overrides/override-other.txt

   1 #
   2 # override-other [.txt]
   3 #
   4 # This file contains Autonomous Systems (AS) or IP networks/addresses
   5 # whose country information in corresponding RIR data is believed or proven
   6 # to be invalid or inaccurate and which do not match to one of the special categories
   7 # A[1-3].
   8 #
   9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
  10 # (networks owned by letterbox companies in offshore jurisdictions) or
  11 # hostile (faked RIR data in order to bypass location-based filtering).
  12 #
  13 # Please keep this file sorted.
  14 #
  15
  16 aut-num:        AS6134
  17 descr:          XNNET LLC
  18 remarks:        traces back to an unknown oversea location (Hong Kong?), seems to tamper with RIR data
  19 country:        HK
  20
  21 aut-num:        AS8359
  22 descr:          MTS PJSC
  23 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
  24 country:        RU
  25
  26 aut-num:        AS12025
  27 descr:          Iron Mountain Data Center
  28 remarks:        ISP located in US, but some RIR data for announced prefixes contain garbage
  29 country:        US
  30
  31 aut-num:        AS18013
  32 descr:          ASLINE LIMITED
  33 remarks:        IP hijacker, traces back to AP region
  34 country:        AP
  35
  36 aut-num:        AS18254
  37 descr:          KLAYER LLC
  38 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
  39 country:        AP
  40
  41 aut-num:        AS22769
  42 descr:          DDOSING NETWORK
  43 remarks:        IP hijacker located somewhere in AP, massively tampers with RIR data
  44 country:        AP
  45
  46 aut-num:        AS24009
  47 descr:          HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
  48 remarks:        IP hijacker (?) located in HK, tampers with RIR data
  49 country:        HK
  50
  51 aut-num:        AS24700
  52 descr:          Yes Networks Unlimited Ltd
  53 remarks:        traces to UA, but some RIR entries seem to contain garbage (VG)
  54 country:        UA
  55
  56 aut-num:        AS28098
  57 descr:          ABGON Comunicaciones
  58 remarks:        ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
  59 country:        CL
  60
  61 aut-num:        AS35042
  62 descr:          IP Interactive UG (haftungsbeschraenkt)
  63 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
  64 country:        BG
  65
  66 aut-num:        AS35251
  67 descr:          NetLab
  68 remarks:        tampers with RIR data, most probabyl located in HK
  69 country:        HK
  70
  71 aut-num:        AS35478
  72 descr:          Buena Telecom SRL
  73 remarks:        ISP located in RO, but RIR data for announced prefixes contain garbage
  74 country:        RO
  75
  76 aut-num:        AS37518
  77 descr:          Fiber Grid Inc.
  78 remarks:        tampers with RIR data, traces back to SE
  79 country:        SE
  80
  81 aut-num:        AS39287
  82 descr:          ab stract / Peter Kolmisoppi
  83 remarks:        tampers with RIR data, traces back to SE
  84 country:        SE
  85
  86 aut-num:        AS40034
  87 descr:          Confluence Networks Inc.
  88 remarks:        fake offshore location (VG), traces back to Austin, TX, US
  89 country:        US
  90
  91 aut-num:        AS42397
  92 descr:          Bunea TELECOM SRL
  93 remarks:        ISP located in RO, but some RIR data for announced prefixes contain garbage
  94 country:        RO
  95
  96 aut-num:        AS42745
  97 descr:          Safe Value Limited
  98 remarks:        tampers with RIR data, traces back to somewhere in central Europe
  99 country:        EU
 100
 101 aut-num:        AS42831
 102 descr:          UKSERVERS
 103 remarks:        ISP located in GB, but some RIR data for announced prefixes contain garbage
 104 country:        GB
 105
 106 aut-num:        AS42960
 107 descr:          Cloud Management LLC
 108 remarks:        tampers with RIR data, traces back to HK
 109 country:        HK
 110
 111 aut-num:        AS48090
 112 descr:          PPTECHNOLOGY LIMITED
 113 remarks:        bulletproof ISP (related to AS204655) located in NL
 114 country:        NL
 115
 116 aut-num:        AS49466
 117 descr:          KLAYER LLC
 118 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
 119 country:        AP
 120
 121 aut-num:        AS49505
 122 descr:          Selectel
 123 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 124 country:        RU
 125
 126 aut-num:        AS51558
 127 descr:          Smart Telecom S.A.R.L
 128 remarks:        tampers with RIR data, traces back to RU
 129 country:        RU
 130
 131 aut-num:        AS55933
 132 descr:          Cloudie Limited
 133 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 134 country:        AP
 135
 136 aut-num:        AS56611
 137 descr:          REBA Communications BV
 138 remarks:        bulletproof ISP (related to AS202425) located in NL
 139 country:        NL
 140
 141 aut-num:        AS57717
 142 descr:          FiberXpress BV
 143 remarks:        bulletproof ISP (related to AS202425) located in NL
 144 country:        NL
 145
 146 aut-num:        AS58271
 147 descr:          FOP Gubina Lubov Petrivna
 148 remarks:        bulletproof ISP operating from a war zone in eastern UA
 149 country:        UA
 150
 151 aut-num:        AS62355
 152 descr:          Network Dedicated SAS
 153 remarks:        bulletproof ISP, claims to be located in CH, but traces to NL
 154 country:        NL
 155
 156 aut-num:        AS62468
 157 descr:          VpsQuan L.L.C.
 158 remarks:        claims to be located in US, but traces to HK
 159 country:        HK
 160
 161 aut-num:        AS134548
 162 descr:          DXTL Tseung Kwan O Service
 163 remarks:        tampers with RIR data, traces back to AP region
 164 country:        AP
 165
 166 aut-num:        AS137443
 167 descr:          Anchnet Asia Limited
 168 remarks:        IP hijacker located in HK, tampers with RIR data
 169 country:        HK
 170
 171 aut-num:        AS137951
 172 descr:          Clayer Limited
 173 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 174 country:        AP
 175
 176 aut-num:        AS201133
 177 descr:          Verdina Ltd.
 178 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 179 country:        BG
 180
 181 aut-num:        AS201912
 182 descr:          FutureNow Incorporated
 183 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 184 country:        BG
 185
 186 aut-num:        AS202425
 187 descr:          IP Volume Inc.
 188 remarks:        bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
 189 country:        NL
 190
 191 aut-num:        AS202492
 192 descr:          SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
 193 remarks:        fake offshore location (SC), traces back to NL
 194 country:        NL
 195
 196 aut-num:        AS204655
 197 descr:          Novogara Ltd.
 198 remarks:        bulletproof ISP (strongly linked to AS202425) located in NL
 199 country:        NL
 200
 201 aut-num:        AS207616
 202 descr:          Altrosky Technology Ltd.
 203 remarks:        fake offshore location (SC), traces back to CZ and NL
 204 country:        EU
 205
 206 aut-num:        AS208046
 207 descr:          Maximilian Kutzner trading as HostSlick
 208 remarks:        traces back to NL, but some RIR data for announced prefixes contain garbage
 209 country:        NL
 210
 211 aut-num:        AS209132
 212 descr:          Alviva Holding Limited
 213 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 214 country:        BG
 215
 216 aut-num:        AS209272
 217 descr:          Alviva Holding Limited
 218 remarks:        bulletproof ISP operating from a war zone in eastern UA
 219 country:        UA
 220
 221 aut-num:        AS213058
 222 descr:          Private Internet Hosting LTD
 223 remarks:        bulletproof ISP located in RU
 224 country:        RU
 225
 226 aut-num:        AS213373
 227 descr:          IP Connect Inc.
 228 remarks:        fake offshore location (SC), traces back to NL
 229 country:        NL
 230
 231 aut-num:        AS328543
 232 descr:          Sun Network Company Limited
 233 remarks:        IP hijacker, traces back to AP region
 234 country:        AP
 235
 236 aut-num:        AS398478
 237 descr:          PEG TECH INC
 238 remarks:        ISP located in HK, tampers with RIR data
 239 country:        HK
 240
 241 net:        5.1.68.0/24
 242 descr:      GaiacomLC
 243 remarks:    routed to DE, inaccurate RIR data
 244 country:    DE
 245
 246 net:        5.1.69.0/24
 247 descr:      GaiacomLC
 248 remarks:    routed to DE, inaccurate RIR data
 249 country:    DE
 250
 251 net:        5.1.83.0/24
 252 descr:      GaiacomLC
 253 remarks:    routed to DE, inaccurate RIR data
 254 country:    DE
 255
 256 net:        5.1.88.0/24
 257 descr:      GaiacomLC
 258 remarks:    routed to DE, inaccurate RIR data
 259 country:    DE
 260
 261 net:            5.252.32.0/22
 262 descr:          StormWall s.r.o.
 263 remarks:        claims to be located in DE, but traces back to somewhere else in central Europe
 264 country:        EU
 265
 266 net:            31.220.0.0/22
 267 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 268 remarks:        fake offshore location (BZ), traces back to NL
 269 country:        NL
 270
 271 net:            31.220.40.0/23
 272 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 273 remarks:        fake offshore location (BZ), traces back to NL
 274 country:        NL
 275
 276 net:            37.228.128.0/24
 277 descr:          FlokiNET Ltd.
 278 remarks:        fake offshore location (SC), traces back to RO
 279 country:        RO
 280
 281 net:            45.93.16.0/22
 282 descr:          IPv4 Superhub Limited
 283 remarks:        network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
 284 country:        HK
 285
 286 net:            45.134.144.0/22
 287 descr:          IPv4 Superhub Limited
 288 remarks:        same as 45.93.16.0/22
 289 country:        HK
 290
 291 net:            45.145.36.0/22
 292 descr:          GlobalCache Technology CO., Ltd.
 293 remarks:        claims to be located in DE, but traces back to HK
 294 country:        HK
 295
 296 net:            47.60.0.0/14
 297 descr:          Vodafone US Inc.
 298 remarks:        large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
 299 country:        ES
 300
 301 net:            85.202.80.0/24
 302 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 303 remarks:        fake offshore location (BZ), traces back to US
 304 country:        US
 305
 306 net:            88.151.117.0/24
 307 descr:          Golden Internet LLC
 308 remarks:        fake location (KP), WHOIS contact points to RU
 309 country:        RU
 310
 311 net:            95.181.152.0/21
 312 descr:          QWARTA LLC
 313 remarks:        fake location (US), WHOIS contact and traceroutes point to RU
 314 country:        RU
 315
 316 net:            103.197.148.0/22
 317 descr:          I.C.S. Trabia-Network S.R.L.
 318 remarks:        fake offshore location (HK), traces back to MD
 319 country:        MD
 320
 321 net:            130.117.0.0/16
 322 descr:          PSINet, Inc. (PSI) / Cogent Communications
 323 remarks:        Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
 324 country:        EU
 325
 326 net:            178.239.20.0/24
 327 descr:          Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 328 remarks:        fake location (BA), traces back to RO
 329 country:        RO
 330
 331 net:            185.10.68.0/24
 332 descr:          FlokiNET Ltd.
 333 remarks:        fake offshore location (SC), traces back to RO
 334 country:        RO
 335
 336 net:        185.140.204.0/22
 337 descr:      Hornetsecurity GmbH
 338 remarks:    all suballocations are used in DE, but are assigned to US
 339 country:    DE
 340
 341 net:            185.175.93.0/24
 342 descr:          Perfect Hosting Solutions
 343 remarks:        bulletproof ISP related to AS204655, traces back to BG
 344 country:        BG
 345
 346 net:            185.169.253.0/24
 347 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 348 remarks:        fake offshore location (BZ), traces back to US
 349 country:        US
 350
 351 net:            185.193.91.0/24
 352 descr:          Romanenko Stanislav Sergeevich
 353 remarks:        bulletproof ISP related to AS204655, traces back to BG
 354 country:        BG
 355
 356 net:            185.193.124.0/22
 357 descr:          ab stract / Njalla
 358 remarks:        bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
 359 country:        SE
 360
 361 net:            185.227.152.0/22
 362 descr:          XinYuan Interconnect (HONG KONG [sic!]) Limited
 363 remarks:        claims to be located in DE, traces back to HK
 364 country:        HK
 365
 366 net:            190.2.128.0/19
 367 descr:          WorldStream (LATAM) BV
 368 remarks:        LACNIC IP chunk solely used in NL (inaccurate data)
 369 country:        NL
 370
 371 net:            193.29.12.0/22
 372 descr:          Bunea TELECOM SRL
 373 remarks:        RIR data contain garbage for this network
 374 country:        RO
 375
 376 net:            198.144.120.0/23
 377 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 378 remarks:        fake offshore location (BZ), traces back to NL
 379 country:        NL
 380
 381 net:            2a02:e00:ffe7::/48
 382 descr:          Bradler & Krantz GmbH & Co. KG
 383 remarks:        allocated to DE, but actually announced from LT
 384 country:        LT
 385
 386 net:            2a02:e00:ffe8::/48
 387 descr:          Bradler & Krantz GmbH & Co. KG
 388 remarks:        allocated to DE, but actually announced from MD
 389 country:        MD
 390
 391 net:            2a02:e00:ffe9::/48
 392 descr:          Bradler & Krantz GmbH & Co. KG
 393 remarks:        allocated to DE, but actually announced from GB
 394 country:        GB
 395
 396 net:            2a05:9f06::/31
 397 descr:          Sibyl System LTD
 398 remarks:        RIR data contain garbage
 399 country:        NL