overrides/override-other.txt

   1 #
   2 # override-other [.txt]
   3 #
   4 # This file contains Autonomous Systems (AS) or IP networks/addresses
   5 # whose country information in corresponding RIR data is believed or proven
   6 # to be invalid or inaccurate and which do not match to one of the special categories
   7 # A[1-3].
   8 #
   9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
  10 # (networks owned by letterbox companies in offshore jurisdictions) or
  11 # hostile (faked RIR data in order to bypass location-based filtering).
  12 #
  13 # Please keep this file sorted.
  14 #
  15
  16 aut-num:        AS3216
  17 descr:          PJSC "Vimpelcom"
  18 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
  19 country:        RU
  20
  21 aut-num:        AS6134
  22 descr:          XNNET LLC
  23 remarks:        traces back to an unknown oversea location (HK?), seems to tamper with RIR data
  24 country:        HK
  25
  26 aut-num:        AS8359
  27 descr:          MTS PJSC
  28 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
  29 country:        RU
  30
  31 aut-num:        AS12025
  32 descr:          Iron Mountain Data Center
  33 remarks:        ISP located in US, but some RIR data for announced prefixes contain garbage
  34 country:        US
  35
  36 aut-num:        AS18013
  37 descr:          ASLINE LIMITED
  38 remarks:        IP hijacker, traces back to AP region
  39 country:        AP
  40
  41 aut-num:        AS18254
  42 descr:          KLAYER LLC
  43 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
  44 country:        AP
  45
  46 aut-num:        AS22769
  47 descr:          DDOSING NETWORK
  48 remarks:        IP hijacker located somewhere in AP, massively tampers with RIR data
  49 country:        AP
  50
  51 aut-num:        AS24009
  52 descr:          HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
  53 remarks:        IP hijacker (?) located in HK, tampers with RIR data
  54 country:        HK
  55
  56 aut-num:        AS24700
  57 descr:          Yes Networks Unlimited Ltd
  58 remarks:        traces to UA, but some RIR entries seem to contain garbage (VG)
  59 country:        UA
  60
  61 aut-num:        AS25098
  62 descr:          Netcalibre Ltd.
  63 remarks:        ISP located in GB, but some RIR data for announced prefixes contain garbage/
  64 country:        GB
  65
  66 aut-num:        AS28098
  67 descr:          ABGON Comunicaciones
  68 remarks:        ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
  69 country:        CL
  70
  71 aut-num:        AS35042
  72 descr:          IP Interactive UG (haftungsbeschraenkt)
  73 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
  74 country:        BG
  75
  76 aut-num:        AS35251
  77 descr:          NetLab
  78 remarks:        tampers with RIR data, most probably located in HK
  79 country:        HK
  80
  81 aut-num:        AS35478
  82 descr:          Buena Telecom SRL
  83 remarks:        ISP located in RO, but RIR data for announced prefixes contain garbage
  84 country:        RO
  85
  86 aut-num:        AS37518
  87 descr:          Fiber Grid Inc.
  88 remarks:        tampers with RIR data, traces back to SE
  89 country:        SE
  90
  91 aut-num:        AS39287
  92 descr:          ab stract / Peter Kolmisoppi
  93 remarks:        tampers with RIR data, traces back to SE
  94 country:        SE
  95
  96 aut-num:        AS40034
  97 descr:          Confluence Networks Inc.
  98 remarks:        fake offshore location (VG), traces back to Austin, TX, US
  99 country:        US
 100
 101 aut-num:        AS41466
 102 descr:          Treidinvest LLC
 103 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 104 country:        RU
 105
 106 aut-num:        AS41564
 107 descr:          Packet Exchange Limited
 108 remarks:        shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in EU), routing stolen AfriNIC networks, RIR data of prefixes announced by this AS cannot be trusted
 109 country:        EU
 110
 111 aut-num:        AS42397
 112 descr:          Bunea TELECOM SRL
 113 remarks:        ISP located in RO, but some RIR data for announced prefixes contain garbage
 114 country:        RO
 115
 116 aut-num:        AS42745
 117 descr:          Safe Value Limited
 118 remarks:        tampers with RIR data, traces back to somewhere in central Europe
 119 country:        EU
 120
 121 aut-num:        AS42831
 122 descr:          UKSERVERS
 123 remarks:        ISP located in GB, but some RIR data for announced prefixes contain garbage
 124 country:        GB
 125
 126 aut-num:        AS42960
 127 descr:          Cloud Management LLC
 128 remarks:        tampers with RIR data, traces back to HK
 129 country:        HK
 130
 131 aut-num:        AS44477
 132 descr:          IP Oleinichenko Denis
 133 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 134 country:        RU
 135
 136 aut-num:        AS48090
 137 descr:          PPTECHNOLOGY LIMITED
 138 remarks:        bulletproof ISP (related to AS204655) located in NL
 139 country:        NL
 140
 141 aut-num:        AS41564
 142 descr:          Global Colocation Limited
 143 remarks:        part of a dirty ISP conglomerate most likely operating out of SE
 144 country:        SE
 145
 146 aut-num:        AS49466
 147 descr:          KLAYER LLC
 148 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
 149 country:        AP
 150
 151 aut-num:        AS49505
 152 descr:          Selectel
 153 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 154 country:        RU
 155
 156 aut-num:        AS49921
 157 descr:          F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
 158 remarks:        claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
 159 country:        EU
 160
 161 aut-num:        AS51558
 162 descr:          Smart Telecom S.A.R.L
 163 remarks:        tampers with RIR data, traces back to RU
 164 country:        RU
 165
 166 aut-num:        AS55933
 167 descr:          Cloudie Limited
 168 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 169 country:        AP
 170
 171 aut-num:        AS56611
 172 descr:          REBA Communications BV
 173 remarks:        bulletproof ISP (related to AS202425) located in NL
 174 country:        NL
 175
 176 aut-num:        AS57717
 177 descr:          FiberXpress BV
 178 remarks:        bulletproof ISP (related to AS202425) located in NL
 179 country:        NL
 180
 181 aut-num:        AS57858
 182 descr:          Inter Connects Inc.
 183 remarks:        part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
 184 country:        SE
 185
 186 aut-num:        AS58073
 187 descr:          YISP BV
 188 remarks:        ISP located in NL, but some RIR data for announced prefixes contain garbage
 189 country:        NL
 190
 191 aut-num:        AS58271
 192 descr:          FOP Gubina Lubov Petrivna
 193 remarks:        bulletproof ISP operating from a war zone in eastern UA
 194 country:        UA
 195
 196 aut-num:        AS59580
 197 descr:          Batterflyai Media Ltd.
 198 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 199 country:        RU
 200
 201 aut-num:        AS60485
 202 descr:          Inter Connects Inc. / Jing Yun
 203 remarks:        part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks
 204 country:        SE
 205
 206 aut-num:        AS62355
 207 descr:          Network Dedicated SAS
 208 remarks:        bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
 209 country:        NL
 210
 211 aut-num:        AS62468
 212 descr:          VpsQuan L.L.C.
 213 remarks:        claims to be located in US, but traces to HK
 214 country:        HK
 215
 216 aut-num:        AS63119
 217 descr:          Inter Connects Inc.
 218 remarks:        part of a dirty ISP conglomerate, traces back to US this time
 219 country:        US
 220
 221 aut-num:        AS64437
 222 descr:          NForce Entertainment BV
 223 remarks:        currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL
 224 country:        NL
 225
 226 aut-num:        AS134548
 227 descr:          DXTL Tseung Kwan O Service
 228 remarks:        tampers with RIR data, traces back to AP region
 229 country:        AP
 230
 231 aut-num:        AS137443
 232 descr:          Anchnet Asia Limited
 233 remarks:        IP hijacker located in HK, tampers with RIR data
 234 country:        HK
 235
 236 aut-num:        AS137951
 237 descr:          Clayer Limited
 238 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 239 country:        AP
 240
 241 aut-num:        AS139330
 242 descr:          SANREN DATA LIMITED
 243 remarks:        IP hijacker located somewhere in AP region, tampers with RIR data
 244 country:        AP
 245
 246 aut-num:        AS140733
 247 descr:          Wujidun Network Limited
 248 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 249 country:        AP
 250
 251 aut-num:        AS200699
 252 descr:          Datashield, Inc.
 253 remarks:        fake offshore location (SC), traces back to NL
 254 country:        NL
 255
 256 aut-num:        AS200845
 257 descr:          AVATEL TELECOM
 258 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 259 country:        ES
 260
 261 aut-num:        AS201118
 262 descr:          Intelcom Group Ltd.
 263 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 264 country:        RU
 265
 266 aut-num:        AS201133
 267 descr:          Verdina Ltd.
 268 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 269 country:        BG
 270
 271 aut-num:        AS201912
 272 descr:          FutureNow Incorporated
 273 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 274 country:        BG
 275
 276 aut-num:        AS202425
 277 descr:          IP Volume Inc.
 278 remarks:        bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
 279 country:        NL
 280
 281 aut-num:        AS202492
 282 descr:          SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
 283 remarks:        fake offshore location (SC), traces back to NL
 284 country:        NL
 285
 286 aut-num:        AS202769
 287 descr:          Cooperative Investments LLC
 288 remarks:        bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
 289 country:        NL
 290
 291 aut-num:        AS204136
 292 descr:          Kevin Holly trading as Silent Ghost e.U.
 293 remarks:        AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/
 294 country:        NL
 295
 296 aut-num:        AS204353
 297 descr:          Global Offshore Limited
 298 remarks:        part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
 299 country:        EU
 300
 301 aut-num:        AS204655
 302 descr:          Novogara Ltd.
 303 remarks:        bulletproof ISP (strongly linked to AS202425) located in NL
 304 country:        NL
 305
 306 aut-num:        AS205026
 307 descr:          Hauer Hosting Services Limited
 308 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 309 country:        ES
 310
 311 aut-num:        AS207046
 312 descr:          Xtudio Networks S.L.U.
 313 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 314 country:        ES
 315
 316 aut-num:        AS207616
 317 descr:          Altrosky Technology Ltd.
 318 remarks:        fake offshore location (SC), traces back to CZ and NL
 319 country:        EU
 320
 321 aut-num:        AS208046
 322 descr:          Maximilian Kutzner trading as HostSlick
 323 remarks:        traces back to NL, but some RIR data for announced prefixes contain garbage
 324 country:        NL
 325
 326 aut-num:        AS209132
 327 descr:          Alviva Holding Limited
 328 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 329 country:        BG
 330
 331 aut-num:        AS209272
 332 descr:          Alviva Holding Limited
 333 remarks:        bulletproof ISP operating from a war zone in eastern UA
 334 country:        UA
 335
 336 aut-num:        AS209401
 337 descr:          Gudaev Maxim Amrakhovich
 338 remarks:        announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
 339 country:        EU
 340
 341 aut-num:        AS213035
 342 descr:          Serverion BV
 343 remarks:        ISP located in NL, but RIR data for most announced prefixes contain garbage
 344 country:        NL
 345
 346 aut-num:        AS213058
 347 descr:          Private Internet Hosting LTD
 348 remarks:        bulletproof ISP located in RU
 349 country:        RU
 350
 351 aut-num:        AS213373
 352 descr:          IP Connect Inc.
 353 remarks:        fake offshore location (SC), traces back to NL
 354 country:        NL
 355
 356 aut-num:        AS262254
 357 descr:          DDOS-GUARD CORP.
 358 remarks:        fake offshore location (BZ), traces back to RU
 359 country:        RU
 360
 361 aut-num:        AS328543
 362 descr:          Sun Network Company Limited
 363 remarks:        IP hijacker, traces back to AP region
 364 country:        AP
 365
 366 aut-num:        AS328671
 367 descr:          Datapacket Maroc SARL
 368 remarks:        bulletproof ISP (strongly linked to AS202425) located in NL
 369 country:        NL
 370
 371 aut-num:        AS398478
 372 descr:          PEG TECH INC
 373 remarks:        ISP located in HK, tampers with RIR data
 374 country:        HK
 375
 376 aut-num:        AS398826
 377 descr:          OLink Cloud LLC
 378 remarks:        shady ISP located in US, but some RIR data for announced prefixes contain garbage
 379 country:        US
 380
 381 net:        5.1.68.0/24
 382 descr:      GaiacomLC
 383 remarks:    routed to DE, inaccurate RIR data
 384 country:    DE
 385
 386 net:        5.1.69.0/24
 387 descr:      GaiacomLC
 388 remarks:    routed to DE, inaccurate RIR data
 389 country:    DE
 390
 391 net:        5.1.83.0/24
 392 descr:      GaiacomLC
 393 remarks:    routed to DE, inaccurate RIR data
 394 country:    DE
 395
 396 net:        5.1.88.0/24
 397 descr:      GaiacomLC
 398 remarks:    routed to DE, inaccurate RIR data
 399 country:    DE
 400
 401 net:            5.252.32.0/22
 402 descr:          StormWall s.r.o.
 403 remarks:        claims to be located in DE, but traces back to somewhere else in central Europe
 404 country:        EU
 405
 406 net:            31.220.0.0/22
 407 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 408 remarks:        fake offshore location (BZ), traces back to NL
 409 country:        NL
 410
 411 net:            31.220.40.0/23
 412 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 413 remarks:        fake offshore location (BZ), traces back to NL
 414 country:        NL
 415
 416 net:            37.228.128.0/24
 417 descr:          FlokiNET Ltd.
 418 remarks:        fake offshore location (SC), traces back to RO
 419 country:        RO
 420
 421 net:            45.93.16.0/22
 422 descr:          IPv4 Superhub Limited
 423 remarks:        network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
 424 country:        HK
 425
 426 net:            45.134.12.0/24
 427 descr:          MS Network LTD
 428 remarks:        fake offshore location (SC), traces back to NLm
 429 country:        NL
 430
 431 net:            45.134.144.0/22
 432 descr:          IPv4 Superhub Limited
 433 remarks:        same as 45.93.16.0/22
 434 country:        HK
 435
 436 net:            45.145.36.0/22
 437 descr:          GlobalCache Technology CO., Ltd.
 438 remarks:        claims to be located in DE, but traces back to HK
 439 country:        HK
 440
 441 net:            45.148.167.0/24
 442 descr:          US AFG 20200130
 443 remarks:        claims to be located in US, but traces back to SK
 444 country:        SK
 445
 446 net:            47.60.0.0/14
 447 descr:          Vodafone US Inc.
 448 remarks:        large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
 449 country:        ES
 450
 451 net:            85.202.80.0/24
 452 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 453 remarks:        fake offshore location (BZ), traces back to US
 454 country:        US
 455
 456 net:            88.151.117.0/24
 457 descr:          Golden Internet LLC
 458 remarks:        fake location (KP), WHOIS contact points to RU
 459 country:        RU
 460
 461 net:            95.181.152.0/21
 462 descr:          QWARTA LLC
 463 remarks:        fake location (US), WHOIS contact and traceroutes point to RU
 464 country:        RU
 465
 466 net:            103.197.148.0/22
 467 descr:          I.C.S. Trabia-Network S.R.L.
 468 remarks:        fake offshore location (HK), traces back to MD
 469 country:        MD
 470
 471 net:            130.117.0.0/16
 472 descr:          PSINet, Inc. (PSI) / Cogent Communications
 473 remarks:        Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
 474 country:        EU
 475
 476 net:            178.239.20.0/24
 477 descr:          Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 478 remarks:        fake location (BA), traces back to RO
 479 country:        RO
 480
 481 net:            185.10.68.0/24
 482 descr:          FlokiNET Ltd.
 483 remarks:        fake offshore location (SC), traces back to RO
 484 country:        RO
 485
 486 net:            185.56.80.0/22
 487 descr:          Datashield, Inc.
 488 remarks:        fake offshore location (SC), traces back to NL
 489 country:        NL
 490
 491 net:            185.85.120.0/22
 492 descr:          Intelcom Group Ltd
 493 remarks:        fake offshore location (SC), traces back to RU
 494 country:        RU
 495
 496 net:        185.140.204.0/22
 497 descr:      Hornetsecurity GmbH
 498 remarks:    all suballocations are used in DE, but are assigned to US
 499 country:    DE
 500
 501 net:            185.175.93.0/24
 502 descr:          Perfect Hosting Solutions
 503 remarks:        bulletproof ISP related to AS204655, traces back to BG
 504 country:        BG
 505
 506 net:            185.169.253.0/24
 507 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 508 remarks:        fake offshore location (BZ), traces back to US
 509 country:        US
 510
 511 net:            185.193.91.0/24
 512 descr:          Romanenko Stanislav Sergeevich
 513 remarks:        bulletproof ISP related to AS204655, traces back to BG
 514 country:        BG
 515
 516 net:            185.193.124.0/22
 517 descr:          ab stract / Njalla
 518 remarks:        bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
 519 country:        SE
 520
 521 net:            185.227.152.0/22
 522 descr:          XinYuan Interconnect (HONG KONG [sic!]) Limited
 523 remarks:        claims to be located in DE, traces back to HK
 524 country:        HK
 525
 526 net:            190.2.128.0/19
 527 descr:          WorldStream (LATAM) BV
 528 remarks:        LACNIC IP chunk solely used in NL (inaccurate data)
 529 country:        NL
 530
 531 net:            192.12.3.0/24
 532 descr:          Deep Eddy Internet Consulting
 533 remarks:        claims to be located in US, traces back to AP region
 534 country:        AP
 535
 536 net:            193.29.12.0/22
 537 descr:          Bunea TELECOM SRL
 538 remarks:        RIR data contain garbage for this network
 539 country:        RO
 540
 541 net:            193.119.0.0/19
 542 descr:          NetConn Services Ltd
 543 remarks:        APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
 544 country:        AP
 545
 546 net:            198.144.120.0/23
 547 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 548 remarks:        fake offshore location (BZ), traces back to NL
 549 country:        NL
 550
 551 net:            202.128.108.0/23
 552 descr:          NetConn Services Ltd
 553 remarks:        APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
 554 country:        AP
 555
 556 net:            2a02:e00:ffe7::/48
 557 descr:          Bradler & Krantz GmbH & Co. KG
 558 remarks:        allocated to DE, but actually announced from LT
 559 country:        LT
 560
 561 net:            2a02:e00:ffe8::/48
 562 descr:          Bradler & Krantz GmbH & Co. KG
 563 remarks:        allocated to DE, but actually announced from MD
 564 country:        MD
 565
 566 net:            2a02:e00:ffe9::/48
 567 descr:          Bradler & Krantz GmbH & Co. KG
 568 remarks:        allocated to DE, but actually announced from GB
 569 country:        GB
 570
 571 net:            2a05:9f06::/31
 572 descr:          Sibyl System LTD
 573 remarks:        RIR data contain garbage
 574 country:        NL
 575
 576 net:            2a06:e80::/29
 577 descr:          Datashield, Inc.
 578 remarks:        fake offshore location (SC), traces back to NL
 579 country:        NL
 580
 581 net:            2a0f:7a80::/29
 582 descr:          ASLINE Limited
 583 remarks:        APNIC chunk owned by a HK-based company, but assigned to DE
 584 country:        AP