4 # This file contains Autonomous Systems and IP networks whose RIR data are believed to be inaccurate,
5 # incomplete, or bogus on purpose and by chance. A small subset of its entries applies to AS descriptions,
6 # while the majority covers country code assignments.
8 # The latter are crucial due to location-based firewalling or routing. Inaccurate country code assignments
9 # therefore pose a security threat to these users, especially if being set intentionally to circumvent such
12 # The term "Location" may refer to the actual, physical location of a network (usually hard to enumerate
13 # beyond a country-level), or its jurisdiction. To the best of our knowledge, the contents of "country"-fields
14 # in RIR databases were never clarified in this conext.
16 # When in doubt, the physical location of a network will be used below, especially if the jurisdiction of a
17 # network appears to be not helpful at all, such as offshore letterbox companies on the other end of the world.
19 # Improvement suggestions are appreciated, please submit them as patches to the location mailing
20 # list. Refer to https://lists.ipfire.org/mailman/listinfo/location and https://wiki.ipfire.org/devel/contact
21 # for further information.
23 # Please keep this file sorted.
27 name: Tampere University of Technology
28 remarks: has no sane AS name set in RIPE DB
32 remarks: has no sane AS name set in APNIC DB
36 remarks: has no sane AS name set in APNIC DB
39 descr: WNET TELECOM USA Corp.
40 remarks: traces back to various locations in UA, seems to tamper with RIR data
44 descr: PJSC "Vimpelcom"
45 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
50 remarks: ISP (?) located in ZA, but some RIR data for announced prefixes contain garbage
54 name: Chinanet Backbone
55 remarks: has no sane AS name set in APNIC DB
58 name: Software Technology Park of India
59 remarks: has no sane AS name set in APNIC DB
63 remarks: ISP located in JP, RIR data for announced prefixes contain garbage
67 name: Indonesia Network Information Center
68 remarks: has no sane AS name set in APNIC DB
71 name: China169 Beijing Broadband Network
72 remarks: has no sane AS name set in APNIC DB
75 descr: Tianhai InfoTech
76 remarks: IP hijacker located somewhere in AP, massively tampers with RIR data
81 remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data
85 name: Zajil International Telecom Company
86 remarks: has no sane AS name set in RIPE DB
89 descr: Leaseweb USA, Inc.
90 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
95 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
99 descr: xTom Hong Kong Limited
100 remarks: ISP located in HK, RIR data for announced prefixes contain garbage
104 descr: Iron Mountain Data Center
105 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
109 descr: PJSC Rostelecom
110 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
114 descr: Sokolov Dmitry Nikolaevich
115 remarks: ISP located in RU, but many RIR data for announced prefixes contain garbage
120 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
125 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
129 descr: ASLINE LIMITED
130 remarks: IP hijacker, traces back to AP region
134 name: Northern Taiwan Community University
135 remarks: has no sane AS name set in APNIC DB
139 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
143 descr: Isomedia, Inc.
144 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
149 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
153 descr: Inteldome Corporation
154 remarks: ... whose location we are unable to determine precisely, but its definitely not MH :-/
159 remarks: ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data
163 descr: DDOSING NETWORK
164 remarks: IP hijacker located somewhere in AP, massively tampers with RIR data
168 descr: xTom Pty. Ltd.
169 remarks: ISP located in AU, RIR data for announced prefixes contain garbage
173 descr: HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
174 remarks: IP hijacker (?) located in HK, tampers with RIR data
178 descr: Yes Networks Unlimited Ltd
179 remarks: traces to UA, but some RIR entries seem to contain garbage (VG)
183 descr: myLoc managed IT AG
184 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
188 descr: Netcalibre Ltd.
189 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
194 remarks: traces back to NL
198 descr: Leaseweb USA, Inc.
199 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
203 descr: ABGON Comunicaciones
204 remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
208 descr: Leaseweb Deutschland GmbH
209 remarks: ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage
213 descr: Leaseweb USA, Inc.
214 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage (BZ)
218 descr: combahton GmbH
219 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
223 descr: Virtual Systems LLC
224 remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage
228 descr: CAFE Informatique et telecommunications (defunct)
229 remarks: spamming bogon located in TG - formerly allocated to CAFE Informatique et telecommunications
234 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
238 descr: Parsun Network Solutions Pty. Ltd.
239 remarks: Shady ISP located in AU, but some RIR data for announced prefixes contain garbage
244 remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage
248 descr: Petersburg Internet Network Ltd.
249 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
253 descr: IP Interactive UG (haftungsbeschraenkt)
254 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
258 descr: Ihor Hosting LLC
259 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
264 remarks: tampers with RIR data, most probably located in HK
268 descr: Buena Telecom SRL
269 remarks: ISP located in RO, but RIR data for announced prefixes contain garbage
273 descr: iDea Leaper Innovation Inc.
274 remarks: tampers with RIR data, traces back to AP area
279 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
284 remarks: ... who thinks messing with countries is funny :-/
288 descr: Silverstar Invest Limited
289 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
294 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
298 descr: NetOne Telecomunicacoes (defunct)
299 remarks: spamming bogon located in or near Luanda, AO - formerly allocated to NetOne Telecomunicacoes
303 descr: HTT Telecom S.A (defunct)
304 remarks: spamming bogon located in CM - formerly allocated to HTT Telecom S.A
308 descr: Gestora de Infraestructuras de Telecomunicaciones de Guinea Ecuatorial
309 remarks: announces bogons out of GQ
313 descr: Sun Network (Hong Kong) Limited
314 remarks: ISP located in HK (duh!), but some RIR data for announced prefixes contain garbage
318 descr: Fiber Grid Inc.
319 remarks: tampers with RIR data, traces back to SE
324 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
328 descr: ab stract / Peter Kolmisoppi
329 remarks: tampers with RIR data, traces back to SE
333 descr: Confluence Networks Inc.
334 remarks: fake offshore location (VG), traces back to Austin, TX, US
339 remarks: Shady ISP located in US, tampers with RIR data
343 descr: Treidinvest LLC
344 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
348 descr: Packet Exchange Limited
349 remarks: shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in EU), routing stolen AfriNIC networks, RIR data of prefixes announced by this AS cannot be trusted
353 descr: NextGenWebs, S.L.
354 remarks: traces back to NL
358 descr: AMATI FOUNDATION
359 remarks: ISP located in SE, seems to tamper with RIR data (proxies too?)
363 descr: Bunea TELECOM SRL
364 remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage
368 descr: Safe Value Limited
369 remarks: tampers with RIR data, traces back to somewhere in central Europe
374 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
378 descr: Cloud Management LLC
379 remarks: tampers with RIR data, traces back to AP area
383 descr: DGN TEKNOLOJI A.S.
384 remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage
389 remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage
393 descr: NForce Entertainment B.V.
394 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
398 descr: PQ HOSTING S.R.L.
399 remarks: tampers with RIR data sometimes, traces back to NL
403 descr: Digital Energy LLC
404 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
408 descr: Landgard Management Inc.
409 remarks: bulletproof ISP with strong links to RU
413 descr: IP Oleinichenko Denis
414 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
418 descr: Skylink Data Center BV
419 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
424 remarks: claims US for its prefixes announced, but traces back to KR
428 descr: Servers Australia Pty. Ltd.
429 remarks: ISP located in AU, but some RIR data for announced prefixes contain garbage
433 descr: Network and Security Solutions Limited
434 remarks: ISP located in HK, but some RIR data for announced prefixes contain garbage
438 descr: Dreamtorrent Corp
439 remarks: traceroutes dead-end somewhere in or near RU
443 descr: Spectre Operations BV
444 remarks: ISP located in NL, but some RIR data for suballocations of announced prefixes contain garbage
448 descr: PPTECHNOLOGY LIMITED
449 remarks: bulletproof ISP (related to AS204655) located in NL
453 descr: ADM Service Ltd.
454 remarks: traces back to Vilnius, LT
459 remarks: tampers with RIR data, traces back to RU
463 descr: Nice IT Services Group Inc.
464 remarks: Rogue ISP located in CH, but some RIR data for announced prefixes contain garbage
469 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
473 descr: Global Layer BV
474 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
479 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
483 descr: DDoS Guard Ltd. / Cognitive Cloud LLP
484 remarks: another shady customer or branch of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
488 descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
489 remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
493 descr: Worldstream BV
494 remarks: ISP located in NL, but many RIR data for announced prefixes contain garbage
498 descr: Tamatiya EOOD / 4Vendeta
499 remarks: Questionable (at best) ISP located in BG, clients massively tamper with RIR data
503 descr: Serverius Holding B.V.
504 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
508 descr: SALTYFISH TECH LTD
509 remarks: traceroutes dead-end somewhere near HK
513 descr: Smart Telecom S.A.R.L
514 remarks: tampers with RIR data, traces back to RU
519 remarks: tampers with RIR data, traces back to RU
524 remarks: tampers with RIR data
529 remarks: ISP and/or IP hijacker located in US this time, tampers with RIR data
533 descr: Reliance Jio Infocomm Limited
534 remarks: ISP located in IN, but some RIR data for announced prefixes contain garbage
538 descr: Cloudie Limited
539 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
543 descr: vServer.site LTD
544 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
548 descr: REBA Communications BV
549 remarks: bulletproof ISP (related to AS202425) located in NL
553 descr: PE Skurykhin Mukola Volodumurovuch
554 remarks: tampers with RIR data, traces back to UA
559 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
563 descr: FiberXpress BV
564 remarks: bulletproof ISP (related to AS202425) located in NL
568 descr: Telefonica LLC
569 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
573 descr: Inter Connects Inc.
574 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
578 descr: Inter Connects Inc.
579 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
584 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
589 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
593 descr: FOP Gubina Lubov Petrivna
594 remarks: bulletproof ISP operating from a war zone in eastern UA
598 descr: CloudWall Ltd.
599 remarks: RIR data neither contain a postal address nor a phone number, traceroutes end in Sofia, BG
604 remarks: another shady customer of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
608 descr: Leaseweb Asia Pacific pte. ltd.
609 remarks: ISP located in SG, but some RIR data for announced prefixes contain garbage
613 descr: Batterflyai Media Ltd.
614 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
618 descr: Vault Dweller OU
619 remarks: traceroutes dead-end somewhere in or near RU
623 descr: Stormwall s.r.o
624 remarks: appears to scatter across EU at least, RIR data contain garbage, might be an A3 candidate
629 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
633 descr: The Infrastructure Group B.V.
634 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
638 descr: DignusData LLC
639 remarks: ISP located in PL, but _all_ RIR data for announced prefixes contain garbage
643 descr: Inter Connects Inc. / Jing Yun
644 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks
648 descr: Bursabil Teknoloji A.S.
649 remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage
653 descr: LeaseWeb Netherlands B.V.
654 remarks: ISP located in Amsterdam, NL, but many RIR data for announced prefixes contain garbage
658 descr: 4b42 UG (haftungsbeschränkt)
659 remarks: ... who thinks messing with countries is funny :-/
663 descr: Vivo Trade L.P.
664 remarks: another shady customer of "DDoS Guard Ltd."
668 descr: SpectraIP B.V.
669 remarks: bulletproof ISP (linked to AS202425 et al.) located in NL
673 descr: Ibernap Management S.L.
674 remarks: traces back to various locations in US
678 descr: Network Dedicated SAS
679 remarks: bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
683 descr: VpsQuan L.L.C.
684 remarks: claims to be located in US, but traces to HK
689 remarks: ISP located in US, but many RIR data for announced prefixes contain garbage
693 descr: Inter Connects Inc.
694 remarks: part of a dirty ISP conglomerate, traces back to US this time
698 descr: BGP Consultancy Pte Ltd
699 remarks: possibly invoved in IP hijacking, located somewhere in AP area
703 descr: SKB Enterprise B.V.
704 remarks: bulletproof ISP (linked to AS202425 et al.) located in NL
708 descr: NForce Entertainment BV
709 remarks: currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL
713 descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED
714 remarks: ISP located in HK, tampers with RIR data
718 descr: POWER LINE DATACENTER
719 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
723 descr: CloudITIDC Global
724 remarks: ISP and/or IP hijacker located somehwere in AP
728 descr: Leaseweb Asia Pacific pte. ltd.
729 remarks: ISP located in HK, some RIR data for announced prefixes contain garbage
733 descr: rainbow network limited
734 remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
738 descr: ULan Network Limited
739 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
743 descr: Leaseweb Japan K.K.
744 remarks: ISP located in JP, some RIR data for announced prefixes contain garbage
748 descr: DXTL Tseung Kwan O Service
749 remarks: tampers with RIR data, traces back to AP region
753 descr: Sky Digital Co., Ltd.
754 remarks: IP hijacker located in TW, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
758 descr: Cloud Servers Pvt Ltd
759 remarks: ISP located in NL, all RIR data for announced prefixes contain garbage
763 descr: Optix Pakistan (Pvt.) Limited
764 remarks: ISP located in PK, some RIR data for announced prefixes (bogons?) contain garbage
768 descr: Blue Data Center
769 remarks: IP hijacker located somewhere in AP area, tampers with RIR data
774 remarks: IP hijacker located somehwere in AP, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
778 descr: Gigabitbank Global / Anchnet Asia Limited (?)
779 remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
783 descr: Leaseweb Australia Pty. Ltd.
784 remarks: ISP located in AU, some RIR data for announced prefixes contain garbage
788 descr: Anchnet Asia Limited
789 remarks: IP hijacker located in HK, tampers with RIR data
793 descr: HONGKONG CLOUD NETWORK TECHNOLOGY CO., LIMITED
794 remarks: IP hijacker located in AP area, tampers with RIR data
798 descr: Clayer Limited
799 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
804 remarks: ISP located in KR, some RIR data for announced prefixes contain garbage
808 descr: Asquare International
809 remarks: ... which appears to host their stuff solely in US
813 descr: SUPERCLOUDS LIMITED
814 remarks: ISP located in HK, tampers with RIR data
818 descr: rainbow network limited
819 remarks: IP hijacker located somewhere in AP area, suspected to be part of the "Asline" IP hijacking gang, tampers with RIR data
823 descr: Cloudflare Sydney, LLC
824 remarks: ... but CF failed to set the country for announced prefixes to AU as well :-/
828 descr: SANREN DATA LIMITED
829 remarks: IP hijacker located somewhere in AP region, tampers with RIR data
833 descr: HK NEW CLOUD TECHNOLOGY LIMITED
834 remarks: ISP and/or IP hijacker located in AP area, tampers with RIR data
838 descr: HONG KONG Megalayer Technology Co.,Limited
839 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
843 descr: LUCIDACLOUD LIMITED
844 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
848 descr: ANLIAN NETWORK TECHNOLOGY CO., LIMITED
849 remarks: ISP located in HK, tampers with RIR data
853 descr: Galaxy Broadband
854 remarks: ISP located in PK, but announces 204.137.128.0/18, which is ARIN space, assigned to "AGIS" / Cogent - odd...
858 descr: Hong Kong Communications International Co., Limited
859 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
863 descr: Wujidun Network Limited
864 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
868 descr: Full Time Hosting
869 remarks: ISP located in DE, tampers with RIR data
873 descr: Incomparable(HK)Network Co., Limited
874 remarks: ISP and/or IP hijacker located in AP area, tampers with RIR data
878 descr: FLP Kochenov Aleksej Vladislavovich
879 remarks: ISP located in UA, but RIR data for announced prefixes all say EU
884 remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
889 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
893 descr: Datashield, Inc.
894 remarks: fake offshore location (SC), traces back to NL
898 descr: Network Management Ltd.
899 remarks: traceroutes dead-end somewhere in or near RU
903 descr: AVATEL TELECOM
904 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
908 descr: Intelcom Group Ltd.
909 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
914 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
918 descr: FutureNow Incorporated
919 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
924 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
928 descr: IP Volume Inc.
929 remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
933 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
934 remarks: fake offshore location (SC), traces back to RU
938 descr: Cooperative Investments LLC
939 remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
944 remarks: another shady customer of "DDoS Guard Ltd."
949 remarks: traces back to SE
953 descr: MismeNet Telecomunicaciones
954 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
958 descr: Kevin Holly trading as Silent Ghost e.U.
959 remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/
963 descr: Rishikeshan Lavakumar
964 remarks: Network operator thinks messing with RIR data is funny... :-/
968 descr: Global Offshore Limited
969 remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
974 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
978 descr: Hauer Hosting Services Limited
979 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
983 descr: LEASEWEB UK LIMITED
984 remarks: ISP located in London, GB, but many RIR data for announced prefixes contain garbage
988 descr: Genius Guard / Genius Security Ltd.
989 remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU
993 descr: Server Hosting Pty Ltd
994 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
998 descr: Xtudio Networks S.L.U.
999 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
1003 descr: AAEX NETWORK TECHNOLOGY LTD
1004 remarks: IP hijacker located in HK
1008 descr: Kapteyan Bilisim Teknolojileri
1009 remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage
1014 remarks: ISP located in US, but many RIR data for announced prefixes contain garbage
1018 descr: Network Management Ltd.
1019 remarks: traceroutes dead-end somewhere in or near RU
1023 descr: Altrosky Technology Ltd.
1024 remarks: fake offshore location (SC), traces back to CZ and NL
1029 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
1033 descr: Maximilian Kutzner trading as HostSlick
1034 remarks: traces back to NL, but some RIR data for announced prefixes contain garbage
1038 descr: Access2.IT Group B.V.
1039 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
1043 descr: Internet Hosting Ltd.
1044 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
1048 descr: Nese Mala / Moon DC
1049 remarks: shady ISP located in TR, but many RIR data for announced prefixes contain garbage
1053 descr: Alviva Holding Limited
1054 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
1058 descr: Miti 2000 EOOD
1059 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
1063 descr: Alviva Holding Limited
1064 remarks: bulletproof ISP operating from a war zone in eastern UA
1068 descr: SEMrush CY LTD
1069 remarks: claims CY for announced prefixes, but they are all hosted in NL
1074 remarks: shady ISP located in TR, but RIR data for announced prefixes contain garbage
1078 descr: Gudaev Maxim Amrakhovich
1079 remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
1083 descr: Packet Flip, LLC
1084 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
1088 descr: VPSSC Networks LTD
1089 remarks: ISP located in UA, but RIR data for announced prefixes contain garbage
1093 descr: PAYWISE HOLDING Sp. z.o.o.
1094 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1098 descr: JMT Paso Limited
1099 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1103 descr: Kakharov Orinbassar Maratuly
1104 remarks: ISP and/or IP hijacker located in RU, but RIR data for announced prefixes contain garbage
1108 descr: WFD SERVICE LTD
1109 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1113 descr: Perry Paans trading as Release V.O.F.
1114 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1119 remarks: ISP located in GB, but RIR data for announced prefixes contain garbage
1123 descr: FOP Hornostay Mykhaylo Ivanovych
1124 remarks: ISP located in RU, but some RIR data are inaccurate (UA)
1128 descr: RoyaleHosting B.V.
1129 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
1133 descr: Massimo Cotrozzi
1134 remarks: ISP located in GB, but RIR data for announced prefixes contain garbage
1138 descr: MILEGROUP LTD
1139 remarks: traceroutes dead-end somewhere in Central Europe
1144 remarks: ISP located in RU, but RIR data for announced prefixes contain garbage
1148 descr: Quality Area Ltd.
1149 remarks: traceroutes dead-end somewhere near Crimera, UA
1154 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
1158 descr: Private Internet Hosting LTD
1159 remarks: bulletproof ISP located in RU
1163 descr: IP Connect Inc.
1164 remarks: fake offshore location (SC), traces back to NL
1168 descr: SIA "Singularity Telecom"
1169 remarks: Shady customer of AS31732 (Parsun Network Solutions Pty. Ltd.) located in AU, RIR data for announced prefixes contain garbage
1173 descr: DDOS-GUARD CORP.
1174 remarks: fake offshore location (BZ), traces back to RU
1179 remarks: traceroutes dead-end somewhere near NYC, US
1183 descr: Flyservers S.A.
1184 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
1189 remarks: ISP located in ZA, RIR data for announced prefixes contain garbage
1193 descr: Sun Network Company Limited
1194 remarks: IP hijacker, traces back to AP region
1198 descr: Datapacket Maroc SARL
1199 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
1203 descr: Xhostserver LLC
1204 remarks: shady ISP located in US, some RIR data for announced prefixes contain garbage
1208 descr: Leaseweb USA, Inc.
1209 remarks: ISP located in Dallas, TX, US, but some RIR data for announced prefixes contain garbage
1213 descr: KURUN CLOUD INC
1214 remarks: ISP and/or IP hijacker located in US, some RIR data for announced prefixes contain garbage
1218 descr: Leaseweb USA, Inc.
1219 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
1224 remarks: ISP located in HK, tampers with RIR data
1229 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
1233 descr: OLink Cloud LLC
1234 remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage
1239 remarks: ISP and/or IP hijacker located in HK, tampers with RIR data
1243 descr: Serverion LLC
1244 remarks: ISP located in NL, RIR data contain garbage
1249 remarks: Part of the "ASLINE" IP hijacking gang, HK vicinity seems to be part of US too for them :-/
1254 remarks: routed to DE, inaccurate RIR data
1259 remarks: routed to DE, inaccurate RIR data
1264 remarks: routed to DE, inaccurate RIR data
1269 remarks: routed to DE, inaccurate RIR data
1273 descr: StormWall s.r.o.
1274 remarks: claims to be located in DE, but traces back to somewhere else in central Europe
1278 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1279 remarks: fake offshore location (BZ), traces back to NL
1283 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1284 remarks: fake offshore location (BZ), traces back to NL
1287 net: 37.228.128.0/24
1288 descr: FlokiNET Ltd.
1289 remarks: fake offshore location (SC), traces back to RO
1294 remarks: inaccurate data from ARIN, traces back to CN
1298 descr: Karolio IT paslaugos, UAB
1299 remarks: fake location (IR), traces back to NL
1303 descr: IP Volume Ltd. / Epik
1304 remarks: fake location (CH), traces back to GB
1308 descr: IPv4 Superhub Limited
1309 remarks: network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
1313 descr: MS Network LTD
1314 remarks: fake offshore location (SC), traces back to NL
1317 net: 45.134.144.0/22
1318 descr: IPv4 Superhub Limited
1319 remarks: same as 45.93.16.0/22
1323 descr: GlobalCache Technology CO., Ltd.
1324 remarks: claims to be located in DE, but traces back to HK
1327 net: 45.148.167.0/24
1328 descr: US AFG 20200130
1329 remarks: claims to be located in US, but traces back to SK
1333 descr: Vodafone US Inc.
1334 remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
1339 remarks: fake location (RU), traces back to HK
1343 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1344 remarks: fake offshore location (BZ), traces back to US
1347 net: 88.151.117.0/24
1348 descr: Golden Internet LLC
1349 remarks: fake location (KP), WHOIS contact points to RU
1352 net: 91.149.194.0/24
1353 descr: IP Volume Ltd. / Epik
1354 remarks: fake location (CH), traces back to SE
1357 net: 91.149.195.0/24
1358 descr: IP Volume Ltd. / Epik
1359 remarks: fake location (CH), traces back to SE
1362 net: 91.149.224.0/24
1363 descr: IP Volume Ltd. / Epik
1364 remarks: fake location (CH), traces back to NO
1367 net: 91.216.210.0/24
1368 descr: EasyForex Ltd.
1369 remarks: fake location (CY), traces to IE area
1373 descr: Petersburg Internet Network Ltd.
1374 remarks: RIR data for suballocations contain garbage, they are all located in RU
1378 descr: G-Core Labs S.A.
1379 remarks: fake location (CY), traces back to HK
1382 net: 95.181.152.0/21
1384 remarks: fake location (US), WHOIS contact and traceroutes point to RU
1387 net: 103.197.148.0/22
1388 descr: I.C.S. Trabia-Network S.R.L.
1389 remarks: fake offshore location (HK), traces back to MD
1393 descr: PSINet, Inc. (PSI) / Cogent Communications
1394 remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
1399 remarks: fake offshore locations (AQ / PN / SS), traces back to US
1402 net: 178.239.20.0/24
1403 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
1404 remarks: fake location (BA), traces back to RO
1408 descr: FlokiNET Ltd.
1409 remarks: fake offshore location (SC), traces back to RO
1413 descr: Datashield, Inc.
1414 remarks: fake offshore location (SC), traces back to NL
1417 net: 185.85.120.0/22
1418 descr: Intelcom Group Ltd
1419 remarks: fake offshore location (SC), traces back to RU
1422 net: 185.140.204.0/22
1423 descr: Hornetsecurity GmbH
1424 remarks: all suballocations are used in DE, but are assigned to US
1427 net: 185.175.93.0/24
1428 descr: Perfect Hosting Solutions
1429 remarks: bulletproof ISP related to AS204655, traces back to BG
1432 net: 185.169.253.0/24
1433 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1434 remarks: fake offshore location (BZ), traces back to US
1437 net: 185.193.91.0/24
1438 descr: Romanenko Stanislav Sergeevich
1439 remarks: bulletproof ISP related to AS204655, traces back to BG
1442 net: 185.193.124.0/22
1443 descr: ab stract / Njalla
1444 remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
1447 net: 185.227.152.0/22
1448 descr: XinYuan Interconnect (HONG KONG [sic!]) Limited
1449 remarks: claims to be located in DE, traces back to HK
1453 descr: WorldStream (LATAM) BV
1454 remarks: LACNIC IP chunk solely used in NL (inaccurate data)
1458 descr: Deep Eddy Internet Consulting
1459 remarks: claims to be located in US, traces back to AP region
1463 descr: Bunea TELECOM SRL
1464 remarks: RIR data contain garbage for this network
1468 descr: NetConn Services Ltd
1469 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
1472 net: 193.186.196.0/22
1474 remarks: claims to be located in DE, traces back to GB
1477 net: 195.66.165.0/24
1478 descr: Posta Crne Gore
1479 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
1482 net: 195.252.115.0/24
1484 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
1487 net: 195.252.120.0/24
1489 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
1492 net: 198.144.120.0/23
1493 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
1494 remarks: fake offshore location (BZ), traces back to NL
1497 net: 202.128.108.0/23
1498 descr: NetConn Services Ltd
1499 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
1502 net: 2a00:6340:c000::/34
1503 descr: Openfactory GmbH
1504 remarks: ... who thinks assigning networks to AQ is funny :-/
1507 net: 2402:e940:f00::/48
1508 descr: Wind Cloud Network Technology Co Ltd.
1509 remarks: appears to be used out of Tokyo, JP
1512 net: 2a02:e00:ffe7::/48
1513 descr: Bradler & Krantz GmbH & Co. KG
1514 remarks: allocated to DE, but actually announced from LT
1517 net: 2a02:e00:ffe8::/48
1518 descr: Bradler & Krantz GmbH & Co. KG
1519 remarks: allocated to DE, but actually announced from MD
1522 net: 2a02:e00:ffe9::/48
1523 descr: Bradler & Krantz GmbH & Co. KG
1524 remarks: allocated to DE, but actually announced from GB
1528 descr: Sibyl System LTD
1529 remarks: RIR data contain garbage
1532 net: 2a06:1281:5::/48
1533 descr: Alexander Nicholson
1534 remarks: allocated to NO, but actually announced from FR
1538 descr: Datashield, Inc.
1539 remarks: fake offshore location (SC), traces back to NL
1542 net: 2a09:4c0:3000::/40
1544 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
1547 net: 2a10:ccc0:3000::/40
1549 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
1552 net: 2a0e:b100:3000::/40
1553 descr: 4b42 UG (haftungsbeschränkt)
1554 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
1557 net: 2a0e:b101:3000::/40
1558 descr: 4b42 UG (haftungsbeschränkt)
1559 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
1563 descr: ASLINE Limited
1564 remarks: APNIC chunk owned by a HK-based company, but assigned to DE
1567 net: 2a0f:e400:3000::/40
1569 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/