2 # override-other [.txt]
4 # This file contains Autonomous Systems and IP networks whose RIR data are believed to be inaccurate,
5 # incomplete, or bogus on purpose and by chance. A small subset of its entries applies to AS descriptions,
6 # while the majority covers country code assignments.
8 # The latter are crucial due to location-based firewalling or routing. Inaccurate country code assignments
9 # therefore pose a security threat to these users, especially if being set intentionally to circumvent such
12 # The term "location" may refer to the actual, physical location of a network (usually hard to enumerate
13 # beyond a country-level), or its jurisdiction. To the best of our knowledge, the contents of "country"-fields
14 # in RIR databases were never clarified in this context.
16 # When in doubt, the physical location of a network will be used below, especially if the jurisdiction of a
17 # network appears to be not helpful at all, such as offshore letterbox companies on the other end of the world.
19 # In case an AS or IP network is also flagged (A[1-3], XD), the necessary directives should not go into
20 # this file, but rather into overrides-{a[1-3],xd}.txt - overrides-other.txt should always be the last
21 # preference, to keep things tidy.
23 # Improvement suggestions are appreciated, please submit them as patches to the location mailing
24 # list. Refer to https://lists.ipfire.org/mailman/listinfo/location and https://wiki.ipfire.org/devel/contact
25 # for further information.
27 # Please keep this file sorted.
31 descr: Jisc Services Limited
32 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
36 descr: SUNET Swedish University Network
37 remarks: ISP located in SE, but some RIR data for announced prefixes contain garbage
41 name: Tampere University of Technology
42 remarks: has no sane AS name set in RIPE DB
46 remarks: has no sane AS name set in APNIC DB
50 remarks: has no sane AS name set in APNIC DB
53 descr: WNET TELECOM USA Corp.
54 remarks: traces back to various locations in UA, seems to tamper with RIR data
58 descr: BTnet UK Regional network
59 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
63 descr: PJSC "Vimpelcom"
64 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
69 remarks: ISP (?) located in ZA, but some RIR data for announced prefixes contain garbage
73 name: Chinanet Backbone
74 remarks: has no sane AS name set in APNIC DB
77 descr: Companhia de Telecomunicacones de Macau SARL
78 remarks: ISP located in MO, but some RIR data needs manual correction due to ARIN DB situation
82 name: Software Technology Park of India
83 remarks: has no sane AS name set in APNIC DB
87 remarks: ISP located in JP, RIR data for announced prefixes contain garbage
91 name: Indonesia Network Information Center
92 remarks: has no sane AS name set in APNIC DB
95 name: China169 Beijing Broadband Network
96 remarks: has no sane AS name set in APNIC DB
99 descr: Tianhai InfoTech
100 remarks: ISP located somewhere in AP
104 descr: Greek Research and Technology Network (GRNET) S.A.
105 remarks: ... located in GR
109 descr: Magyar Telekom Nyrt.
110 remarks: ISP located in HU, but some RIR data for announced prefixes contain garbage
115 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
120 remarks: traces back to HK, seems to tamper with RIR data
124 name: Zajil International Telecom Company
125 remarks: has no sane AS name set in RIPE DB
128 descr: Leaseweb USA, Inc.
129 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
134 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
138 descr: ZeXoTeK IT-Services GmbH
139 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
143 descr: HGC Global Communications Limited
144 remarks: Jurisdiction is HK, pinning the location there
148 descr: xTom Hong Kong Limited
149 remarks: ISP located in HK, RIR data for announced prefixes contain garbage
153 descr: HK Broadband Network Ltd.
154 remarks: ISP located in HK, some RIR data for announced prefixes contain garbage
158 descr: Iron Mountain Data Center
159 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
163 descr: PJSC Rostelecom
164 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
169 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
173 descr: Sokolov Dmitry Nikolaevich
174 remarks: ISP located in RU, but many RIR data for announced prefixes contain garbage
179 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
183 descr: LUKOIL Technology Services GmbH
184 remarks: T.I.L.: AT is RU, too
188 descr: UAB "Bite Lietuva"
189 remarks: ISP located in LT, but some RIR data for announced prefixes contain garbage
194 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
198 descr: Iranian Research Organization for Science & Technology
199 remarks: ISP located in IR, but some RIR data for announced prefixes contain garbage
203 descr: Blue Diamond Network Co., Ltd.
204 remarks: Shady ISP, claims GB or IR for it's prefixes, but they all end up near Vilnius, LT
208 descr: Datacheap Ltd.
209 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
214 remarks: Serverion customer in NL, many RIR data for announced prefixes contain garbage
218 name: Northern Taiwan Community University
219 remarks: has no sane AS name set in APNIC DB
222 descr: Isomedia, Inc.
223 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
228 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
233 remarks: ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data
237 descr: ReliableSite.Net LLC
238 remarks: ISP located in US, but RIR data for announced prefixes contain garbage
242 descr: xTom Pty. Ltd.
243 remarks: ISP located in AU, RIR data for announced prefixes contain garbage
248 remarks: ISP located in somewhere in AP
252 descr: Yes Networks Unlimited Ltd
253 remarks: traces to UA, but some RIR entries seem to contain garbage (VG)
257 descr: myLoc managed IT AG
258 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
262 descr: Netcalibre Ltd.
263 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
267 descr: NETACTION TELECOM SRL-D
268 remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage
273 remarks: traces back to NL
277 descr: PureVoltage Hosting Inc.
278 remarks: ISP and IP hijacker located in US, but some RIR data for announced prefixes contain garbage
282 descr: GBTCloud, Inc.
283 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
287 descr: Leaseweb USA, Inc.
288 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
292 descr: Amnet Telecomunicaciones S.A.
293 remarks: ISP located in NI, but some prefixes needs manual correction due to LACNIC DB situation, see also: #12775
297 descr: ABGON Comunicaciones
298 remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
302 descr: Leaseweb Deutschland GmbH
303 remarks: ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage
307 descr: ABGON Comunicaciones
308 remarks: ISP located in SK, but some RIR data for announced prefixes contain garbage (BZ)
312 descr: Leaseweb USA, Inc.
313 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage (BZ)
317 descr: combahton GmbH
318 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
322 descr: Virtual Systems LLC
323 remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage
327 descr: CAFE Informatique et telecommunications (defunct)
328 remarks: spamming bogon located in TG - formerly allocated to CAFE Informatique et telecommunications
333 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
337 descr: Parsun Network Solutions Pty. Ltd.
338 remarks: Shady ISP located in AU, but some RIR data for announced prefixes contain garbage
342 descr: Amanah Tech Inc.
343 remarks: ISP located in CA, but some RIR data for announced prefixes contain garbage
348 remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage
352 descr: meerfarbig GmbH & Co. KG
353 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
357 descr: Petersburg Internet Network Ltd.
358 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
362 descr: ASLINE LIMITED
363 remarks: ... located in HK
367 descr: Institute for Research in Fundamental Sciences
368 remarks: ISP located in IR, but some RIR data for announced prefixes contain garbage
372 descr: PP Aleksandr Tatarets
373 remarks: ... hosted out of DE
377 descr: Kirin Communication Limited
378 remarks: ISP located in JP, but some RIR data for announced prefixes contain garbage
382 descr: IP Interactive UG (haftungsbeschraenkt)
383 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
387 descr: Ihor Hosting LLC
388 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
393 remarks: tampers with RIR data, most probably located in HK
397 descr: Buena Telecom SRL
398 remarks: ISP located in RO, but RIR data for announced prefixes contain garbage
402 descr: iDea Leaper Innovation Inc.
403 remarks: tampers with RIR data, traces back to AP area
408 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
413 remarks: ... who thinks messing with countries is funny :-/
417 descr: Silverstar Invest Limited
418 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
423 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
427 descr: NetOne Telecomunicacoes (defunct)
428 remarks: spamming bogon located in or near Luanda, AO - formerly allocated to NetOne Telecomunicacoes
432 descr: HTT Telecom S.A (defunct)
433 remarks: spamming bogon located in CM - formerly allocated to HTT Telecom S.A
437 descr: Gestora de Infraestructuras de Telecomunicaciones de Guinea Ecuatorial
438 remarks: announces bogons out of GQ
442 descr: Sun Network (Hong Kong) Limited
443 remarks: ISP located in HK (duh!), but some RIR data for announced prefixes contain garbage
447 descr: Fiber Grid Inc.
448 remarks: tampers with RIR data, traces back to SE
453 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
457 descr: ab stract / Peter Kolmisoppi
458 remarks: tampers with RIR data, traces back to SE
462 descr: Rack Sphere Hosting S.A.
463 remarks: claims PA for some prefixes, but they are all hosted in CH
468 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
472 descr: Confluence Networks Inc.
473 remarks: fake offshore location (VG), traces back to Austin, TX, US
478 remarks: Shady ISP located in US, tampers with RIR data
482 descr: MLAB Open Source Community
483 remarks: traces back to DE
488 remarks: traces back to AP vincinity, tampers with RIR data
492 descr: NextGenWebs, S.L.
493 remarks: traces back to NL
497 descr: AMATI FOUNDATION
498 remarks: ISP located in SE, seems to tamper with RIR data (proxies too?)
502 descr: Bunea TELECOM SRL
503 remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage
507 descr: Safe Value Limited
508 remarks: tampers with RIR data, traces back to somewhere in central Europe
512 descr: K&K Kommunikationssysteme GmbH
513 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
518 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
522 descr: VH Global Limited
523 remarks: tampers with RIR data, traces back to AP area
527 descr: DGN TEKNOLOJI A.S.
528 remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage
533 remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage
537 descr: NForce Entertainment B.V.
538 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
542 descr: Digitale Suisse AG
543 remarks: ISP located in CH, but some RIR data for announced prefixes contain garbage
547 descr: PQ HOSTING S.R.L.
548 remarks: tampers with RIR data sometimes, traces back to NL
552 descr: Digital Energy LLC
553 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
558 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
562 descr: IP Oleinichenko Denis
563 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
568 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
572 descr: Skylink Data Center BV
573 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
577 descr: Farhang Azma Communications Company LTD
578 remarks: ... contains traces of bogus RIR data
583 remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage
588 remarks: claims US for its prefixes announced, but traces back to KR
592 descr: Vocom International Telecommunications AP Area
593 remarks: ISP located in AP area, some RIR data for announced prefixes contain garbage
597 descr: Servers Australia Pty. Ltd.
598 remarks: ISP located in AU, but some RIR data for announced prefixes contain garbage
602 descr: Network and Security Solutions Limited
603 remarks: ISP located in HK, but some RIR data for announced prefixes contain garbage
607 descr: Dreamtorrent Corp
608 remarks: traceroutes dead-end somewhere in or near RU
612 descr: Spectre Operations BV
613 remarks: ISP located in NL, but some RIR data for suballocations of announced prefixes contain garbage
617 descr: NEROCLOUD Ltd.
618 remarks: RIR data faked/incorrect, cannot trust this network
623 remarks: Services appear to be hosted in RU, RIR data faked/incorrect
627 descr: ADM Service Ltd.
628 remarks: traces back to Vilnius, LT
632 descr: GAIJIN NETWORK LTD
633 remarks: fake offshore location (CY), traces back to RU
638 remarks: tampers with RIR data, traces back to RU
643 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
647 descr: Global Layer BV
648 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
653 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
657 descr: DDoS Guard Ltd. / Cognitive Cloud LLP
658 remarks: another shady customer or branch of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
663 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
667 descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
668 remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
672 descr: Worldstream BV
673 remarks: ISP located in NL, but many RIR data for announced prefixes contain garbage
677 descr: Tamatiya EOOD / 4Vendeta
678 remarks: Questionable ISP located in BG, clients massively tamper with RIR data
682 descr: Serverius Holding B.V.
683 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
688 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
692 descr: SALTYFISH TECH LTD
693 remarks: traceroutes dead-end somewhere near HK
697 descr: Smart Telecom S.A.R.L
698 remarks: tampers with RIR data, traces back to RU
703 remarks: tampers with RIR data, traces back to RU
708 remarks: tampers with RIR data
712 descr: AFGHANTELECOM GOVERNMENT COMMUNICATION NETWORK
713 remarks: For some reason, some "Airbus Defence and Space AS" prefixes are announced by this one...
717 descr: Reliance Jio Infocomm Limited
718 remarks: ISP located in IN, but some RIR data for announced prefixes contain garbage
722 descr: ServerAstra Kft.
723 remarks: ISP located in HU, but some RIR data for announced prefixes contain garbage
727 descr: vServer.site LTD
728 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
732 descr: PE Skurykhin Mukola Volodumurovuch
733 remarks: tampers with RIR data, traces back to UA
738 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
742 descr: LLC South Internet
743 remarks: ISP located in RU, but many RIR data for announced prefixes contain garbage
747 descr: Telefonica LLC
748 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
753 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
758 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
763 remarks: fake offshore location (CY), hosted in NL
767 descr: Iran Telecommunication Company PJS
768 remarks: ... located in IR
772 descr: CloudWall Ltd.
773 remarks: RIR data neither contain a postal address nor a phone number, traceroutes end in Sofia, BG
778 remarks: ... traceroutes dead-end in NL
782 descr: Shanghai Anchang Network Security Technology Co.,Ltd.
783 remarks: ... network infrastructure is believed to be located in HK, has some links to ASLINE hijacking gang
787 descr: Guangzhou LanDong Information technology co., LTD
788 remarks: ... network infrastructure is believed to be located in HK
792 descr: DREAM CLOUD INNOVATION PTE. LTD.
793 remarks: Claims to be located in JP or SG, but is likely located in HK
797 descr: Leaseweb Asia Pacific pte. ltd.
798 remarks: ISP located in SG, but some RIR data for announced prefixes contain garbage
802 descr: Batterflyai Media Ltd.
803 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
808 remarks: Shady customer of AS50673, tampers with RIR data
812 descr: Vault Dweller OU
813 remarks: traceroutes dead-end somewhere in or near RU
817 descr: Parsun Network Solutions Germany Network
818 remarks: Claims to be located in DE, RIR data contain garbage, and all traceroutes dead-end in AU
823 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
827 descr: The Infrastructure Group B.V.
828 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
832 descr: DignusData LLC
833 remarks: ISP located in PL, but _all_ RIR data for announced prefixes contain garbage
837 descr: EU Routing Ltd
838 remarks: fake offshore location (CY), hosted in NL
842 descr: Bursabil Teknoloji A.S.
843 remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage
847 descr: LeaseWeb Netherlands B.V.
848 remarks: ISP located in Amsterdam, NL, but many RIR data for announced prefixes contain garbage
852 descr: 4b42 UG (haftungsbeschränkt)
853 remarks: ... who thinks messing with countries is funny :-/
857 descr: GOPLEX TELECOMUNICACOES E INTERNET LTDA - ME
858 remarks: ... traces back to NL
862 descr: Vivo Trade L.P.
863 remarks: another shady customer of "DDoS Guard Ltd."
867 descr: Ibernap Management S.L.
868 remarks: traces back to various locations in US
872 descr: VpsQuan L.L.C.
873 remarks: claims to be located in US, but traces to HK
878 remarks: ISP located in US, but many RIR data for announced prefixes contain garbage
882 descr: Inter Connects Inc.
883 remarks: part of a dirty ISP conglomerate, traces back to US this time
887 descr: BGP Consultancy Pte Ltd
888 remarks: possibly invoved in IP hijacking, located somewhere in AP area
892 descr: SWISS GLOBAL SERVICES S.A.S.
893 remarks: ... surprisingly, all of their prefixes are hosted in CH, yet they claim CO or PA for them
897 descr: Sun Network (Hong Kong) Limited
898 remarks: ISP and/or IP hijacker located somewhere in AP
902 descr: LeapSwitch Networks Pvt Ltd
903 remarks: ISP and/or IP hijacker located in IN
907 descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED
908 remarks: ISP located in HK, tampers with RIR data
912 descr: HK AISI CLOUD COMPUTING LIMITED
913 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
917 descr: POWER LINE DATACENTER
918 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
922 descr: HK Kwaifong Group Limited
923 remarks: ... located in HK
927 descr: ABCDE GROUP COMPANY LIMITED
928 remarks: ISP and/or IP hijacker located in HK
932 descr: CloudITIDC Global
933 remarks: ISP and/or IP hijacker located somewhere in AP
937 descr: MTel telecommunication company ltd.
938 remarks: ISP and located in MO, but some prefixes needs manual correction due to ARIN DB situation
942 descr: Leaseweb Asia Pacific pte. ltd.
943 remarks: ISP located in HK, some RIR data for announced prefixes contain garbage
947 descr: rainbow network limited
948 remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
952 descr: DingFeng XinHui(HongKong) Technology Limited
953 remarks: ... another shady network solely announcing "Cloud Innovation" IPv4 space, purporting to be located in SC, but actually tracing back to HK :-/
957 descr: ANYUN INTERNET TECHNOLOGY (HK) CO.,LIMITED
958 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region (HK? CN?)
962 descr: Leaseweb Japan K.K.
963 remarks: ISP located in JP, some RIR data for announced prefixes contain garbage
967 descr: Brother Internet Technology Co.,Ltd
968 remarks: ISP located in HK, some RIR data for announced prefixes contain garbage
972 descr: DXTL Tseung Kwan O Service
973 remarks: tampers with RIR data, traces back to AP region
977 descr: Sky Digital Co., Ltd.
978 remarks: IP hijacker located in TW, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
982 descr: LUOGELANG (FRANCE) LIMITED
983 remarks: Shady ISP located in HK, RIR data for announced prefixes contain garbage
987 descr: China Telecom (Macau) Company Limited
988 remarks: located in MO, yet some prefixes show CN or HK instead
992 descr: Cloud Servers Pvt Ltd
993 remarks: ISP located in NL, all RIR data for announced prefixes contain garbage
997 descr: Optix Pakistan (Pvt.) Limited
998 remarks: ISP located in PK, some RIR data for announced prefixes (bogons?) contain garbage
1002 descr: DREAM POWER TECHNOLOGY LIMITED
1003 remarks: Located somewhere in AP (HK? KR?), tampers with RIR data a lot
1007 descr: XRCLOUD.NET INC.
1008 remarks: ... located in HK
1012 descr: Gigabitbank Global / Anchnet Asia Limited (?)
1013 remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
1017 descr: Hong Kong FireLine Network LTD
1018 remarks: ... located in HK (surprise!), but thinks allocating things to random countries worldwide is funny
1022 descr: Leaseweb Australia Pty. Ltd.
1023 remarks: ISP located in AU, some RIR data for announced prefixes contain garbage
1027 descr: Anchnet Asia Limited
1028 remarks: IP hijacker located in HK, tampers with RIR data
1033 remarks: ISP located in KR, some RIR data for announced prefixes contain garbage
1037 descr: Asquare International
1038 remarks: ... which appears to host their stuff solely in US
1042 descr: SUPERCLOUDS LIMITED
1043 remarks: ISP located in HK, tampers with RIR data
1047 descr: rainbow network limited
1048 remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
1052 descr: Cloudflare Sydney, LLC
1053 remarks: ... but CF failed to set the country for announced prefixes to AU as well :-/
1057 descr: HWA CENT TELECOMMUNICATIONS LIMITED
1058 remarks: ISP and/or IP hijacker located in AP area, tampers with RIR data
1062 descr: HK NEW CLOUD TECHNOLOGY LIMITED
1063 remarks: ISP and/or IP hijacker located in AP area, tampers with RIR data
1067 descr: HONG KONG Megalayer Technology Co.,Limited
1068 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
1072 descr: LUCIDACLOUD LIMITED
1073 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
1077 descr: Netex Limited
1078 remarks: traceroutes dead-end near Moscow, RU
1082 descr: ANLIAN NETWORK TECHNOLOGY CO., LIMITED
1083 remarks: ISP located in HK, tampers with RIR data
1087 descr: Galaxy Broadband
1088 remarks: ISP located in PK, but some RIR data need manual correction due to ARIN DB situation
1092 descr: CV Atha Media Prima
1093 remarks: traces back to ID
1097 descr: Create Prominent Information Limited
1098 remarks: Shady ISP located in HK
1102 descr: White-Sand Cloud Computing(HK) Co., LIMITED
1103 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
1107 descr: Hong Kong Communications International Co., Limited
1108 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
1112 descr: Wujidun Network Limited
1113 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
1117 descr: Full Time Hosting
1118 remarks: ISP located in DE, tampers with RIR data
1122 descr: Nathosts Limited
1123 remarks: ... located in HK?
1127 descr: High Family Technology Co., Limited
1128 remarks: (Rogue?) downstream of AS55933, located somewhere in AP
1132 descr: YISU CLOUD LTD
1133 remarks: ... located in HK
1137 descr: FLP Kochenov Aleksej Vladislavovich
1138 remarks: ISP located in UA, but RIR data for announced prefixes all say EU
1142 descr: active 1 GmbH
1143 remarks: ISP located in DE, some RIR data for announced prefixes contain garbage
1148 remarks: ISP located in DE, some RIR data for announced prefixes contain garbage
1153 remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
1157 descr: Datashield, Inc.
1158 remarks: fake offshore location (SC), traces back to NL
1162 descr: Network Management Ltd.
1163 remarks: traceroutes dead-end somewhere in or near RU
1167 descr: AVATEL TELECOM
1168 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
1172 descr: bet-at-home.com International Ltd.
1173 remarks: ... traces back to AT
1177 descr: skHosting.eu s.r.o.
1178 remarks: ISP located in SK, but some RIR data for announced prefixes contain garbage
1182 descr: Intelcom Group Ltd.
1183 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
1188 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
1192 descr: Luxoft Professional Romania S.R.L.
1193 remarks: serivces hosted in RU
1197 descr: FutureNow Incorporated
1198 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
1202 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
1203 remarks: fake offshore location (SC), traces back to RU
1207 descr: DataClub S.A.
1208 remarks: another shady customer of "DDoS Guard Ltd."
1213 remarks: traces back to SE
1217 descr: MismeNet Telecomunicaciones
1218 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
1222 descr: Kevin Holly trading as Silent Ghost e.U.
1223 remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/
1227 descr: Rishikeshan Lavakumar
1228 remarks: Network operator thinks messing with RIR data is funny... :-/
1232 descr: Global Offshore Limited
1233 remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
1237 descr: Hauer Hosting Services Limited
1238 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
1242 descr: LEASEWEB UK LIMITED
1243 remarks: ISP located in London, GB, but many RIR data for announced prefixes contain garbage
1247 descr: Genius Guard / Genius Security Ltd.
1248 remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU
1252 descr: ANSON NETWORK LIMITED
1253 remarks: another shady customer of "DDoS Guard Ltd.", located in AP area
1257 descr: Server Hosting Pty Ltd
1258 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
1262 descr: Xtudio Networks S.L.U.
1263 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
1267 descr: HostSlim B.V.
1268 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
1272 descr: AAEX NETWORK TECHNOLOGY LTD
1273 remarks: ... traces back to HK
1277 descr: Kapteyan Bilisim Teknolojileri
1278 remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage
1283 remarks: ISP located in US, but many RIR data for announced prefixes contain garbage
1287 descr: Network Management Ltd.
1288 remarks: traceroutes dead-end somewhere in or near CZ
1292 descr: Altrosky Technology Ltd.
1293 remarks: fake offshore location (SC), traces back to CZ and NL
1297 descr: Inteldome Corporation
1298 remarks: ... whose location we are unable to determine precisely, but its definitely not MH :-/
1303 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
1307 descr: Internetservice Hahn
1308 remarks: AQ != DE, you know
1312 descr: Maximilian Kutzner trading as HostSlick
1313 remarks: traces back to NL, but some RIR data for announced prefixes contain garbage
1317 descr: Timm Gasteier trading as v10networks - Gasteier und Sharif GbR
1318 remarks: Only announces a single /24 of a Russian bank, traces back to DE - odd...
1322 descr: Access2.IT Group B.V.
1323 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
1327 descr: Nese Mala / Moon DC
1328 remarks: shady ISP located in TR, but many RIR data for announced prefixes contain garbage
1332 descr: Alviva Holding Limited
1333 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
1337 descr: Miti 2000 EOOD
1338 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
1342 descr: SEMrush CY LTD
1343 remarks: claims CY for announced prefixes, but they are all hosted in NL
1348 remarks: shady ISP located in TR, but RIR data for announced prefixes contain garbage
1353 remarks: Jurisdiction of this is RU, we pin its location to it since (clients) tamper massively with RIR data :-/
1357 descr: Gudaev Maxim Amrakhovich
1358 remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
1362 descr: Packet Flip, LLC
1363 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
1368 remarks: ... all traceroutes observed so far dead-end in BG
1373 remarks: Shary Serverion customer in NL, many RIR data for announced prefixes contain garbage
1377 descr: VPSSC Networks LTD
1378 remarks: ISP located in UA, but RIR data for announced prefixes contain garbage
1382 descr: Internet Technologies LLC
1383 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
1387 descr: Des Capital B.V.
1388 remarks: Shady ISP located in NL, but RIR data for announced prefixes contain garbage
1393 remarks: Shady Serverion customer in NL, many RIR data for announced prefixes contain garbage
1397 descr: Collin Schneeweiss
1398 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
1402 descr: PAYWISE HOLDING Sp. z.o.o.
1403 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1407 descr: JMT Paso Limited
1408 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1412 descr: WFD SERVICE LTD
1413 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1417 descr: Perry Paans trading as Release V.O.F.
1418 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1423 remarks: ISP located in GB, but RIR data for announced prefixes contain garbage
1427 descr: FOP Hornostay Mykhaylo Ivanovych
1428 remarks: ISP located in RU, but some RIR data are inaccurate (UA)
1432 descr: RoyaleHosting B.V.
1433 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1437 descr: Massimo Cotrozzi
1438 remarks: ISP located in GB, but RIR data for announced prefixes contain garbage
1442 descr: MILEGROUP LTD
1443 remarks: traceroutes dead-end somewhere in Central Europe
1448 remarks: ISP located in RU, but RIR data for announced prefixes contain garbage
1452 descr: Quality Area Ltd.
1453 remarks: traceroutes dead-end somewhere near Crimera, UA
1458 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
1462 descr: Alfa Web Solutions Ltd.
1463 remarks: shady ISP located in NL
1467 descr: IP Connect Inc.
1468 remarks: fake offshore location (SC), traces back to NL
1472 descr: SIA "Singularity Telecom"
1473 remarks: Shady customer of AS31732 (Parsun Network Solutions Pty. Ltd.) located in AU, RIR data for announced prefixes contain garbage
1477 descr: Maxihost LTDA
1478 remarks: Many if not all prefixes announced by this AS trace back to BR, yet their RIR data contain mostly garbage. Also, Maxihost LTDA does not seem to be able to prevent cyber criminals from abusing it's services - tomorrows bulletproof ISP?
1483 remarks: traceroutes dead-end somewhere near NYC, US
1487 descr: WIID Telecomunicai¿½i¿½es do Brasil
1488 remarks: ... traces back to NL
1492 descr: Flyservers S.A.
1493 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
1497 descr: 68 MEDIA S.A.
1498 remarks: Fake offshore location (PA), traceroutes dead-end near Moscow, RU
1503 remarks: ISP located in ZA, RIR data for announced prefixes contain garbage
1507 descr: Xhostserver LLC
1508 remarks: ISP located in ZA, many RIR data for announced prefixes contain garbage
1512 descr: Africa on Cloud
1513 remarks: ... for some reason, I doubt a _real_ African ISP would announce solely hijacked prefixes - anyway, traces back to ZA :-/
1517 descr: Seven Network Inc.
1518 remarks: traces back to ZA
1522 descr: Xhostserver LLC
1523 remarks: shady ISP located in US, some RIR data for announced prefixes contain garbage
1527 descr: Leaseweb USA, Inc.
1528 remarks: ISP located in Dallas, TX, US, but some RIR data for announced prefixes contain garbage
1532 descr: KURUN CLOUD INC
1533 remarks: ISP and/or IP hijacker located in US, some RIR data for announced prefixes contain garbage
1537 descr: Leaseweb USA, Inc.
1538 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
1543 remarks: Many if not all prefixes announced by this AS trace back to US, yet their RIR data contain mostly garbage. Also, Maxihost LLC does not seem to be able to prevent cyber criminals from abusing it's services - tomorrows bulletproof ISP?
1547 descr: Tier.Net Technologies LLC
1548 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
1552 descr: Baxet Group Inc.
1553 remarks: traceroutes dead-end near Moscow, RU
1558 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
1562 descr: OLink Cloud LLC
1563 remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage
1568 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
1572 descr: Serverion LLC
1573 remarks: ISP located in NL, some RIR data contain garbage
1578 remarks: Part of the "ASLINE" IP hijacking gang, HK vicinity seems to be part of US too for them :-/
1582 descr: Wolverine Trading, LLC
1583 remarks: IP hijacker located in US, tampers with RIR data
1587 descr: Serverion LLC
1588 remarks: ISP located in NL, some RIR data contain garbage
1592 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1593 remarks: fake offshore location (BZ), traces back to NL
1597 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1598 remarks: fake offshore location (BZ), traces back to NL
1601 net: 37.228.128.0/24
1602 descr: FlokiNET Ltd.
1603 remarks: fake offshore location (SC), traces back to RO
1608 remarks: inaccurate data from ARIN, traces back to CN
1612 descr: Karolio IT paslaugos, UAB
1613 remarks: fake location (IR), traces back to NL
1617 descr: IP Volume Ltd. / Epik
1618 remarks: fake location (CH), traces back to GB
1622 descr: IPv4 Superhub Limited
1623 remarks: network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
1626 net: 45.129.136.0/24
1627 descr: Flyservers S.A.
1628 remarks: fake offshore location (PA), traces back to NL
1631 net: 45.134.144.0/22
1632 descr: IPv4 Superhub Limited
1633 remarks: same as 45.93.16.0/22
1637 descr: GlobalCache Technology CO., Ltd.
1638 remarks: claims to be located in DE, but traces back to HK
1641 net: 45.148.167.0/24
1642 descr: US AFG 20200130
1643 remarks: claims to be located in US, but traces back to SK
1646 net: 45.155.121.0/24
1647 descr: Itace International Limited
1648 remarks: claims to be located in HK, but traces back to RO
1652 descr: DATAHOME S.A.
1653 remarks: traces back to BR
1656 net: 45.182.189.0/24
1657 descr: DATAHOME S.A.
1658 remarks: traces back to RU
1662 descr: Vodafone US Inc.
1663 remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
1667 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1668 remarks: fake offshore location (BZ), traces back to US
1673 remarks: https://lists.ipfire.org/pipermail/location/2022-January/000519.html
1677 descr: M247 LTD, Greenland Infrastructure
1678 remarks: ... traces back to CA
1681 net: 91.149.194.0/24
1682 descr: IP Volume Ltd. / Epik
1683 remarks: fake location (CH), traces back to SE
1686 net: 91.149.195.0/24
1687 descr: IP Volume Ltd. / Epik
1688 remarks: fake location (CH), traces back to SE
1691 net: 91.149.224.0/24
1692 descr: IP Volume Ltd. / Epik
1693 remarks: fake location (CH), traces back to NO
1696 net: 91.216.210.0/24
1697 descr: EasyForex Ltd.
1698 remarks: fake location (CY), traces to IE area
1702 descr: Petersburg Internet Network Ltd.
1703 remarks: RIR data for suballocations contain garbage, they are all located in RU
1707 descr: G-Core Labs S.A.
1708 remarks: fake location (CY), traces back to HK
1711 net: 95.181.152.0/21
1713 remarks: fake location (US), WHOIS contact and traceroutes point to RU
1717 descr: SpaceX Canada Corp.
1718 remarks: Accurate country code missing due to ARIN DB situation, see also: #12746
1722 descr: Cyber Telecom ISP
1723 remarks: Despite being allocated to AF, traceroutes end in NL
1726 net: 103.197.148.0/22
1727 descr: I.C.S. Trabia-Network S.R.L.
1728 remarks: fake offshore location (HK), traces back to MD
1731 net: 104.244.72.0/21
1732 descr: BuyVM / FranTech
1733 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1737 descr: BuyVM / FranTech
1738 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1742 descr: BuyVM / FranTech
1743 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1746 net: 107.189.12.0/23
1747 descr: BuyVM / FranTech
1748 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1751 net: 107.189.14.0/24
1752 descr: BuyVM / FranTech
1753 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1756 net: 107.189.28.0/23
1757 descr: BuyVM / FranTech
1758 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1761 net: 107.189.30.0/23
1762 descr: BuyVM / FranTech
1763 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1767 descr: PSINet, Inc. (PSI) / Cogent Communications
1768 remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
1772 descr: Flyservers S.A.
1773 remarks: fake offshore location (PA), traces back to RO
1777 descr: Flyservers S.A.
1778 remarks: fake offshore location (PA), traces back to RO
1781 net: 146.19.102.0/24
1782 descr: Norbert Miczuga
1783 remarks: ... who thinks messing with country codes is funny :-/
1787 descr: Manx Telecom Limited
1788 remarks: Suballocation of Cogent, country code missing due to ARIN DB situation (https://community.ipfire.org/t/location-database-update-error-country-code/6451/)
1793 remarks: fake offshore locations (AQ / PN / SS), traces back to US
1796 net: 178.239.20.0/24
1797 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
1798 remarks: fake location (BA), traces back to RO
1801 net: 179.60.147.0/24
1802 descr: Flyservers S.A.
1803 remarks: traces back to NL
1806 net: 179.60.151.0/24
1807 descr: DATAHOME S.A.
1808 remarks: traces back to BR
1812 descr: FlokiNET Ltd.
1813 remarks: fake offshore location (SC), traces back to RO
1817 descr: Datashield, Inc.
1818 remarks: fake offshore location (SC), traces back to NL
1821 net: 185.85.120.0/22
1822 descr: Intelcom Group Ltd
1823 remarks: fake offshore location (SC), traces back to RU
1826 net: 185.140.204.0/22
1827 descr: Hornetsecurity GmbH
1828 remarks: all suballocations are used in DE, but are assigned to US
1831 net: 185.143.223.0/24
1832 descr: Lenar Davletshin
1833 remarks: traceroutes dead-end somewhere in US, network location appears to move a round a lot
1836 net: 185.175.93.0/24
1837 descr: Perfect Hosting Solutions
1838 remarks: traces back to UA
1841 net: 185.169.253.0/24
1842 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1843 remarks: fake offshore location (BZ), traces back to US
1846 net: 185.170.129.0/24
1848 remarks: traces back to NL
1851 net: 185.193.91.0/24
1852 descr: Romanenko Stanislav Sergeevich
1853 remarks: bulletproof ISP related to AS204655, traces back to BG
1856 net: 185.193.124.0/22
1857 descr: ab stract / Njalla
1858 remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
1861 net: 185.227.152.0/22
1862 descr: XinYuan Interconnect (HONG KONG [sic!]) Limited
1863 remarks: claims to be located in DE, traces back to HK
1866 net: 188.40.220.0/24
1867 descr: FireStorm ISP GmbH
1868 remarks: Hetzner customer, infrastructure is physically located in DE
1872 descr: WorldStream (LATAM) BV
1873 remarks: LACNIC IP chunk solely used in NL (inaccurate data)
1877 descr: Deep Eddy Internet Consulting
1878 remarks: claims to be located in US, traces back to AP region
1882 descr: Bunea TELECOM SRL
1883 remarks: RIR data contain garbage for this network
1887 descr: NetConn Services Ltd
1888 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
1891 net: 193.176.24.0/22
1893 remarks: The entire network is used out of RU
1896 net: 193.186.196.0/22
1898 remarks: claims to be located in DE, traces back to GB
1901 net: 195.66.165.0/24
1902 descr: Posta Crne Gore
1903 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
1906 net: 195.191.81.0/24
1907 descr: Matthias Fetzer
1908 remarks: traces back to UA at this time
1911 net: 195.252.115.0/24
1913 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
1916 net: 195.252.120.0/24
1918 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
1921 net: 198.144.120.0/23
1922 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1923 remarks: fake offshore location (BZ), traces back to NL
1926 net: 198.251.84.0/24
1927 descr: BuyVM / FranTech
1928 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1931 net: 198.251.88.0/23
1932 descr: BuyVM / FranTech
1933 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1936 net: 202.128.108.0/23
1937 descr: NetConn Services Ltd
1938 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
1941 net: 212.102.50.0/24
1942 descr: NewMedia Express on behalf of Datacamp
1943 remarks: traces back to JP
1946 net: 2605:6400:3::/48
1947 descr: BuyVM / FranTech
1948 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1951 net: 2605:6400:30::/48
1952 descr: BuyVM / FranTech
1953 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1956 net: 2605:6400:300::/48
1957 descr: BuyVM / FranTech
1958 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1961 net: 2605:6400:c000::/34
1962 descr: BuyVM / FranTech
1963 remarks: Accurate country code missing due to ARIN DB situation, see also: #12774
1966 net: 2a00:6340:c000::/34
1967 descr: Openfactory GmbH
1968 remarks: ... who thinks assigning networks to AQ is funny :-/
1973 remarks: ... who thinks assigning networks to AQ is funny :-/
1976 net: 2402:e940:f00::/48
1977 descr: Wind Cloud Network Technology Co Ltd.
1978 remarks: appears to be used out of Tokyo, JP
1981 net: 2a02:e00:ffe7::/48
1982 descr: Bradler & Krantz GmbH & Co. KG
1983 remarks: allocated to DE, but actually announced from LT
1986 net: 2a02:e00:ffe8::/48
1987 descr: Bradler & Krantz GmbH & Co. KG
1988 remarks: allocated to DE, but actually announced from MD
1991 net: 2a02:e00:ffe9::/48
1992 descr: Bradler & Krantz GmbH & Co. KG
1993 remarks: allocated to DE, but actually announced from GB
1997 descr: Sibyl System LTD
1998 remarks: RIR data contain garbage
2001 net: 2a06:1281:5::/48
2002 descr: Alexander Nicholson
2003 remarks: allocated to NO, but actually announced from FR
2007 descr: Datashield, Inc.
2008 remarks: fake offshore location (SC), traces back to NL
2011 net: 2a09:4c0:3000::/40
2013 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
2016 net: 2a10:ccc0:3000::/40
2018 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
2023 remarks: https://lists.ipfire.org/pipermail/location/2022-January/000519.html
2026 net: 2a0e:b100:3000::/40
2027 descr: 4b42 UG (haftungsbeschränkt)
2028 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
2031 net: 2a0e:b101:3000::/40
2032 descr: 4b42 UG (haftungsbeschränkt)
2033 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
2036 net: 2a0f:e400:3000::/40
2038 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/