From patchwork Fri Feb 4 13:35:34 2022 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: =?utf-8?q?Peter_M=C3=BCller?= X-Patchwork-Id: 5051 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4JqxPV0zF6z3wsl for ; Fri, 4 Feb 2022 13:35:42 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384 client-signature ECDSA (P-384) client-digest SHA384) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4JqxPS6vKHz3wH; Fri, 4 Feb 2022 13:35:40 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4JqxPS52Gmz2xGQ; Fri, 4 Feb 2022 13:35:40 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) client-signature ECDSA (P-384)) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4JqxPR6lz9z2xbW for ; Fri, 4 Feb 2022 13:35:39 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-384) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4JqxPQ5qXLz77 for ; Fri, 4 Feb 2022 13:35:38 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1643981739; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Gxed1lkcsHqsLxxfW1zeLJwv2IIv1r/N+xYbQ7ogtZo=; b=vPoA2RVPXItarOjQbmNTsBcx5kj1NaCTSNweAm94NmF8AOx8ICettCXpBhog4uhjsQf5FA ej8onZviifdA5/DA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1643981739; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=Gxed1lkcsHqsLxxfW1zeLJwv2IIv1r/N+xYbQ7ogtZo=; b=wG9eizA9n5Z0VGGCo1iXV7ziz2OlIgrnTh0qbe5V8d3QF9mtFSxNUJJz293uI7T94NewHl w/XmJqECqJsdNbd8ZJu70GkORCQaM7weHY/zPMwHv6YZXIDAqfWJsSLru7wHK4k3o5Qx3D yXEhUPe5f8zbdcuc8I53ppPfSrbryYxByzMYcD8+l0cCfqK68OlH1uZ5YmvhW/OQNOXrFh RexFZvL6DL7a7A9Wb8EmTsey+v6119cJ+CxWftchKHbetKntWd1PWM+o0yHMc2YX6XhcAV +F0OSQp5Dx/By68cJ0mU9jMUlppbmxQOWhNHJg7KuOiSnblBEudTefF2Sw5Q2w== Message-ID: Date: Fri, 4 Feb 2022 13:35:34 +0000 MIME-Version: 1.0 Content-Language: en-US To: "IPFire: Location" From: =?utf-8?q?Peter_M=C3=BCller?= Subject: [PATCH] override-{a3,other,xd}: Regular batch of various overrides X-BeenThere: location@lists.ipfire.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: location-bounces@lists.ipfire.org Sender: "Location" Signed-off-by: Peter Müller --- overrides/override-a3.txt | 5 ++++ overrides/override-other.txt | 44 ++++++++++++++++++++++++++++++++++-- overrides/override-xd.txt | 5 ++++ 3 files changed, 52 insertions(+), 2 deletions(-) diff --git a/overrides/override-a3.txt b/overrides/override-a3.txt index 6b8f886..ce51889 100644 --- a/overrides/override-a3.txt +++ b/overrides/override-a3.txt @@ -208,6 +208,11 @@ descr: coreIT.pl remarks: Generic anycast network is-anycast: yes +aut-num: AS59796 +descr: StormWall s.r.o. +remarks: Worldwide active CDN +is-anycast: yes + aut-num: AS60626 descr: Leaseweb CDN B.V. remarks: Generic anycast network diff --git a/overrides/override-other.txt b/overrides/override-other.txt index a8faabf..b74c1e3 100644 --- a/overrides/override-other.txt +++ b/overrides/override-other.txt @@ -161,14 +161,19 @@ country: IR aut-num: AS15828 descr: Blue Diamond Network Co., Ltd. -remarks: Shady ISP located somewhere in AP -country: AP +remarks: Shady ISP, claims GB or IR for it's prefixes, but they all end up near Vilnius, LT +country: LT aut-num: AS16262 descr: Datacheap Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU +aut-num: AS17447 +descr: Net4India Ltd +remarks: Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS18185 name: Northern Taiwan Community University remarks: has no sane AS name set in APNIC DB @@ -188,6 +193,11 @@ descr: ITL LLC remarks: ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data country: NL +aut-num: AS23470 +descr: ReliableSite.Net LLC +remarks: ISP located in US, but RIR data for announced prefixes contain garbage +country: US + aut-num: AS23858 descr: xTom Pty. Ltd. remarks: ISP located in AU, RIR data for announced prefixes contain garbage @@ -793,6 +803,11 @@ descr: Sun Network (Hong Kong) Limited remarks: ISP and/or IP hijacker located somewhere in AP country: AP +aut-num: AS132335 +descr: LeapSwitch Networks Pvt Ltd +remarks: ISP and/or IP hijacker located in IN +country: IN + aut-num: AS132369 descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED remarks: ISP located in HK, tampers with RIR data @@ -1198,6 +1213,11 @@ descr: Packet Flip, LLC remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US +aut-num: AS209654 +descr: Delis LLC +remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS210119 descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garbage @@ -1208,6 +1228,11 @@ descr: Des Capital B.V. remarks: Shady ISP located in NL, but RIR data for announced prefixes contain garbage country: NL +aut-num: AS211252 +descr: Delis LLC +remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage +country: NL + aut-num: AS211380 descr: PAYWISE HOLDING Sp. z.o.o. remarks: ISP located in NL, but RIR data for announced prefixes contain garbage @@ -1388,6 +1413,11 @@ descr: Wolverine Trading, LLC remarks: IP hijacker located in US, tampers with RIR data country: US +aut-num: AS400377 +descr: Serverion LLC +remarks: ISP located in NL, some RIR data contain garbage +country: NL + net: 5.1.68.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data @@ -1598,6 +1628,11 @@ descr: Hornetsecurity GmbH remarks: all suballocations are used in DE, but are assigned to US country: DE +net: 185.143.223.0/24 +descr: Lenar Davletshin +remarks: traceroutes dead-end somewhere after entering Voxility's network in Vienna, but that's not the location of this network +country: EU + net: 185.175.93.0/24 descr: Perfect Hosting Solutions remarks: bulletproof ISP related to AS204655, traces back to BG @@ -1653,6 +1688,11 @@ descr: QUIKA LTD remarks: claims to be located in DE, traces back to GB country: GB +net: 194.87.218.0/24 +descr: Hauer Hosting Services Limited +remarks: traces back to RU +country: RU + net: 195.66.165.0/24 descr: Posta Crne Gore remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html diff --git a/overrides/override-xd.txt b/overrides/override-xd.txt index 2b50406..131e24d 100644 --- a/overrides/override-xd.txt +++ b/overrides/override-xd.txt @@ -138,6 +138,11 @@ descr: 1337TEAM LIMITED / eliteteam[.]to remarks: Owned by an offshore letterbox company, suspected rogue ISP drop: yes +aut-num: AS57523 +descr: Chang Way Technologies Co. Limited +remarks: bulletproof ISP, C&C server hosting galore +drop: yes + aut-num: AS57717 descr: FiberXpress BV remarks: bulletproof ISP (related to AS202425) located in NL