From patchwork Sun Jun 20 15:18:14 2021 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 4449 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4G7GWd0Fd1z3wcf for ; Sun, 20 Jun 2021 15:18:21 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4G7GWc2THrz176; Sun, 20 Jun 2021 15:18:20 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4G7GWb5L7Cz2xff; Sun, 20 Jun 2021 15:18:19 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4G7GWZ1glVz2xQs for ; Sun, 20 Jun 2021 15:18:18 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4G7GWY1h1rz176 for ; Sun, 20 Jun 2021 15:18:17 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1624202297; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=KCSNW2njFd64/Cuq5mf6s1hsnVW1rWLUPnGIxkR+kTM=; b=DkEjWVCMZnIeICd+gxAQDyh8w0NG6IfMAH5UVfOV1R3uux6Jh/Q7Ihs6q+hYnJmowzUO/a eDqD5FJjQ/lRVWBw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1624202297; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=KCSNW2njFd64/Cuq5mf6s1hsnVW1rWLUPnGIxkR+kTM=; b=qYRvK+Us6LQe95jUhiURYo9m6s55wwXTe3YnIr0EXJvXURMDuSj48UDPl70rWjTV2I+Ors tX2huMhjNInb5hrp02PDGVf6MaQkfaop/Ztsoxb2eqCInTjbUidgmIVXMsMGMZsZ1v8ZeC VNtgZVGrEADjZAKg8AFgzUc5Ry4b36j0/ddXGo0QSwJ74tXGEHYW6/+gVkTZa0BcdHfpft wpez+LIOgR/6mI6HfSaOrWuPNr1pCm5RCd9+cPOkXDzDWc3rMvxWtgnFeQZqmAicLlDwgl BwUqPjeXTOx0pxQzkhThVLPHpFbYNZmaRxDdiNPrdYxXVnYlPAdKL85iPo34Sw== To: "IPFire: Location" From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH] override-{a2,other}: weekly batch of various overrides Message-ID: Date: Sun, 20 Jun 2021 17:18:14 +0200 MIME-Version: 1.0 Content-Language: en-US X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-a2.txt | 6 +++ overrides/override-other.txt | 85 ++++++++++++++++++++++++++++++++++++ 2 files changed, 91 insertions(+) diff --git a/overrides/override-a2.txt b/overrides/override-a2.txt index 24db2a8..eeb4099 100644 --- a/overrides/override-a2.txt +++ b/overrides/override-a2.txt @@ -1758,6 +1758,12 @@ descr: AITelecom S.A. de C.V. remarks: Satellite Internet provider is-satellite-provider: yes +net: 202.144.196.0/22 +descr: CoreLink Communications +remarks: Chinese satellite Internet provider [high confidence, but not proofed] +is-satellite-provider: yes +country: AP + net: 202.174.128.0/19 descr: SPEEDCAST Limited remarks: Satellite Internet provider diff --git a/overrides/override-other.txt b/overrides/override-other.txt index ce5bdb5..87457d8 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -138,6 +138,16 @@ descr: Neterra Ltd. remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage country: BG +aut-num: AS35145 +descr: iDea Leaper Innovation Inc. +remarks: tampers with RIR data, traces back to AP area +country: AP + +aut-num: AS35619 +descr: Kevin Buehl +remarks: ... who thinks messing with countries is funny :-/ +country: EU + aut-num: AS35624 descr: Neterra Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage @@ -228,6 +238,16 @@ descr: IP Oleinichenko Denis remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS47105 +descr: Dreamtorrent Corp +remarks: traceroutes dead-end somewhere in or near RU +country: RU + +aut-num: AS47482 +descr: Spectre Operations BV +remarks: ISP located in NL, but some RIR data for suballocations of announced prefixes contain garbage +country: NL + aut-num: AS48090 descr: PPTECHNOLOGY LIMITED remarks: bulletproof ISP (related to AS204655) located in NL @@ -258,6 +278,11 @@ descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU country: EU +aut-num: AS49981 +descr: Worldstream BV +remarks: ISP located in NL, but many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS50360 descr: Tamatiya EOOD / 4Vendeta remarks: Questionable (at best) ISP located in BG, clients massively tamper with RIR data @@ -338,6 +363,11 @@ descr: FOP Gubina Lubov Petrivna remarks: bulletproof ISP operating from a war zone in eastern UA country: UA +aut-num: AS58294 +descr: CloudWall Ltd. +remarks: RIR data neither contain a postal address nor a phone number, traceroutes end in Sofia, BG +country: BG + aut-num: AS58349 descr: INNETRA PC remarks: another shady customer of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU @@ -353,6 +383,16 @@ descr: Batterflyai Media Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS59753 +descr: Vault Dweller OU +remarks: traceroutes dead-end somewhere in or near RU +country: RU + +aut-num: AS60144 +descr: 3W Infra B.V. +remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage +country: NL + aut-num: AS60404 descr: The Infrastructure Group B.V. remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage @@ -373,6 +413,11 @@ descr: LeaseWeb Netherlands B.V. remarks: ISP located in Amsterdam, NL, but many RIR data for announced prefixes contain garbage country: NL +aut-num: AS61218 +descr: 4b42 UG (haftungsbeschränkt) +remarks: ... who thinks messing with countries is funny :-/ +country: LI + aut-num: AS61977 descr: Vivo Trade L.P. remarks: another shady customer of "DDoS Guard Ltd." @@ -438,6 +483,11 @@ descr: DXTL Tseung Kwan O Service remarks: tampers with RIR data, traces back to AP region country: AP +aut-num: AS136274 +descr: Cloud Servers Pvt Ltd +remarks: ISP located in NL, all RIR data for announced prefixes contain garbage +country: NL + aut-num: AS136988 descr: Leaseweb Australia Pty. Ltd. remarks: ISP located in AU, some RIR data for announced prefixes contain garbage @@ -483,6 +533,11 @@ descr: Wujidun Network Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region country: AP +aut-num: AS196682 +descr: FLP Kochenov Aleksej Vladislavovich +remarks: ISP located in UA, but RIR data for announced prefixes all say EU +country: UA + aut-num: AS200019 descr: ALEXHOST SRL remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network @@ -548,6 +603,11 @@ descr: DataClub S.A. remarks: another shady customer of "DDoS Guard Ltd." country: RU +aut-num: AS203038 +descr: QuxLabs UG +remarks: traces back to SE +country: SE + aut-num: AS204136 descr: Kevin Holly trading as Silent Ghost e.U. remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/ @@ -638,6 +698,11 @@ descr: Alviva Holding Limited remarks: bulletproof ISP operating from a war zone in eastern UA country: UA +aut-num: AS209366 +descr: SEMrush CY LTD +remarks: claims CY for announced prefixes, but they are all hosted in NL +country: NL + aut-num: AS209401 descr: Gudaev Maxim Amrakhovich remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage @@ -648,11 +713,26 @@ descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garbage country: UA +aut-num: AS211380 +descr: PAYWISE HOLDING Sp. z.o.o. +remarks: ISP located in NL, but RIR data for announced prefixes contain garbage +country: NL + +aut-num: AS211839 +descr: JMT Paso Limited +remarks: ISP located in NL, but RIR data for announced prefixes contain garbage +country: NL + aut-num: AS211849 descr: Kakharov Orinbassar Maratuly remarks: ISP located in RU, but RIR data for announced prefixes contain garbage country: RU +aut-num: AS211992 +descr: WFD SERVICE LTD +remarks: ISP located in NL, but RIR data for announced prefixes contain garbage +country: NL + aut-num: AS212231 descr: Harry Dowd remarks: ISP located in GB, but RIR data for announced prefixes contain garbage @@ -968,6 +1048,11 @@ descr: Securebit AG remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/ country: CH +net: 2a0e:b100:3000::/40 +descr: 4b42 UG (haftungsbeschränkt) +remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/ +country: DE + net: 2a0e:b101:3000::/40 descr: 4b42 UG (haftungsbeschränkt) remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/