-a3.txt
> @@ -1557,6 +1557,11 @@ descr:		xTom / dns.sb
> remarks:	Public anycast DNS resolver
> is-anycast:	yes
> 
> +net:		2a04:ff00:402::/48
> +descr:		Zeimudo Networks
> +remarks:	Generic anycast network
> +is-anycast:	yes
> +
> net:		2a0c:3800:ff::/48
> descr:		Jean-Remy Buchs
> remarks:	Generic anycast network
> diff --git a/overrides/override-other.txt b/overrides/override-other.txt
> index ef1e779..1bd3c2a 100644
> --- a/overrides/override-other.txt
> +++ b/overrides/override-other.txt
> @@ -143,6 +143,11 @@ descr:		FiberXpress BV
> remarks:	bulletproof ISP (related to AS202425) located in NL
> country:	NL
> 
> +aut-num:	AS58073
> +descr:		YISP BV
> +remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
> +country:	NL
> +
> aut-num:	AS58271
> descr:		FOP Gubina Lubov Petrivna
> remarks:	bulletproof ISP operating from a war zone in eastern UA
> @@ -183,6 +188,11 @@ descr:		Wujidun Network Limited
> remarks:	part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
> country:	AP
> 
> +aut-num:	AS200699
> +descr:		Datashield, Inc.
> +remarks:	fake offshore location (SC), traces back to NL
> +country:	NL
> +
> aut-num:	AS200845
> descr:		AVATEL TELECOM
> remarks:	ISP located in ES, but some RIR data for announced prefixes contain garbage
> @@ -233,6 +243,11 @@ descr:		Alviva Holding Limited
> remarks:	bulletproof ISP operating from a war zone in eastern UA
> country:	UA
> 
> +aut-num:	AS209401
> +descr:		Gudaev Maxim Amrakhovich
> +remarks:	announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
> +country:	EU
> +
> aut-num:	AS213058
> descr:		Private Internet Hosting LTD
> remarks:	bulletproof ISP located in RU
> @@ -303,6 +318,11 @@ descr:		IPv4 Superhub Limited
> remarks:	network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
> country:	HK
> 
> +net:		45.134.12.0/24
> +descr:		MS Network LTD
> +remarks:	fake offshore location (SC), traces back to NLm
> +country:   	NL
> +
> net:		45.134.144.0/22
> descr:		IPv4 Superhub Limited
> remarks:	same as 45.93.16.0/22
> @@ -358,6 +378,11 @@ descr:		FlokiNET Ltd.
> remarks:	fake offshore location (SC), traces back to RO
> country:   	RO
> 
> +net:		185.56.80.0/22
> +descr:		Datashield, Inc.
> +remarks:	fake offshore location (SC), traces back to NL
> +country:   	NL
> +
> net:        185.140.204.0/22
> descr:      Hornetsecurity GmbH
> remarks:    all suballocations are used in DE, but are assigned to US
> @@ -437,3 +462,8 @@ net:		2a05:9f06::/31
> descr:		Sibyl System LTD
> remarks:	RIR data contain garbage
> country:   	NL
> +
> +net:		2a06:e80::/29
> +descr:		Datashield, Inc.
> +remarks:	fake offshore location (SC), traces back to NL
> +country:   	NL
> -- 
> 2.26.2
  

Patch

diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt
index 1112e6d..381ffbe 100644
--- a/overrides/override-a3.txt
+++ b/overrides/override-a3.txt
@@ -1557,6 +1557,11 @@  descr:		xTom / dns.sb
 remarks:	Public anycast DNS resolver
 is-anycast:	yes
 
+net:		2a04:ff00:402::/48
+descr:		Zeimudo Networks
+remarks:	Generic anycast network
+is-anycast:	yes
+
 net:		2a0c:3800:ff::/48
 descr:		Jean-Remy Buchs
 remarks:	Generic anycast network
diff --git a/overrides/override-other.txt b/overrides/override-other.txt
index ef1e779..1bd3c2a 100644
--- a/overrides/override-other.txt
+++ b/overrides/override-other.txt
@@ -143,6 +143,11 @@  descr:		FiberXpress BV
 remarks:	bulletproof ISP (related to AS202425) located in NL
 country:	NL
 
+aut-num:	AS58073
+descr:		YISP BV
+remarks:	ISP located in NL, but some RIR data for announced prefixes contain garbage
+country:	NL
+
 aut-num:	AS58271
 descr:		FOP Gubina Lubov Petrivna
 remarks:	bulletproof ISP operating from a war zone in eastern UA
@@ -183,6 +188,11 @@  descr:		Wujidun Network Limited
 remarks:	part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 country:	AP
 
+aut-num:	AS200699
+descr:		Datashield, Inc.
+remarks:	fake offshore location (SC), traces back to NL
+country:	NL
+
 aut-num:	AS200845
 descr:		AVATEL TELECOM
 remarks:	ISP located in ES, but some RIR data for announced prefixes contain garbage
@@ -233,6 +243,11 @@  descr:		Alviva Holding Limited
 remarks:	bulletproof ISP operating from a war zone in eastern UA
 country:	UA
 
+aut-num:	AS209401
+descr:		Gudaev Maxim Amrakhovich
+remarks:	announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
+country:	EU
+
 aut-num:	AS213058
 descr:		Private Internet Hosting LTD
 remarks:	bulletproof ISP located in RU
@@ -303,6 +318,11 @@  descr:		IPv4 Superhub Limited
 remarks:	network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
 country:	HK
 
+net:		45.134.12.0/24
+descr:		MS Network LTD
+remarks:	fake offshore location (SC), traces back to NLm
+country:   	NL
+
 net:		45.134.144.0/22
 descr:		IPv4 Superhub Limited
 remarks:	same as 45.93.16.0/22
@@ -358,6 +378,11 @@  descr:		FlokiNET Ltd.
 remarks:	fake offshore location (SC), traces back to RO
 country:   	RO
 
+net:		185.56.80.0/22
+descr:		Datashield, Inc.
+remarks:	fake offshore location (SC), traces back to NL
+country:   	NL
+
 net:        185.140.204.0/22
 descr:      Hornetsecurity GmbH
 remarks:    all suballocations are used in DE, but are assigned to US
@@ -437,3 +462,8 @@  net:		2a05:9f06::/31
 descr:		Sibyl System LTD
 remarks:	RIR data contain garbage
 country:   	NL
+
+net:		2a06:e80::/29
+descr:		Datashield, Inc.
+remarks:	fake offshore location (SC), traces back to NL
+country:   	NL