From patchwork Tue Jul 7 17:19:07 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3247 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4B1ThX6Xf4z3xJZ for ; Tue, 7 Jul 2020 17:19:56 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4B1ThX3vHlz1WC; Tue, 7 Jul 2020 17:19:56 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4B1ThT6z8jz2xq9; Tue, 7 Jul 2020 17:19:53 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4B1ThS47Gnz2xk6 for ; Tue, 7 Jul 2020 17:19:52 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4B1ThQ4bj4z12G for ; Tue, 7 Jul 2020 17:19:50 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1594142391; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=VV8pXpGOt5Z5aUZdiMhhJ3H8RUJMEjCgZ8H6r0KmH7c=; b=mTlA22i0ZZcTJNg2cmrmDJ7WTEZ/NAbdvxUsJEmfhrIxsma5klcLQObJDrE/SBRLSza8hN rAjV1eXKnUI9wgCQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1594142391; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=VV8pXpGOt5Z5aUZdiMhhJ3H8RUJMEjCgZ8H6r0KmH7c=; b=kIA5KZQv/RpOCDNa08d2yJ3X3hA+yXMpt5pF36wUdOmsbReyJhgaAnvZUZvhyN6xc5QIKb SviamCiwO4qmUjHq3wFDj9raHzf7QW2B1L9sQ+qsXf7yN88FGiWnnEdoneKY+1qh3iI7zX uovt/YvluWPmNmlQ3hBEV7/mpML2fFcmV1AAoQpk6zZ6GNH5shTv8biKXg64QSDQEz1Gpn VEuD8alrqFQWJx84ebIKl+L1qJW3IsLzoLCFwvL51hEwTpUshWNKj3bFpuXcy0sPb8xr5S 3XSJIEmZyKIQ7DNWZBF/AFdjblBULKLzA64+1tzPdpSEwMhXrK5cTcu/nswcjw== To: location@lists.ipfire.org From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH] country-overrides: add some FlokiNET prefixes with faked location Message-ID: <55bbcf30-166c-842b-5533-e1d80c6aa4b7@ipfire.org> Date: Tue, 7 Jul 2020 17:19:07 +0000 MIME-Version: 1.0 Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Authentication-Results: mail01.ipfire.org; none X-Rspamd-Queue-Id: 4B1ThX3vHlz1WC X-Spamd-Result: default: False [-3.31 / 11.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; BAYES_HAM(-3.00)[99.99%]; FROM_HAS_DN(0.00)[]; FORGED_SENDER_MAILLIST(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[location@lists.ipfire.org]; TO_DN_NONE(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; MAILLIST(-0.20)[mailman]; FORGED_RECIPIENTS_MAILLIST(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; FROM_NEQ_ENVFROM(0.00)[peter.mueller@ipfire.org,location-bounces@lists.ipfire.org]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mail01.haj.ipfire.org Partially fixes: #12421 Signed-off-by: Peter Müller --- overrides/override-other.txt | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index c70c3b3..d965bfb 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -48,6 +48,11 @@ descr: Altrosky Technology Ltd. remarks: fake offshore location (SC), traces back to CZ country: CZ +net: 37.228.128.0/24 +descr: FlokiNET Ltd. +remarks: fake offshore location (SC), traces back to RO +country: RO + net: 88.151.117.0/24 descr: Golden Internet LLC remarks: fake location (KP), WHOIS contact points to RU @@ -58,6 +63,16 @@ descr: QWARTA LLC remarks: fake location (US), WHOIS contact and traceroutes point to RU country: RU +net: 178.239.20.0/24 +descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd. +remarks: fake location (BA), traces back to RO +country: RO + +net: 185.10.68.0/24 +descr: FlokiNET Ltd. +remarks: fake offshore location (SC), traces back to RO +country: RO + net: 185.244.29.0/24 descr: Gerber EDV / David Craig remarks: bulletproof ISP, fake location (KP), traces back to SG