From patchwork Tue Sep 8 15:41:35 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3443 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Bm8Xy1JCDz3x3K for ; Tue, 8 Sep 2020 15:42:26 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Bm8Xx0JRfzkH; Tue, 8 Sep 2020 15:42:24 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Bm8Xw6FrJz2xNg; Tue, 8 Sep 2020 15:42:24 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Bm8Xv2pDzz2xGd for ; Tue, 8 Sep 2020 15:42:23 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Bm8Xp1wrfzkH for ; Tue, 8 Sep 2020 15:42:17 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1599579742; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=aKoxEGN6xeni/6wJE4mWQnHgZUYkpSF0ElFBIqPku40=; b=HiNVVINbxubdON3C1Cmm8MrBFB0u2e2vzwuY9o+B7GABV7FpZ1s9B04hdsXOjRKwZ5qZHe SOleSmGyTdH4yOAQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1599579742; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=aKoxEGN6xeni/6wJE4mWQnHgZUYkpSF0ElFBIqPku40=; b=JfpY8L44R+BFIagY3WwfOAzO4fZnHxHwYaBJB0/3FD2t0jmjrCRIJLdwD45J6/9D2g4N70 phIYo0JLFeEX4wueUr8QbFSWTIXi7U9YXnW0XK2bRYffxQ3boGKz+dCHSwMLN7o+4ZEIf1 ZRlxersORjYsH2Xkz+CQ/EfLPE2VBCFBeHPg126Q9Rjp7CIbJODslWXLCwB50+/l581GID g9eeXXv7QQ3itOQ0z0N5RUkE5ppnGF6lAM23Zp6yw5610d8Dbj4oWOOn8GGuFnOHab/Tn0 H3vdEiko5qKC4VM+PAEZNq6vjcUXNTqanKFCiW7pvJvj3OqipCkPhocto20KaA== To: location@lists.ipfire.org From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH 1/3] country-overrides: add 47.60.0.0/14 Message-ID: <6bb29065-abc8-83cf-62dd-f8bdc66d1c86@ipfire.org> Date: Tue, 8 Sep 2020 15:41:35 +0000 MIME-Version: 1.0 Content-Language: en-US Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=peter.mueller@ipfire.org X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Triggered by: https://community.ipfire.org/t/location-filter-since-core-148/3149/13 Signed-off-by: Peter Müller --- overrides/override-other.txt | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 6035962..5e06a6d 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -63,6 +63,11 @@ descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO +net: 47.60.0.0/14 +descr: Vodafone US Inc. +remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data) +country: ES + net: 85.202.80.0/24 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to US From patchwork Tue Sep 8 15:42:31 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3444 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Bm8Yz1GdJz3x3K for ; Tue, 8 Sep 2020 15:43:19 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Bm8Yz08LpzJ9; Tue, 8 Sep 2020 15:43:19 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Bm8Yy6sk3z2xNg; Tue, 8 Sep 2020 15:43:18 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Bm8Yy0t3mz2xj1 for ; Tue, 8 Sep 2020 15:43:18 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Bm8Ys6CBQzJ9 for ; Tue, 8 Sep 2020 15:43:12 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1599579797; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=GhPZWUh1A/BWGOk5h9n+MLAn8l2CyTVye7tDtSJDP88=; b=3GymFJtdxzgwhf081fdTUlCVECIH/2r0mT1c1+HE1lZSJN45zKvTbGmVJ0VBymJehomtjB TnmKyKuTTse+FwDw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1599579797; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=GhPZWUh1A/BWGOk5h9n+MLAn8l2CyTVye7tDtSJDP88=; b=dYSx73CWCFeV20I/gYm35UPPWNxJtOZG9vkMXOjKVRsRE37MB4cYGPnOWRxB/B/Qd9Vyu3 XVGS2o61CPPLDmGel3Og3Y/W8f69O4APDEk1R6yJYp8+FT06b2FSVtYxBXiga7m340Qfo3 z8I7KSWHVagqdJhuGO9kd64+h4729aikky/4KNr6iO0FvJeNQEHsHkRbutkzpZVqSsqi0K cUeAO5o/kT7LB1H4dOt74led+jyp51bYwAH2WzsC4Utn7NPKuwrdxUqfTwgdaZIo/1dG4j QxySw7jAY9VpX8fN248JgpLQvQ3Et3OsYbqubgohwRHKBpzi10AAnipa6FfLKg== Subject: [PATCH 2/3] country-overrides: add various networks with fake/garbage RIR data To: location@lists.ipfire.org References: <6bb29065-abc8-83cf-62dd-f8bdc66d1c86@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= Message-ID: <93b100d2-cbde-220d-8969-bcea3bdf09b1@ipfire.org> Date: Tue, 8 Sep 2020 15:42:31 +0000 MIME-Version: 1.0 In-Reply-To: <6bb29065-abc8-83cf-62dd-f8bdc66d1c86@ipfire.org> Content-Language: en-US Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=peter.mueller@ipfire.org X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-other.txt | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) diff --git a/overrides/override-other.txt b/overrides/override-other.txt index 5e06a6d..6327bfb 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -13,6 +13,16 @@ # Please keep this file sorted. # +aut-num: AS35042 +descr: IP Interactive UG (haftungsbeschraenkt) +remarks: ISP located in BG, but RIR data for announced prefixes contain garbage +country: BG + +aut-num: AS42397 +descr: Bunea TELECOM SRL +remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage +country: RO + aut-num: AS48090 descr: PPTECHNOLOGY LIMITED remarks: bulletproof ISP (related to AS204655) located in NL @@ -33,6 +43,16 @@ descr: Network Dedicated SAS remarks: bulletproof ISP, claims to be located in CH, but traces to NL country: NL +aut-num: AS201133 +descr: Verdina Ltd. +remarks: ISP located in BG, but RIR data for announced prefixes contain garbage +country: BG + +aut-num: AS201912 +descr: FutureNow Incorporated +remarks: ISP located in BG, but RIR data for announced prefixes contain garbage +country: BG + aut-num: AS202425 descr: IP Volume Inc. remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL @@ -48,6 +68,11 @@ descr: Altrosky Technology Ltd. remarks: fake offshore location (SC), traces back to CZ country: CZ +aut-num: AS209132 +descr: Alviva Holding Limited +remarks: ISP located in BG, but RIR data for announced prefixes contain garbage +country: BG + net: 31.220.0.0/22 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to NL @@ -103,6 +128,11 @@ descr: Gerber EDV / David Craig remarks: bulletproof ISP, fake location (KP), traces back to SG country: SG +net: 193.29.12.0/22 +descr: Bunea TELECOM SRL +remarks: RIR data contain garbage for this network +country: RO + net: 198.144.120.0/23 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to NL From patchwork Tue Sep 8 15:43:16 2020 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 3445 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4Bm8Zn22hRz3x3K for ; Tue, 8 Sep 2020 15:44:01 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail02.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4Bm8Zn0qvDzwq; Tue, 8 Sep 2020 15:44:01 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4Bm8Zn0HQGz2xNg; Tue, 8 Sep 2020 15:44:01 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4Bm8Zl6W0Hz2xNg for ; Tue, 8 Sep 2020 15:43:59 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 4Bm8Zj1f1SzJ9 for ; Tue, 8 Sep 2020 15:43:55 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1599579839; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=khY0+HDZWwXeIpIC5cdUBxkaRhMyQAQHMsXxixT3zs0=; b=kMJ7Nlec22VSmf3oTiZ+0pHDGcf+DxjNxc2uVypTFl0AS4knCYdc5E/Ov6k2a55cEFBvcd 92nLZ1cn5K37HGBA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1599579839; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=khY0+HDZWwXeIpIC5cdUBxkaRhMyQAQHMsXxixT3zs0=; b=BkjZ9nziXl6cMV1HAfy7Mlds7EqKdjsmZhcIsWYbxpYMKipp9rVQmDBM3iMLxosx+91TKt V5lgr8D3XWlcKJhrv3SBuSIqr/G7/Q6oK9GSaNE+z8IdWma3m+Mbr6F+H8Ho3XzfgCOnpI 0bzPsClroVusGHLkToml/vhkDUGsFJSqIcrtuLDOmJMeexwQsXRTPTaEpriZZXMtli0Qoa 1zhDH3SBXaI1xSBsrsWVx5PuLqlHjvmzKaeYxm5rQDErxv188Y22J4eintn3OqUOxGX9qG wuflCsaBSpYZQlW3/1NyNecGonhdcM73LjIUdYYTobRyNb29tACdAqZq+RYSpA== Subject: [PATCH 3/3] A1 overrides: add 45.151.115.0/24 (ikoProxies) To: location@lists.ipfire.org References: <6bb29065-abc8-83cf-62dd-f8bdc66d1c86@ipfire.org> <93b100d2-cbde-220d-8969-bcea3bdf09b1@ipfire.org> From: =?utf-8?q?Peter_M=C3=BCller?= Message-ID: <4679f725-a6c1-16d9-a074-6d319f5e20d0@ipfire.org> Date: Tue, 8 Sep 2020 15:43:16 +0000 MIME-Version: 1.0 In-Reply-To: <93b100d2-cbde-220d-8969-bcea3bdf09b1@ipfire.org> Content-Language: en-US Authentication-Results: mail01.ipfire.org; auth=pass smtp.mailfrom=peter.mueller@ipfire.org X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-a1.txt | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/overrides/override-a1.txt b/overrides/override-a1.txt index 0b31948..82d52ff 100644 --- a/overrides/override-a1.txt +++ b/overrides/override-a1.txt @@ -215,7 +215,6 @@ descr: VPNTunnel / Hushy VPN / Anonine VPN / Edelino Commerce Inc. remarks: VPN provider is-anonymous-proxy: yes - net: 23.129.64.0/24 descr: Emerald Onion remarks: Tor relay provider @@ -361,6 +360,12 @@ descr: VPN Consumer Network remarks: VPN provider is-anonymous-proxy: yes +net: 45.151.115.0/24 +descr: ikoProxies [high confidence, but not proofed] +remarks: VPN provider located in NL +is-anonymous-proxy: yes +country: NL + net: 45.154.138.0/24 descr: Express VPN International Ltd remarks: VPN provider