From patchwork Sat Jun 6 13:19:35 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3156 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 49fKrm3LY1z43nd for ; Sat, 6 Jun 2020 13:20:40 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 49fKrl6HcyzvL; Sat, 6 Jun 2020 13:20:39 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 49fKrl3XcGz2xMS; Sat, 6 Jun 2020 13:20:39 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 49fKrk4xzGz2xGR for ; Sat, 6 Jun 2020 13:20:38 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 49fKrh2Xsmz1VR for ; Sat, 6 Jun 2020 13:20:35 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1591449636; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=7hzEsudrTRdEdglhvbbVXoSel+q3QXWKdu8buyDyGc8=; b=RWaE9NWISjii3JCm0NQqYUISTVSAcd09myKv7V6mYCQFZJWND9lqg1FYpkOSLpr6/8WitO jW/hzPTx7KdM/vBg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1591449636; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=7hzEsudrTRdEdglhvbbVXoSel+q3QXWKdu8buyDyGc8=; b=cwpPuSM8LITVvp62jkeDJiUnV8VzybMnVhz6PFdTvsc1Xhuc9M8+9hFDr9tp1/RJBSViq8 ipPGsHBLG77zHh3hO/WXEmM8Zfc0vwA+Pd8pUZSqn2pTHRApBuA6o+yx3ivDtSDfTK1mXC zUoEhYR4/GrgqyPuw8/TFtodjQZla/vvPlxKlbQPK8q0fkBmjHEYkNI/TrWu16AilM59p+ QvKxI/4+5UAKY+kf2yUL1efqOAkWdNyChHqZzcJYSZTbA1hD4a14V+JdiEQImnQUmV4f7A 7+24tTqiKV/sX1bvJYRE0OwOJMmGaOrd/iNPmdoegi5KmGodMXIVag3GbrnL+Q== To: location@lists.ipfire.org From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH 1/3] country-overrides: add 95.181.152.0/21 (QWARTA LLC) Message-ID: Date: Sat, 6 Jun 2020 13:19:35 +0000 MIME-Version: 1.0 Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Authentication-Results: mail01.ipfire.org; none X-Rspamd-Queue-Id: 49fKrl6HcyzvL X-Spamd-Result: default: False [-4.31 / 11.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; BAYES_HAM(-3.00)[99.99%]; FROM_HAS_DN(0.00)[]; FORGED_SENDER_MAILLIST(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[location@lists.ipfire.org]; TO_DN_NONE(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; NEURAL_HAM(-1.00)[-0.998]; MAILLIST(-0.20)[mailman]; FORGED_RECIPIENTS_MAILLIST(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_NEQ_ENVFROM(0.00)[peter.mueller@ipfire.org,location-bounces@lists.ipfire.org]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mail01.haj.ipfire.org Partially fixes: #12421 Signed-off-by: Peter Müller --- overrides/override-other.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 1549df6..1ce03cc 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -27,3 +27,8 @@ net: 88.151.117.0/24 descr: Golden Internet LLC remarks: fake location (KP), WHOIS contact points to RU country: RU + +net: 95.181.152.0/21 +descr: QWARTA LLC +remarks: fake location (US), WHOIS contact and traceroutes point to RU +country: RU From patchwork Sat Jun 6 13:20:18 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3157 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 49fKsN0Vvbz43nd for ; Sat, 6 Jun 2020 13:21:12 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 49fKsM6FzVz5L; Sat, 6 Jun 2020 13:21:11 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 49fKsM5Rglz2xMS; Sat, 6 Jun 2020 13:21:11 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 49fKsL05fDz2xMS for ; Sat, 6 Jun 2020 13:21:10 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 49fKsK0R5sz1VR for ; Sat, 6 Jun 2020 13:21:08 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1591449669; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=60v6HyszKBD7tQHcLPmS7+KntsIcFkSDBwuEUmdsf+g=; b=dflDfjIR0znlf+hH9d0iH9HoVEiX1PArswwCEAdtU1mGHcCIFwebEepYR5z+9GVOgr8Wfu vREDtQUSzyZ1rzBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1591449669; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=60v6HyszKBD7tQHcLPmS7+KntsIcFkSDBwuEUmdsf+g=; b=a3sT+lLVNruArr9JxlNuBJr+Fvv7U/a9RjE6uuoWo6B9bnutNVB1/T2Esno0iiQf7zFlJ5 K8kOklF/MIJuiYXm5sKJXhB7r1ZGQGIONcuEZgIn3Cw7Dg8stY55vG64F+9d9EEbGxqn6M aK4QVQFf8QoyiD8DMNatf+s6vABlMEyYepD/Ojun2bXgODvqLPY/mHQ8jXdl4eCZR0gIbD Z1gYchO/1HZKbkAkMAc7Yr330FWOu3rOy6wArltj7xNf+8y3vPAxe1npN1GDuQjC+oLr2D OWq5GN7XYhZWL3inI/NxQ9p9HPxG11QZlIlARaghAg0HJIWNuN4zIFw8MbkayA== Subject: [PATCH 2/3] country-overrides: add 2a02:e00:ffe7::/48 (Bradler & Krantz GmbH & Co. KG) From: =?utf-8?q?Peter_M=C3=BCller?= To: location@lists.ipfire.org References: Message-ID: Date: Sat, 6 Jun 2020 13:20:18 +0000 MIME-Version: 1.0 In-Reply-To: Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Authentication-Results: mail01.ipfire.org; none X-Rspamd-Queue-Id: 49fKsM6FzVz5L X-Spamd-Result: default: False [-4.31 / 11.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; BAYES_HAM(-3.00)[99.99%]; FROM_HAS_DN(0.00)[]; FORGED_SENDER_MAILLIST(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[location@lists.ipfire.org]; TO_DN_NONE(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; NEURAL_HAM(-1.00)[-1.002]; MAILLIST(-0.20)[mailman]; FORGED_RECIPIENTS_MAILLIST(0.00)[]; RCVD_TLS_LAST(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_NEQ_ENVFROM(0.00)[peter.mueller@ipfire.org,location-bounces@lists.ipfire.org]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mail01.haj.ipfire.org Partially fixes: #12421 Signed-off-by: Peter Müller --- overrides/override-other.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 1ce03cc..3332d81 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -32,3 +32,8 @@ net: 95.181.152.0/21 descr: QWARTA LLC remarks: fake location (US), WHOIS contact and traceroutes point to RU country: RU + +net: 2a02:e00:ffe7::/48 +descr: Bradler & Krantz GmbH & Co. KG +remarks: allocated to DE, but actually announced from LT +country: LT From patchwork Sat Jun 6 13:20:52 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3158 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 49fKt222byz43nd for ; Sat, 6 Jun 2020 13:21:46 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 49fKt20x6wzfT; Sat, 6 Jun 2020 13:21:46 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 49fKt173WKz2xMS; Sat, 6 Jun 2020 13:21:45 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 49fKt013xkz2xMS for ; Sat, 6 Jun 2020 13:21:44 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 49fKsy6MVqzhW for ; Sat, 6 Jun 2020 13:21:42 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1591449703; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=qwb4H5/U64HBf7sfdMpiCvNLPngSVZ5Nc29QsnlIlg8=; b=pw3RanOruaCD8K8rSx4QC21hwvNrOYPyrZTkxvztZwZabwXMUjZSyJLFHyNEPBzbug573e faW5jWB+bF2NDxCw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1591449703; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=qwb4H5/U64HBf7sfdMpiCvNLPngSVZ5Nc29QsnlIlg8=; b=YvABmU9qEl07QG257T8jfONOHdiAJWH37wT5/5Ziv+ksjvzUmdmUqr+V4jnqDasOJqq1xt jJn0CStIBQeNh7jFjLnmCdgl3zNl7g5xthbVAObhZMnqQXmDItmCXM+erpZO21tqTKLKh4 fHOgJ2i5mg/PcGop96x1Wl9LnIK40tI7rz3g0ROJaCYRCCIxSgQt9QEOWzol9qKLabdKxF jMW4IhuWcl9dUM/srkkmLwbGNfjUT2zQ4MTJ1JkcjgPBE04sdAws/j/+CYnNiL0Y03bybP VHbHj6HCzZQHprtWIRxRFmG2afdmfpFWz4bsh6x5ETJyaCzXUWst2xRDZ7kWsQ== Subject: [PATCH 3/3] country-overrides: add 185.244.29.0/24 (Gerber EDV / Daniel Craig) From: =?utf-8?q?Peter_M=C3=BCller?= To: location@lists.ipfire.org References: Message-ID: Date: Sat, 6 Jun 2020 13:20:52 +0000 MIME-Version: 1.0 In-Reply-To: Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Authentication-Results: mail01.ipfire.org; none X-Rspamd-Queue-Id: 49fKt20x6wzfT X-Spamd-Result: default: False [-4.31 / 11.00]; ARC_NA(0.00)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; BAYES_HAM(-3.00)[99.99%]; FROM_HAS_DN(0.00)[]; FORGED_SENDER_MAILLIST(0.00)[]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[location@lists.ipfire.org]; TO_DN_NONE(0.00)[]; HAS_LIST_UNSUB(-0.01)[]; RCPT_COUNT_ONE(0.00)[1]; RCVD_COUNT_THREE(0.00)[4]; NEURAL_HAM(-1.00)[-1.002]; MAILLIST(-0.20)[mailman]; FORGED_RECIPIENTS_MAILLIST(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_TLS_LAST(0.00)[]; FROM_NEQ_ENVFROM(0.00)[peter.mueller@ipfire.org,location-bounces@lists.ipfire.org]; MID_RHS_MATCH_FROM(0.00)[] X-Rspamd-Server: mail01.haj.ipfire.org Partially fixes: #12421 Signed-off-by: Peter Müller --- overrides/override-other.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 3332d81..583bf43 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -33,6 +33,11 @@ descr: QWARTA LLC remarks: fake location (US), WHOIS contact and traceroutes point to RU country: RU +net: 185.244.29.0/24 +descr: Gerber EDV / Daniel Craig +remarks: bulletproof ISP, fake location (KP), traces back to SG +country: SG + net: 2a02:e00:ffe7::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from LT