overrides/override-other.txt

   1 #
   2 # override-other [.txt]
   3 #
   4 # This file contains Autonomous Systems (AS) or IP networks/addresses
   5 # whose country information in corresponding RIR data is believed or proven
   6 # to be invalid or inaccurate and which do not match to one of the special categories
   7 # A[1-3].
   8 #
   9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
  10 # (networks owned by letterbox companies in offshore jurisdictions) or
  11 # hostile (faked RIR data in order to bypass location-based filtering).
  12 #
  13 # Please keep this file sorted.
  14 #
  15
  16 aut-num:        AS6134
  17 descr:          XNNET LLC
  18 remarks:        traces back to an unknown oversea location (HK?), seems to tamper with RIR data
  19 country:        HK
  20
  21 aut-num:        AS8359
  22 descr:          MTS PJSC
  23 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
  24 country:        RU
  25
  26 aut-num:        AS12025
  27 descr:          Iron Mountain Data Center
  28 remarks:        ISP located in US, but some RIR data for announced prefixes contain garbage
  29 country:        US
  30
  31 aut-num:        AS18013
  32 descr:          ASLINE LIMITED
  33 remarks:        IP hijacker, traces back to AP region
  34 country:        AP
  35
  36 aut-num:        AS18254
  37 descr:          KLAYER LLC
  38 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
  39 country:        AP
  40
  41 aut-num:        AS22769
  42 descr:          DDOSING NETWORK
  43 remarks:        IP hijacker located somewhere in AP, massively tampers with RIR data
  44 country:        AP
  45
  46 aut-num:        AS24009
  47 descr:          HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
  48 remarks:        IP hijacker (?) located in HK, tampers with RIR data
  49 country:        HK
  50
  51 aut-num:        AS24700
  52 descr:          Yes Networks Unlimited Ltd
  53 remarks:        traces to UA, but some RIR entries seem to contain garbage (VG)
  54 country:        UA
  55
  56 aut-num:        AS28098
  57 descr:          ABGON Comunicaciones
  58 remarks:        ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
  59 country:        CL
  60
  61 aut-num:        AS35042
  62 descr:          IP Interactive UG (haftungsbeschraenkt)
  63 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
  64 country:        BG
  65
  66 aut-num:        AS35251
  67 descr:          NetLab
  68 remarks:        tampers with RIR data, most probably located in HK
  69 country:        HK
  70
  71 aut-num:        AS35478
  72 descr:          Buena Telecom SRL
  73 remarks:        ISP located in RO, but RIR data for announced prefixes contain garbage
  74 country:        RO
  75
  76 aut-num:        AS37518
  77 descr:          Fiber Grid Inc.
  78 remarks:        tampers with RIR data, traces back to SE
  79 country:        SE
  80
  81 aut-num:        AS39287
  82 descr:          ab stract / Peter Kolmisoppi
  83 remarks:        tampers with RIR data, traces back to SE
  84 country:        SE
  85
  86 aut-num:        AS40034
  87 descr:          Confluence Networks Inc.
  88 remarks:        fake offshore location (VG), traces back to Austin, TX, US
  89 country:        US
  90
  91 aut-num:        AS41466
  92 descr:          Treidinvest LLC
  93 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
  94 country:        RU
  95
  96 aut-num:        AS42397
  97 descr:          Bunea TELECOM SRL
  98 remarks:        ISP located in RO, but some RIR data for announced prefixes contain garbage
  99 country:        RO
 100
 101 aut-num:        AS42745
 102 descr:          Safe Value Limited
 103 remarks:        tampers with RIR data, traces back to somewhere in central Europe
 104 country:        EU
 105
 106 aut-num:        AS42831
 107 descr:          UKSERVERS
 108 remarks:        ISP located in GB, but some RIR data for announced prefixes contain garbage
 109 country:        GB
 110
 111 aut-num:        AS42960
 112 descr:          Cloud Management LLC
 113 remarks:        tampers with RIR data, traces back to HK
 114 country:        HK
 115
 116 aut-num:        AS48090
 117 descr:          PPTECHNOLOGY LIMITED
 118 remarks:        bulletproof ISP (related to AS204655) located in NL
 119 country:        NL
 120
 121 aut-num:        AS49466
 122 descr:          KLAYER LLC
 123 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
 124 country:        AP
 125
 126 aut-num:        AS49505
 127 descr:          Selectel
 128 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 129 country:        RU
 130
 131 aut-num:        AS51558
 132 descr:          Smart Telecom S.A.R.L
 133 remarks:        tampers with RIR data, traces back to RU
 134 country:        RU
 135
 136 aut-num:        AS55933
 137 descr:          Cloudie Limited
 138 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 139 country:        AP
 140
 141 aut-num:        AS56611
 142 descr:          REBA Communications BV
 143 remarks:        bulletproof ISP (related to AS202425) located in NL
 144 country:        NL
 145
 146 aut-num:        AS57717
 147 descr:          FiberXpress BV
 148 remarks:        bulletproof ISP (related to AS202425) located in NL
 149 country:        NL
 150
 151 aut-num:        AS58073
 152 descr:          YISP BV
 153 remarks:        ISP located in NL, but some RIR data for announced prefixes contain garbage
 154 country:        NL
 155
 156 aut-num:        AS58271
 157 descr:          FOP Gubina Lubov Petrivna
 158 remarks:        bulletproof ISP operating from a war zone in eastern UA
 159 country:        UA
 160
 161 aut-num:        AS59580
 162 descr:          Batterflyai Media Ltd.
 163 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 164 country:        RU
 165
 166 aut-num:        AS62355
 167 descr:          Network Dedicated SAS
 168 remarks:        bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
 169 country:        NL
 170
 171 aut-num:        AS62468
 172 descr:          VpsQuan L.L.C.
 173 remarks:        claims to be located in US, but traces to HK
 174 country:        HK
 175
 176 aut-num:        AS134548
 177 descr:          DXTL Tseung Kwan O Service
 178 remarks:        tampers with RIR data, traces back to AP region
 179 country:        AP
 180
 181 aut-num:        AS137443
 182 descr:          Anchnet Asia Limited
 183 remarks:        IP hijacker located in HK, tampers with RIR data
 184 country:        HK
 185
 186 aut-num:        AS137951
 187 descr:          Clayer Limited
 188 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 189 country:        AP
 190
 191 aut-num:        AS139330
 192 descr:          SANREN DATA LIMITED
 193 remarks:        IP hijacker located somewhere in AP region, tampers with RIR data
 194 country:        AP
 195
 196 aut-num:        AS140733
 197 descr:          Wujidun Network Limited
 198 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 199 country:        AP
 200
 201 aut-num:        AS200699
 202 descr:          Datashield, Inc.
 203 remarks:        fake offshore location (SC), traces back to NL
 204 country:        NL
 205
 206 aut-num:        AS200845
 207 descr:          AVATEL TELECOM
 208 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 209 country:        ES
 210
 211 aut-num:        AS201133
 212 descr:          Verdina Ltd.
 213 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 214 country:        BG
 215
 216 aut-num:        AS201912
 217 descr:          FutureNow Incorporated
 218 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 219 country:        BG
 220
 221 aut-num:        AS202425
 222 descr:          IP Volume Inc.
 223 remarks:        bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
 224 country:        NL
 225
 226 aut-num:        AS202492
 227 descr:          SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
 228 remarks:        fake offshore location (SC), traces back to NL
 229 country:        NL
 230
 231 aut-num:        AS204655
 232 descr:          Novogara Ltd.
 233 remarks:        bulletproof ISP (strongly linked to AS202425) located in NL
 234 country:        NL
 235
 236 aut-num:        AS205026
 237 descr:          Hauer Hosting Services Limited
 238 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 239 country:        ES
 240
 241 aut-num:        AS207046
 242 descr:          Xtudio Networks S.L.U.
 243 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 244 country:        ES
 245
 246 aut-num:        AS207616
 247 descr:          Altrosky Technology Ltd.
 248 remarks:        fake offshore location (SC), traces back to CZ and NL
 249 country:        EU
 250
 251 aut-num:        AS208046
 252 descr:          Maximilian Kutzner trading as HostSlick
 253 remarks:        traces back to NL, but some RIR data for announced prefixes contain garbage
 254 country:        NL
 255
 256 aut-num:        AS209132
 257 descr:          Alviva Holding Limited
 258 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 259 country:        BG
 260
 261 aut-num:        AS209272
 262 descr:          Alviva Holding Limited
 263 remarks:        bulletproof ISP operating from a war zone in eastern UA
 264 country:        UA
 265
 266 aut-num:        AS209401
 267 descr:          Gudaev Maxim Amrakhovich
 268 remarks:        announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
 269 country:        EU
 270
 271 aut-num:        AS213058
 272 descr:          Private Internet Hosting LTD
 273 remarks:        bulletproof ISP located in RU
 274 country:        RU
 275
 276 aut-num:        AS213373
 277 descr:          IP Connect Inc.
 278 remarks:        fake offshore location (SC), traces back to NL
 279 country:        NL
 280
 281 aut-num:        AS262254
 282 descr:          DDOS-GUARD CORP.
 283 remarks:        fake offshore location (BZ), traces back to RU
 284 country:        RU
 285
 286 aut-num:        AS328543
 287 descr:          Sun Network Company Limited
 288 remarks:        IP hijacker, traces back to AP region
 289 country:        AP
 290
 291 aut-num:        AS398478
 292 descr:          PEG TECH INC
 293 remarks:        ISP located in HK, tampers with RIR data
 294 country:        HK
 295
 296 net:        5.1.68.0/24
 297 descr:      GaiacomLC
 298 remarks:    routed to DE, inaccurate RIR data
 299 country:    DE
 300
 301 net:        5.1.69.0/24
 302 descr:      GaiacomLC
 303 remarks:    routed to DE, inaccurate RIR data
 304 country:    DE
 305
 306 net:        5.1.83.0/24
 307 descr:      GaiacomLC
 308 remarks:    routed to DE, inaccurate RIR data
 309 country:    DE
 310
 311 net:        5.1.88.0/24
 312 descr:      GaiacomLC
 313 remarks:    routed to DE, inaccurate RIR data
 314 country:    DE
 315
 316 net:            5.252.32.0/22
 317 descr:          StormWall s.r.o.
 318 remarks:        claims to be located in DE, but traces back to somewhere else in central Europe
 319 country:        EU
 320
 321 net:            31.220.0.0/22
 322 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 323 remarks:        fake offshore location (BZ), traces back to NL
 324 country:        NL
 325
 326 net:            31.220.40.0/23
 327 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 328 remarks:        fake offshore location (BZ), traces back to NL
 329 country:        NL
 330
 331 net:            37.228.128.0/24
 332 descr:          FlokiNET Ltd.
 333 remarks:        fake offshore location (SC), traces back to RO
 334 country:        RO
 335
 336 net:            45.93.16.0/22
 337 descr:          IPv4 Superhub Limited
 338 remarks:        network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
 339 country:        HK
 340
 341 net:            45.134.12.0/24
 342 descr:          MS Network LTD
 343 remarks:        fake offshore location (SC), traces back to NLm
 344 country:        NL
 345
 346 net:            45.134.144.0/22
 347 descr:          IPv4 Superhub Limited
 348 remarks:        same as 45.93.16.0/22
 349 country:        HK
 350
 351 net:            45.145.36.0/22
 352 descr:          GlobalCache Technology CO., Ltd.
 353 remarks:        claims to be located in DE, but traces back to HK
 354 country:        HK
 355
 356 net:            45.148.167.0/24
 357 descr:          US AFG 20200130
 358 remarks:        claims to be located in US, but traces back to SK
 359 country:        SK
 360
 361 net:            47.60.0.0/14
 362 descr:          Vodafone US Inc.
 363 remarks:        large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
 364 country:        ES
 365
 366 net:            85.202.80.0/24
 367 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 368 remarks:        fake offshore location (BZ), traces back to US
 369 country:        US
 370
 371 net:            88.151.117.0/24
 372 descr:          Golden Internet LLC
 373 remarks:        fake location (KP), WHOIS contact points to RU
 374 country:        RU
 375
 376 net:            95.181.152.0/21
 377 descr:          QWARTA LLC
 378 remarks:        fake location (US), WHOIS contact and traceroutes point to RU
 379 country:        RU
 380
 381 net:            103.197.148.0/22
 382 descr:          I.C.S. Trabia-Network S.R.L.
 383 remarks:        fake offshore location (HK), traces back to MD
 384 country:        MD
 385
 386 net:            130.117.0.0/16
 387 descr:          PSINet, Inc. (PSI) / Cogent Communications
 388 remarks:        Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
 389 country:        EU
 390
 391 net:            178.239.20.0/24
 392 descr:          Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 393 remarks:        fake location (BA), traces back to RO
 394 country:        RO
 395
 396 net:            185.10.68.0/24
 397 descr:          FlokiNET Ltd.
 398 remarks:        fake offshore location (SC), traces back to RO
 399 country:        RO
 400
 401 net:            185.56.80.0/22
 402 descr:          Datashield, Inc.
 403 remarks:        fake offshore location (SC), traces back to NL
 404 country:        NL
 405
 406 net:        185.140.204.0/22
 407 descr:      Hornetsecurity GmbH
 408 remarks:    all suballocations are used in DE, but are assigned to US
 409 country:    DE
 410
 411 net:            185.175.93.0/24
 412 descr:          Perfect Hosting Solutions
 413 remarks:        bulletproof ISP related to AS204655, traces back to BG
 414 country:        BG
 415
 416 net:            185.169.253.0/24
 417 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 418 remarks:        fake offshore location (BZ), traces back to US
 419 country:        US
 420
 421 net:            185.193.91.0/24
 422 descr:          Romanenko Stanislav Sergeevich
 423 remarks:        bulletproof ISP related to AS204655, traces back to BG
 424 country:        BG
 425
 426 net:            185.193.124.0/22
 427 descr:          ab stract / Njalla
 428 remarks:        bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
 429 country:        SE
 430
 431 net:            185.227.152.0/22
 432 descr:          XinYuan Interconnect (HONG KONG [sic!]) Limited
 433 remarks:        claims to be located in DE, traces back to HK
 434 country:        HK
 435
 436 net:            190.2.128.0/19
 437 descr:          WorldStream (LATAM) BV
 438 remarks:        LACNIC IP chunk solely used in NL (inaccurate data)
 439 country:        NL
 440
 441 net:            192.12.3.0/24
 442 descr:          Deep Eddy Internet Consulting
 443 remarks:        claims to be located in US, traces back to AP region
 444 country:        AP
 445
 446 net:            193.29.12.0/22
 447 descr:          Bunea TELECOM SRL
 448 remarks:        RIR data contain garbage for this network
 449 country:        RO
 450
 451 net:            193.119.0.0/19
 452 descr:          NetConn Services Ltd
 453 remarks:        APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
 454 country:        AP
 455
 456 net:            198.144.120.0/23
 457 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 458 remarks:        fake offshore location (BZ), traces back to NL
 459 country:        NL
 460
 461 net:            202.128.108.0/23
 462 descr:          NetConn Services Ltd
 463 remarks:        APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
 464 country:        AP
 465
 466 net:            2a02:e00:ffe7::/48
 467 descr:          Bradler & Krantz GmbH & Co. KG
 468 remarks:        allocated to DE, but actually announced from LT
 469 country:        LT
 470
 471 net:            2a02:e00:ffe8::/48
 472 descr:          Bradler & Krantz GmbH & Co. KG
 473 remarks:        allocated to DE, but actually announced from MD
 474 country:        MD
 475
 476 net:            2a02:e00:ffe9::/48
 477 descr:          Bradler & Krantz GmbH & Co. KG
 478 remarks:        allocated to DE, but actually announced from GB
 479 country:        GB
 480
 481 net:            2a05:9f06::/31
 482 descr:          Sibyl System LTD
 483 remarks:        RIR data contain garbage
 484 country:        NL
 485
 486 net:            2a06:e80::/29
 487 descr:          Datashield, Inc.
 488 remarks:        fake offshore location (SC), traces back to NL
 489 country:        NL