From patchwork Fri Jun 25 08:42:47 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 4467 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4GB9W00RRTz3wYx for ; Fri, 25 Jun 2021 08:42:52 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4GB9Vz5SNrzD4; Fri, 25 Jun 2021 08:42:51 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4GB9Vz4CKzz2xgw; Fri, 25 Jun 2021 08:42:51 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4GB9Vy2Tmkz2xLH for ; Fri, 25 Jun 2021 08:42:50 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4GB9Vx102kzD4 for ; Fri, 25 Jun 2021 08:42:48 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1624610569; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=5zrXijnfp8hWASzLJGZN+SlN90l8jHRQnjklD0d9PGU=; b=OJ4MZl8bq/5vsLhhM/43/tFvKWr9Qxd7G//f85akaE/U+FmNUtlq/Ax5uPdkQTLxnEPQq9 n6Lxzg1Az+7WTxDA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1624610569; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=5zrXijnfp8hWASzLJGZN+SlN90l8jHRQnjklD0d9PGU=; b=DD8ghsi9C4o2TxcQVUMBV73hWsbulmOlZihxT6xAjxl8bN7SL/9VH+vrpw0OSJIVVBm7aJ Ljh7uBPzPVf8VcGtYNXmC3BWxvKJmjvUrZLSC7aXeQMPkMEXW49Rtymu2gweYQAeAo551Q ZgDdc8kHKle4lYIKhfaGOHyomFWSintvVawGYOgX0OnbXqwpa3XRSR/s6cUnLuTmixPWl5 TCogXPsJwUjk/JV/I8sgd12ShMJMyZPMH2Ks6sRQSt8NOP6hSZ3ZLLx7e7LbkhSpb8tjkV v4uPYRvQW+TH/dL0ynNIed98qkRpgVsa9cbEqBOYBoHDMjcMxxtYfpxmE2YIvg== To: "IPFire: Location" From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH] override-{a1,other}: weekly batch of various overrides Message-ID: Date: Fri, 25 Jun 2021 10:42:47 +0200 MIME-Version: 1.0 Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-a1.txt | 54 ++++++++++++++++++++++++++++++++++-- overrides/override-other.txt | 7 ++++- 2 files changed, 58 insertions(+), 3 deletions(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 3734c56..4dccbfc 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -156,6 +156,11 @@ descr: Anonymizer, Inc. remarks: VPN provider is-anonymous-proxy: yes +aut-num: AS205016 +descr: HERN Labs AB +remarks: VPN provider [high confidence, but not proofed] +is-anonymous-proxy: yes + aut-num: AS206819 descr: ANSON NETWORK LIMITED remarks: Autonomous System registered to UK letterbox company, traces back through shady ISPs to TW @@ -169,9 +174,10 @@ is-anonymous-proxy: yes country: BR aut-num: AS208294 -descr: Markus Koch -remarks: Tor relay provider +descr: CIA TRIAD SECURITY LLC +remarks: Tor relay provider located in or near Berlin, DE is-anonymous-proxy: yes +country: DE aut-num: AS208323 descr: Foundation for Applied Privacy @@ -688,6 +694,30 @@ descr: icedoutproxies.com remarks: VPN provider [high confidence, but not proofed] is-anonymous-proxy: yes +net: 77.111.244.0/24 +descr: HERN Labs AB +remarks: VPN provider [high confidence, but not proofed] located somewhere in EU +is-anonymous-proxy: yes +country: EU + +net: 77.111.245.0/24 +descr: HERN Labs AB +remarks: VPN provider [high confidence, but not proofed] located in SG +is-anonymous-proxy: yes +country: SG + +net: 77.111.246.0/24 +descr: HERN Labs AB +remarks: VPN provider [high confidence, but not proofed] located in US +is-anonymous-proxy: yes +country: US + +net: 77.111.247.0/24 +descr: HERN Labs AB +remarks: VPN provider [high confidence, but not proofed] located in NL +is-anonymous-proxy: yes +country: NL + net: 77.247.181.160/28 descr: Zwiebelfreunde e.V. remarks: Tor relay provider @@ -724,6 +754,11 @@ descr: VPN-Services / KDDI Corporation remarks: VPN provider is-anonymous-proxy: yes +net: 85.203.53.0/24 +descr: Mullvad VPN AB +remarks: VPN provider +is-anonymous-proxy: yes + net: 85.208.112.0/22 descr: VPNHOST SIA remarks: VPN provider @@ -1370,6 +1405,11 @@ descr: PureVPN remarks: VPN provider is-anonymous-proxy: yes +net: 193.19.108.0/24 +descr: Mullvad VPN AB +remarks: VPN provider +is-anonymous-proxy: yes + net: 193.42.136.0/24 descr: IntelligenceHosting remarks: VPN provider [high confidence, but not proofed] @@ -1410,6 +1450,11 @@ descr: Lynx Proxies Ltd. remarks: VPN provider is-anonymous-proxy: yes +net: 194.242.2.0/24 +descr: Mullvad VPN AB +remarks: VPN provider +is-anonymous-proxy: yes + net: 195.138.249.0/24 descr: Perfect Privacy LTD remarks: VPN provider @@ -1710,6 +1755,11 @@ descr: ProtonVPN AG remarks: VPN provider is-anonymous-proxy: yes +net: 2a07:e340::/32 +descr: Mullvad VPN AB +remarks: VPN provider +is-anonymous-proxy: yes + net: 2a09:50c0::/29 descr: VPNHost SIA remarks: VPN provider diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 87457d8..0b63d41 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -48,6 +48,11 @@ descr: Iron Mountain Data Center remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS12389 +descr: PJSC Rostelecom +remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage +country: RU + aut-num: AS18013 descr: ASLINE LIMITED remarks: IP hijacker, traces back to AP region @@ -149,7 +154,7 @@ remarks: ... who thinks messing with countries is funny :-/ country: EU aut-num: AS35624 -descr: Neterra Ltd. +descr: Silverstar Invest Limited remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU