From patchwork Sun Aug 30 18:41:19 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3418 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Bfhxg2pwwz3x25 for ; Sun, 30 Aug 2020 18:41:27 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Bfhxg1Q2Qz1v; Sun, 30 Aug 2020 18:41:27 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Bfhxg090Mz2xZK; Sun, 30 Aug 2020 18:41:27 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Bfhxd55vfz2xbW for ; Sun, 30 Aug 2020 18:41:25 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Bfhxc2j2Tz1v for ; Sun, 30 Aug 2020 18:41:24 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1598812885; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Dt2QHAn1unYPlpwe6BTgcTioVkkIU0A/+B+HIjP0X3E=; b=iH+p8cPzpz6kgHeCIwRhl9N7R+8QZjE8oxuZN/BnxrppNWvcZ9Bw839YytXHZKNEIJcayD hZBrce45O1LS0pBA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1598812885; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Dt2QHAn1unYPlpwe6BTgcTioVkkIU0A/+B+HIjP0X3E=; b=fWlWIaLKhzwFaauOt4NdWN9FGg6Blkxn1HEqQnvJ3oI+md9s0ghUTEvutHKKBiZoJcMRAP TfOFU9I1wls1nIR2RJoT+N1137JAbi8bx2Scm4VE8eh+hbDk5PH4BOzUbC8va4r4Uv0wTH Pne8wpN8yFZPKGZKbtjHJJeh0q50J5SYv99IF78T+xt0ZS1DrW9Mo35lk1QqAODxxXR0ru I0xt5l3N9hx9Y2JA4PVOsbe4zZNvykEtp3HYnlk1c581unsbspZ7k8MQQRc5/vz3Gf0ytj LuiKALEx4TRQJ3JVeWLkuW/DQrWwK68D3SqzO7YYIpZxM5rb8dneBM3IQTm5tw== To: location@lists.ipfire.org From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH 1/3] override-other.txt: clarify intention of this file Message-ID: Date: Sun, 30 Aug 2020 18:41:19 +0000 MIME-Version: 1.0 Content-Language: en-US Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=peter.mueller@ipfire.org X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-other.txt | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index d965bfb..8504933 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -2,13 +2,13 @@ # override-other [.txt] # # This file contains Autonomous Systems (AS) or IP networks/addresses -# whose country information in the WHOIS is not identical to their -# physical location and which do not match to one of the special categories +# whose country information in corresponding RIR data is believed or proven +# to be invalid or inaccurate and which do not match to one of the special categories # A[1-3]. # -# Such networks might be legitimate (poorly maintained WHOIS data) -# or hostile (faked WHOIS data in order to bypass country filtering or -# to hide the owners' identity). +# Such networks might be legitimate (poorly maintained WHOIS data), shady +# (networks owned by letterbox companies in offshore jurisdictions) or +# hostile (faked RIR data in order to bypass location-based filtering). # # Please keep this file sorted. # From patchwork Sun Aug 30 18:41:43 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3419 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Bfhy51YGCz3x25 for ; Sun, 30 Aug 2020 18:41:49 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Bfhy50q8qzl1; Sun, 30 Aug 2020 18:41:49 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Bfhy50X9Nz2xZK; Sun, 30 Aug 2020 18:41:49 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Bfhy363Dbz2xlZ for ; Sun, 30 Aug 2020 18:41:47 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Bfhy25Fvtz1v for ; Sun, 30 Aug 2020 18:41:46 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1598812907; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=A+OTW7KtuXpj0OWl7sIPi52C3iWv3m8Vip+mdQ78tvM=; b=oYBIoGpsmrHGtptDteVi/3Pe/qT6XRQ0cdV7xkhbvvSAHN/7wk4VKg/tu/j/XgUupA+BGp F5LRNb9mFrriDNCA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1598812907; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=A+OTW7KtuXpj0OWl7sIPi52C3iWv3m8Vip+mdQ78tvM=; b=kPQ5m1CUMzCUtZl2GnkxbV+WpZBw0y1Mkmx9wwft+DAsE5zWOo9ARAssSg9ev3GzOkxADd qBOS+m+kz2A9QRD0WqRLOjx6qxOgHO6dNWpd7iGNuj/f8vJ4nq9Jb3LLo2Bj/+rAS+8GWk 1ae3vdv6KimM4OE9abltlA4GhGBvo/uFZzT/knTTUPNso5rSBZ5Brde5i7tPFKo0yqCTE4 Kx+Zl00MBIyJ+B/ZuON9L0+uRnUW1twpc4FzuRrvaWol65V/CWCGWzbqkDfOYfUfMEg4aL SQNAOuZ2nDffrOTDCvkf2iDy+72/IqWSVoxbVddLiDzbGhH2+Ao9gfETf3kTbw== Subject: [PATCH 2/3] country-overrides: add Amarutu Technology Ltd. networks with offshore location To: location@lists.ipfire.org References: From: =?utf-8?q?Peter_M=C3=BCller?= Message-ID: <85975c2d-9e09-baea-3b14-4abee5c75449@ipfire.org> Date: Sun, 30 Aug 2020 18:41:43 +0000 MIME-Version: 1.0 In-Reply-To: Content-Language: en-US Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=peter.mueller@ipfire.org X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-other.txt | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 8504933..6035962 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -48,11 +48,26 @@ descr: Altrosky Technology Ltd. remarks: fake offshore location (SC), traces back to CZ country: CZ +net: 31.220.0.0/22 +descr: Amarutu Technology Ltd. / KoDDoS / ESecurity +remarks: fake offshore location (BZ), traces back to NL +country: NL + +net: 31.220.40.0/23 +descr: Amarutu Technology Ltd. / KoDDoS / ESecurity +remarks: fake offshore location (BZ), traces back to NL +country: NL + net: 37.228.128.0/24 descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO +net: 85.202.80.0/24 +descr: Amarutu Technology Ltd. / KoDDoS / ESecurity +remarks: fake offshore location (BZ), traces back to US +country: US + net: 88.151.117.0/24 descr: Golden Internet LLC remarks: fake location (KP), WHOIS contact points to RU @@ -73,11 +88,21 @@ descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO +net: 185.169.253.0/24 +descr: Amarutu Technology Ltd. / KoDDoS / ESecurity +remarks: fake offshore location (BZ), traces back to US +country: US + net: 185.244.29.0/24 descr: Gerber EDV / David Craig remarks: bulletproof ISP, fake location (KP), traces back to SG country: SG +net: 198.144.120.0/23 +descr: Amarutu Technology Ltd. / KoDDoS / ESecurity +remarks: fake offshore location (BZ), traces back to NL +country: NL + net: 2a02:e00:ffe7::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from LT From patchwork Sun Aug 30 18:42:12 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3420 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Bfhyf2HTKz3x25 for ; Sun, 30 Aug 2020 18:42:18 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Bfhyf1BHjz1v; Sun, 30 Aug 2020 18:42:18 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Bfhyf0yYkz2xZK; Sun, 30 Aug 2020 18:42:18 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Bfhyd0MHJz2xZK for ; Sun, 30 Aug 2020 18:42:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Bfhyb6VsVz1v for ; Sun, 30 Aug 2020 18:42:15 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1598812936; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=PZLJyr6Ppjcl53hKnkeT2J5aLXPVJGwBtzf4WPNzkaA=; b=IkWgfHAS47oENnXzUyjIxJafHXwkKCHiAFAuZLguW1HzV+4x2X2lVqBT25VA1Ld0E5eBWC M9bj7Us8+8484yCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1598812936; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=PZLJyr6Ppjcl53hKnkeT2J5aLXPVJGwBtzf4WPNzkaA=; b=NtiS7/4a7L4eZwWEr77J4LB147yPFc9s81oiacKCPyV5/uqOj3x3hzHX5jbaCp4MVJ7jrg 4u4BEwMHpS2wEzhm/nGHAMhLJePRUSrh2EF8rsbxef1vtaLvQUo6mqjZBbR1pQGPBowQsE 2Xlq03bK+cz2lqxYE1j9q52vL8kjE5AXYs+gtJILLmcA0NuCwNNwjitOKWbscLLhBMM8qe uO5tWGaB+NZHS+s+FUWRCRjyxlVfd8D9xQo+VPQLqJui/lw5M+EFhttOPQos6/MCRKFseQ g/S6MUfo8KXb6L5MAiAqQcO6KpR4P9DVBSoBD97kWmWlNdBIiytfq6cWAhTC+A== Subject: [PATCH 3/3] A1 overrides: add 172.111.128.0/17 (Secure Internet LLC et al.) To: location@lists.ipfire.org References: <85975c2d-9e09-baea-3b14-4abee5c75449@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= Message-ID: <28f996f8-a38f-fad8-30a2-51923f4e5e91@ipfire.org> Date: Sun, 30 Aug 2020 18:42:12 +0000 MIME-Version: 1.0 In-Reply-To: <85975c2d-9e09-baea-3b14-4abee5c75449@ipfire.org> Content-Language: en-US Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=peter.mueller@ipfire.org X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-a1.txt | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index de36955..0b31948 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -772,7 +772,7 @@ remarks: Tor relay provider is-anonymous-proxy: yes net: 172.94.0.0/17 -descr: Secure Internet LLC / Internet Security / ... +descr: Secure Internet LLC / Internet Security / Uzair Gadit / ... remarks: VPN provider is-anonymous-proxy: yes @@ -781,6 +781,11 @@ descr: Google VPN remarks: VPN provider is-anonymous-proxy: yes +net: 172.111.128.0/17 +descr: Secure Internet LLC / Internet Security / Uzair Gadit / ... +remarks: VPN provider +is-anonymous-proxy: yes + net: 173.239.195.0/24 descr: VPN Consumer Network remarks: VPN provider