]> git.ipfire.org Git - location/location-database.git/blob - overrides/override-other.txt
override-{a1,other}: weekly batch of overrides
[location/location-database.git] / overrides / override-other.txt
1 #
2 # override-other [.txt]
3 #
4 # This file contains Autonomous Systems (AS) or IP networks/addresses
5 # whose country information in corresponding RIR data is believed or proven
6 # to be invalid or inaccurate and which do not match to one of the special categories
7 # A[1-3].
8 #
9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
10 # (networks owned by letterbox companies in offshore jurisdictions) or
11 # hostile (faked RIR data in order to bypass location-based filtering).
12 #
13 # Please keep this file sorted.
14 #
15
16 aut-num: AS3216
17 descr: PJSC "Vimpelcom"
18 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
19 country: RU
20
21 aut-num: AS6134
22 descr: XNNET LLC
23 remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data
24 country: HK
25
26 aut-num: AS8359
27 descr: MTS PJSC
28 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
29 country: RU
30
31 aut-num: AS12025
32 descr: Iron Mountain Data Center
33 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
34 country: US
35
36 aut-num: AS18013
37 descr: ASLINE LIMITED
38 remarks: IP hijacker, traces back to AP region
39 country: AP
40
41 aut-num: AS18254
42 descr: KLAYER LLC
43 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
44 country: AP
45
46 aut-num: AS22769
47 descr: DDOSING NETWORK
48 remarks: IP hijacker located somewhere in AP, massively tampers with RIR data
49 country: AP
50
51 aut-num: AS24009
52 descr: HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
53 remarks: IP hijacker (?) located in HK, tampers with RIR data
54 country: HK
55
56 aut-num: AS24700
57 descr: Yes Networks Unlimited Ltd
58 remarks: traces to UA, but some RIR entries seem to contain garbage (VG)
59 country: UA
60
61 aut-num: AS25098
62 descr: Netcalibre Ltd.
63 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage/
64 country: GB
65
66 aut-num: AS28098
67 descr: ABGON Comunicaciones
68 remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
69 country: CL
70
71 aut-num: AS35042
72 descr: IP Interactive UG (haftungsbeschraenkt)
73 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
74 country: BG
75
76 aut-num: AS35251
77 descr: NetLab
78 remarks: tampers with RIR data, most probably located in HK
79 country: HK
80
81 aut-num: AS35478
82 descr: Buena Telecom SRL
83 remarks: ISP located in RO, but RIR data for announced prefixes contain garbage
84 country: RO
85
86 aut-num: AS37518
87 descr: Fiber Grid Inc.
88 remarks: tampers with RIR data, traces back to SE
89 country: SE
90
91 aut-num: AS34224
92 descr: Neterra Ltd.
93 remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage
94 country: BG
95
96 aut-num: AS39287
97 descr: ab stract / Peter Kolmisoppi
98 remarks: tampers with RIR data, traces back to SE
99 country: SE
100
101 aut-num: AS40034
102 descr: Confluence Networks Inc.
103 remarks: fake offshore location (VG), traces back to Austin, TX, US
104 country: US
105
106 aut-num: AS41466
107 descr: Treidinvest LLC
108 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
109 country: RU
110
111 aut-num: AS41564
112 descr: Packet Exchange Limited
113 remarks: shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in EU), routing stolen AfriNIC networks, RIR data of prefixes announced by this AS cannot be trusted
114 country: EU
115
116 aut-num: AS42397
117 descr: Bunea TELECOM SRL
118 remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage
119 country: RO
120
121 aut-num: AS42745
122 descr: Safe Value Limited
123 remarks: tampers with RIR data, traces back to somewhere in central Europe
124 country: EU
125
126 aut-num: AS42831
127 descr: UKSERVERS
128 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
129 country: GB
130
131 aut-num: AS42960
132 descr: Cloud Management LLC
133 remarks: tampers with RIR data, traces back to HK
134 country: HK
135
136 aut-num: AS43310
137 descr: TOV "LVS"
138 remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage
139 country: UA
140
141 aut-num: AS44015
142 descr: Landgard Management Inc.
143 remarks: bulletproof ISP with strong links to RU
144 country: RU
145
146 aut-num: AS44477
147 descr: IP Oleinichenko Denis
148 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
149 country: RU
150
151 aut-num: AS48090
152 descr: PPTECHNOLOGY LIMITED
153 remarks: bulletproof ISP (related to AS204655) located in NL
154 country: NL
155
156 aut-num: AS41564
157 descr: Global Colocation Limited
158 remarks: part of a dirty ISP conglomerate most likely operating out of SE
159 country: SE
160
161 aut-num: AS49466
162 descr: KLAYER LLC
163 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
164 country: AP
165
166 aut-num: AS49505
167 descr: Selectel
168 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
169 country: RU
170
171 aut-num: AS49921
172 descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
173 remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
174 country: EU
175
176 aut-num: AS51558
177 descr: Smart Telecom S.A.R.L
178 remarks: tampers with RIR data, traces back to RU
179 country: RU
180
181 aut-num: AS55933
182 descr: Cloudie Limited
183 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
184 country: AP
185
186 aut-num: AS56611
187 descr: REBA Communications BV
188 remarks: bulletproof ISP (related to AS202425) located in NL
189 country: NL
190
191 aut-num: AS56851
192 descr: PE Skurykhin Mukola Volodumurovuch
193 remarks: tampers with RIR data, traces back to UA
194 country: UA
195
196 aut-num: AS57717
197 descr: FiberXpress BV
198 remarks: bulletproof ISP (related to AS202425) located in NL
199 country: NL
200
201 aut-num: AS57724
202 descr: DDOS-GUARD LTD
203 remarks: shady ISP, customers massively tamper with RIR data, we cannot trust this network
204 country: RU
205
206 aut-num: AS57858
207 descr: Inter Connects Inc.
208 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
209 country: SE
210
211 aut-num: AS58073
212 descr: YISP BV
213 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
214 country: NL
215
216 aut-num: AS58271
217 descr: FOP Gubina Lubov Petrivna
218 remarks: bulletproof ISP operating from a war zone in eastern UA
219 country: UA
220
221 aut-num: AS58349
222 descr: INNETRA PC
223 remarks: another shady customer of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
224 country: EU
225
226 aut-num: AS59580
227 descr: Batterflyai Media Ltd.
228 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
229 country: RU
230
231 aut-num: AS60485
232 descr: Inter Connects Inc. / Jing Yun
233 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks
234 country: SE
235
236 aut-num: AS62355
237 descr: Network Dedicated SAS
238 remarks: bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
239 country: NL
240
241 aut-num: AS61977
242 descr: Vivo Trade L.P.
243 remarks: another shady customer of "DDoS Guard Ltd."
244 country: RU
245
246 aut-num: AS62468
247 descr: VpsQuan L.L.C.
248 remarks: claims to be located in US, but traces to HK
249 country: HK
250
251 aut-num: AS63119
252 descr: Inter Connects Inc.
253 remarks: part of a dirty ISP conglomerate, traces back to US this time
254 country: US
255
256 aut-num: AS64437
257 descr: NForce Entertainment BV
258 remarks: currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL
259 country: NL
260
261 aut-num: AS134548
262 descr: DXTL Tseung Kwan O Service
263 remarks: tampers with RIR data, traces back to AP region
264 country: AP
265
266 aut-num: AS137443
267 descr: Anchnet Asia Limited
268 remarks: IP hijacker located in HK, tampers with RIR data
269 country: HK
270
271 aut-num: AS137951
272 descr: Clayer Limited
273 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
274 country: AP
275
276 aut-num: AS139330
277 descr: SANREN DATA LIMITED
278 remarks: IP hijacker located somewhere in AP region, tampers with RIR data
279 country: AP
280
281 aut-num: AS140733
282 descr: Wujidun Network Limited
283 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
284 country: AP
285
286 aut-num: AS200019
287 descr: ALEXHOST SRL
288 remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
289 country: MD
290
291 aut-num: AS200699
292 descr: Datashield, Inc.
293 remarks: fake offshore location (SC), traces back to NL
294 country: NL
295
296 aut-num: AS200845
297 descr: AVATEL TELECOM
298 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
299 country: ES
300
301 aut-num: AS201118
302 descr: Intelcom Group Ltd.
303 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
304 country: RU
305
306 aut-num: AS201133
307 descr: Verdina Ltd.
308 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
309 country: BG
310
311 aut-num: AS201912
312 descr: FutureNow Incorporated
313 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
314 country: BG
315
316 aut-num: AS202920
317 descr: DataClub S.A.
318 remarks: another shady customer of "DDoS Guard Ltd."
319 country: RU
320
321 aut-num: AS202425
322 descr: IP Volume Inc.
323 remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
324 country: NL
325
326 aut-num: AS202492
327 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
328 remarks: fake offshore location (SC), traces back to NL
329 country: NL
330
331 aut-num: AS202769
332 descr: Cooperative Investments LLC
333 remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
334 country: NL
335
336 aut-num: AS204136
337 descr: Kevin Holly trading as Silent Ghost e.U.
338 remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/
339 country: NL
340
341 aut-num: AS204353
342 descr: Global Offshore Limited
343 remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
344 country: EU
345
346 aut-num: AS204655
347 descr: Novogara Ltd.
348 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
349 country: NL
350
351 aut-num: AS205026
352 descr: Hauer Hosting Services Limited
353 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
354 country: ES
355
356 aut-num: AS206397
357 descr: Genius Guard / Genius Security Ltd.
358 remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU
359 country: RU
360
361 aut-num: AS207046
362 descr: Xtudio Networks S.L.U.
363 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
364 country: ES
365
366 aut-num: AS207616
367 descr: Altrosky Technology Ltd.
368 remarks: fake offshore location (SC), traces back to CZ and NL
369 country: EU
370
371 aut-num: AS208046
372 descr: Maximilian Kutzner trading as HostSlick
373 remarks: traces back to NL, but some RIR data for announced prefixes contain garbage
374 country: NL
375
376 aut-num: AS209132
377 descr: Alviva Holding Limited
378 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
379 country: BG
380
381 aut-num: AS209272
382 descr: Alviva Holding Limited
383 remarks: bulletproof ISP operating from a war zone in eastern UA
384 country: UA
385
386 aut-num: AS209401
387 descr: Gudaev Maxim Amrakhovich
388 remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
389 country: EU
390
391 aut-num: AS211849
392 descr: Kakharov Orinbassar Maratuly
393 remarks: ISP located in RU, but RIR data for announced prefixes contain garbage
394 country: RU
395
396 aut-num: AS213035
397 descr: Serverion BV
398 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
399 country: NL
400
401 aut-num: AS213058
402 descr: Private Internet Hosting LTD
403 remarks: bulletproof ISP located in RU
404 country: RU
405
406 aut-num: AS213373
407 descr: IP Connect Inc.
408 remarks: fake offshore location (SC), traces back to NL
409 country: NL
410
411 aut-num: AS262254
412 descr: DDOS-GUARD CORP.
413 remarks: fake offshore location (BZ), traces back to RU
414 country: RU
415
416 aut-num: AS328543
417 descr: Sun Network Company Limited
418 remarks: IP hijacker, traces back to AP region
419 country: AP
420
421 aut-num: AS328671
422 descr: Datapacket Maroc SARL
423 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
424 country: NL
425
426 aut-num: AS398478
427 descr: PEG TECH INC
428 remarks: ISP located in HK, tampers with RIR data
429 country: HK
430
431 aut-num: AS398826
432 descr: OLink Cloud LLC
433 remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage
434 country: US
435
436 net: 5.1.68.0/24
437 descr: GaiacomLC
438 remarks: routed to DE, inaccurate RIR data
439 country: DE
440
441 net: 5.1.69.0/24
442 descr: GaiacomLC
443 remarks: routed to DE, inaccurate RIR data
444 country: DE
445
446 net: 5.1.83.0/24
447 descr: GaiacomLC
448 remarks: routed to DE, inaccurate RIR data
449 country: DE
450
451 net: 5.1.88.0/24
452 descr: GaiacomLC
453 remarks: routed to DE, inaccurate RIR data
454 country: DE
455
456 net: 5.252.32.0/22
457 descr: StormWall s.r.o.
458 remarks: claims to be located in DE, but traces back to somewhere else in central Europe
459 country: EU
460
461 net: 31.220.0.0/22
462 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
463 remarks: fake offshore location (BZ), traces back to NL
464 country: NL
465
466 net: 31.220.40.0/23
467 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
468 remarks: fake offshore location (BZ), traces back to NL
469 country: NL
470
471 net: 37.228.128.0/24
472 descr: FlokiNET Ltd.
473 remarks: fake offshore location (SC), traces back to RO
474 country: RO
475
476 net: 45.93.16.0/22
477 descr: IPv4 Superhub Limited
478 remarks: network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
479 country: HK
480
481 net: 45.134.12.0/24
482 descr: MS Network LTD
483 remarks: fake offshore location (SC), traces back to NLm
484 country: NL
485
486 net: 45.134.144.0/22
487 descr: IPv4 Superhub Limited
488 remarks: same as 45.93.16.0/22
489 country: HK
490
491 net: 45.145.36.0/22
492 descr: GlobalCache Technology CO., Ltd.
493 remarks: claims to be located in DE, but traces back to HK
494 country: HK
495
496 net: 45.148.167.0/24
497 descr: US AFG 20200130
498 remarks: claims to be located in US, but traces back to SK
499 country: SK
500
501 net: 47.60.0.0/14
502 descr: Vodafone US Inc.
503 remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
504 country: ES
505
506 net: 85.202.80.0/24
507 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
508 remarks: fake offshore location (BZ), traces back to US
509 country: US
510
511 net: 88.151.117.0/24
512 descr: Golden Internet LLC
513 remarks: fake location (KP), WHOIS contact points to RU
514 country: RU
515
516 net: 91.243.32.0/19
517 descr: Petersburg Internet Network Ltd.
518 remarks: RIR data for suballocations contain garbage, they are all located in RU
519 country: RU
520
521 net: 95.181.152.0/21
522 descr: QWARTA LLC
523 remarks: fake location (US), WHOIS contact and traceroutes point to RU
524 country: RU
525
526 net: 103.197.148.0/22
527 descr: I.C.S. Trabia-Network S.R.L.
528 remarks: fake offshore location (HK), traces back to MD
529 country: MD
530
531 net: 130.117.0.0/16
532 descr: PSINet, Inc. (PSI) / Cogent Communications
533 remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
534 country: EU
535
536 net: 178.239.20.0/24
537 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
538 remarks: fake location (BA), traces back to RO
539 country: RO
540
541 net: 185.10.68.0/24
542 descr: FlokiNET Ltd.
543 remarks: fake offshore location (SC), traces back to RO
544 country: RO
545
546 net: 185.56.80.0/22
547 descr: Datashield, Inc.
548 remarks: fake offshore location (SC), traces back to NL
549 country: NL
550
551 net: 185.85.120.0/22
552 descr: Intelcom Group Ltd
553 remarks: fake offshore location (SC), traces back to RU
554 country: RU
555
556 net: 185.140.204.0/22
557 descr: Hornetsecurity GmbH
558 remarks: all suballocations are used in DE, but are assigned to US
559 country: DE
560
561 net: 185.175.93.0/24
562 descr: Perfect Hosting Solutions
563 remarks: bulletproof ISP related to AS204655, traces back to BG
564 country: BG
565
566 net: 185.169.253.0/24
567 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
568 remarks: fake offshore location (BZ), traces back to US
569 country: US
570
571 net: 185.193.91.0/24
572 descr: Romanenko Stanislav Sergeevich
573 remarks: bulletproof ISP related to AS204655, traces back to BG
574 country: BG
575
576 net: 185.193.124.0/22
577 descr: ab stract / Njalla
578 remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
579 country: SE
580
581 net: 185.227.152.0/22
582 descr: XinYuan Interconnect (HONG KONG [sic!]) Limited
583 remarks: claims to be located in DE, traces back to HK
584 country: HK
585
586 net: 190.2.128.0/19
587 descr: WorldStream (LATAM) BV
588 remarks: LACNIC IP chunk solely used in NL (inaccurate data)
589 country: NL
590
591 net: 192.12.3.0/24
592 descr: Deep Eddy Internet Consulting
593 remarks: claims to be located in US, traces back to AP region
594 country: AP
595
596 net: 193.29.12.0/22
597 descr: Bunea TELECOM SRL
598 remarks: RIR data contain garbage for this network
599 country: RO
600
601 net: 193.119.0.0/19
602 descr: NetConn Services Ltd
603 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
604 country: AP
605
606 net: 195.66.165.0/24
607 descr: Posta Crne Gore
608 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
609 country: ME
610
611 net: 195.252.115.0/24
612 descr: Drenik ISP
613 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
614 country: ME
615
616 net: 195.252.120.0/24
617 descr: AB SOFT
618 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
619 country: ME
620
621 net: 198.144.120.0/23
622 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
623 remarks: fake offshore location (BZ), traces back to NL
624 country: NL
625
626 net: 202.128.108.0/23
627 descr: NetConn Services Ltd
628 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
629 country: AP
630
631 net: 2a02:e00:ffe7::/48
632 descr: Bradler & Krantz GmbH & Co. KG
633 remarks: allocated to DE, but actually announced from LT
634 country: LT
635
636 net: 2a02:e00:ffe8::/48
637 descr: Bradler & Krantz GmbH & Co. KG
638 remarks: allocated to DE, but actually announced from MD
639 country: MD
640
641 net: 2a02:e00:ffe9::/48
642 descr: Bradler & Krantz GmbH & Co. KG
643 remarks: allocated to DE, but actually announced from GB
644 country: GB
645
646 net: 2a05:9f06::/31
647 descr: Sibyl System LTD
648 remarks: RIR data contain garbage
649 country: NL
650
651 net: 2a06:e80::/29
652 descr: Datashield, Inc.
653 remarks: fake offshore location (SC), traces back to NL
654 country: NL
655
656 net: 2a0f:7a80::/29
657 descr: ASLINE Limited
658 remarks: APNIC chunk owned by a HK-based company, but assigned to DE
659 country: AP