]> git.ipfire.org Git - location/location-database.git/blob - overrides/override-other.txt
d2c2423e42401569696e7c74b873ab2bedc17329
[location/location-database.git] / overrides / override-other.txt
1 #
2 # override-other [.txt]
3 #
4 # This file contains Autonomous Systems (AS) or IP networks/addresses
5 # whose country information in corresponding RIR data is believed or proven
6 # to be invalid or inaccurate and which do not match to one of the special categories
7 # A[1-3].
8 #
9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
10 # (networks owned by letterbox companies in offshore jurisdictions) or
11 # hostile (faked RIR data in order to bypass location-based filtering).
12 #
13 # Please keep this file sorted.
14 #
15
16 aut-num: AS3216
17 descr: PJSC "Vimpelcom"
18 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
19 country: RU
20
21 aut-num: AS6134
22 descr: XNNET LLC
23 remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data
24 country: HK
25
26 aut-num: AS8359
27 descr: MTS PJSC
28 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
29 country: RU
30
31 aut-num: AS12025
32 descr: Iron Mountain Data Center
33 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
34 country: US
35
36 aut-num: AS18013
37 descr: ASLINE LIMITED
38 remarks: IP hijacker, traces back to AP region
39 country: AP
40
41 aut-num: AS18254
42 descr: KLAYER LLC
43 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
44 country: AP
45
46 aut-num: AS22769
47 descr: DDOSING NETWORK
48 remarks: IP hijacker located somewhere in AP, massively tampers with RIR data
49 country: AP
50
51 aut-num: AS24009
52 descr: HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
53 remarks: IP hijacker (?) located in HK, tampers with RIR data
54 country: HK
55
56 aut-num: AS24700
57 descr: Yes Networks Unlimited Ltd
58 remarks: traces to UA, but some RIR entries seem to contain garbage (VG)
59 country: UA
60
61 aut-num: AS25098
62 descr: Netcalibre Ltd.
63 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage/
64 country: GB
65
66 aut-num: AS28098
67 descr: ABGON Comunicaciones
68 remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
69 country: CL
70
71 aut-num: AS35042
72 descr: IP Interactive UG (haftungsbeschraenkt)
73 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
74 country: BG
75
76 aut-num: AS35251
77 descr: NetLab
78 remarks: tampers with RIR data, most probably located in HK
79 country: HK
80
81 aut-num: AS35478
82 descr: Buena Telecom SRL
83 remarks: ISP located in RO, but RIR data for announced prefixes contain garbage
84 country: RO
85
86 aut-num: AS37518
87 descr: Fiber Grid Inc.
88 remarks: tampers with RIR data, traces back to SE
89 country: SE
90
91 aut-num: AS39287
92 descr: ab stract / Peter Kolmisoppi
93 remarks: tampers with RIR data, traces back to SE
94 country: SE
95
96 aut-num: AS40034
97 descr: Confluence Networks Inc.
98 remarks: fake offshore location (VG), traces back to Austin, TX, US
99 country: US
100
101 aut-num: AS41466
102 descr: Treidinvest LLC
103 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
104 country: RU
105
106 aut-num: AS41564
107 descr: Packet Exchange Limited
108 remarks: shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in EU), routing stolen AfriNIC networks, RIR data of prefixes announced by this AS cannot be trusted
109 country: EU
110
111 aut-num: AS42397
112 descr: Bunea TELECOM SRL
113 remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage
114 country: RO
115
116 aut-num: AS42745
117 descr: Safe Value Limited
118 remarks: tampers with RIR data, traces back to somewhere in central Europe
119 country: EU
120
121 aut-num: AS42831
122 descr: UKSERVERS
123 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
124 country: GB
125
126 aut-num: AS42960
127 descr: Cloud Management LLC
128 remarks: tampers with RIR data, traces back to HK
129 country: HK
130
131 aut-num: AS44015
132 descr: Landgard Management Inc.
133 remarks: bulletproof ISP with strong links to RU
134 country: RU
135
136 aut-num: AS44477
137 descr: IP Oleinichenko Denis
138 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
139 country: RU
140
141 aut-num: AS48090
142 descr: PPTECHNOLOGY LIMITED
143 remarks: bulletproof ISP (related to AS204655) located in NL
144 country: NL
145
146 aut-num: AS41564
147 descr: Global Colocation Limited
148 remarks: part of a dirty ISP conglomerate most likely operating out of SE
149 country: SE
150
151 aut-num: AS49466
152 descr: KLAYER LLC
153 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
154 country: AP
155
156 aut-num: AS49505
157 descr: Selectel
158 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
159 country: RU
160
161 aut-num: AS49921
162 descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
163 remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
164 country: EU
165
166 aut-num: AS51558
167 descr: Smart Telecom S.A.R.L
168 remarks: tampers with RIR data, traces back to RU
169 country: RU
170
171 aut-num: AS55933
172 descr: Cloudie Limited
173 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
174 country: AP
175
176 aut-num: AS56611
177 descr: REBA Communications BV
178 remarks: bulletproof ISP (related to AS202425) located in NL
179 country: NL
180
181 aut-num: AS56851
182 descr: PE Skurykhin Mukola Volodumurovuch
183 remarks: tampers with RIR data, traces back to UA
184 country: UA
185
186 aut-num: AS57717
187 descr: FiberXpress BV
188 remarks: bulletproof ISP (related to AS202425) located in NL
189 country: NL
190
191 aut-num: AS57724
192 descr: DDOS-GUARD LTD
193 remarks: shady ISP, customers massively tamper with RIR data, we cannot trust this network
194 country: RU
195
196 aut-num: AS57858
197 descr: Inter Connects Inc.
198 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
199 country: SE
200
201 aut-num: AS58073
202 descr: YISP BV
203 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
204 country: NL
205
206 aut-num: AS58271
207 descr: FOP Gubina Lubov Petrivna
208 remarks: bulletproof ISP operating from a war zone in eastern UA
209 country: UA
210
211 aut-num: AS58349
212 descr: INNETRA PC
213 remarks: another shady customer of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
214 country: EU
215
216 aut-num: AS59580
217 descr: Batterflyai Media Ltd.
218 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
219 country: RU
220
221 aut-num: AS60485
222 descr: Inter Connects Inc. / Jing Yun
223 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks
224 country: SE
225
226 aut-num: AS62355
227 descr: Network Dedicated SAS
228 remarks: bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
229 country: NL
230
231 aut-num: AS61977
232 descr: Vivo Trade L.P.
233 remarks: another shady customer of "DDoS Guard Ltd."
234 country: RU
235
236 aut-num: AS62468
237 descr: VpsQuan L.L.C.
238 remarks: claims to be located in US, but traces to HK
239 country: HK
240
241 aut-num: AS63119
242 descr: Inter Connects Inc.
243 remarks: part of a dirty ISP conglomerate, traces back to US this time
244 country: US
245
246 aut-num: AS64437
247 descr: NForce Entertainment BV
248 remarks: currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL
249 country: NL
250
251 aut-num: AS134548
252 descr: DXTL Tseung Kwan O Service
253 remarks: tampers with RIR data, traces back to AP region
254 country: AP
255
256 aut-num: AS137443
257 descr: Anchnet Asia Limited
258 remarks: IP hijacker located in HK, tampers with RIR data
259 country: HK
260
261 aut-num: AS137951
262 descr: Clayer Limited
263 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
264 country: AP
265
266 aut-num: AS139330
267 descr: SANREN DATA LIMITED
268 remarks: IP hijacker located somewhere in AP region, tampers with RIR data
269 country: AP
270
271 aut-num: AS140733
272 descr: Wujidun Network Limited
273 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
274 country: AP
275
276 aut-num: AS200019
277 descr: ALEXHOST SRL
278 remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
279 country: MD
280
281 aut-num: AS200699
282 descr: Datashield, Inc.
283 remarks: fake offshore location (SC), traces back to NL
284 country: NL
285
286 aut-num: AS200845
287 descr: AVATEL TELECOM
288 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
289 country: ES
290
291 aut-num: AS201118
292 descr: Intelcom Group Ltd.
293 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
294 country: RU
295
296 aut-num: AS201133
297 descr: Verdina Ltd.
298 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
299 country: BG
300
301 aut-num: AS201912
302 descr: FutureNow Incorporated
303 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
304 country: BG
305
306 aut-num: AS202920
307 descr: DataClub S.A.
308 remarks: another shady customer of "DDoS Guard Ltd."
309 country: RU
310
311 aut-num: AS202425
312 descr: IP Volume Inc.
313 remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
314 country: NL
315
316 aut-num: AS202492
317 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
318 remarks: fake offshore location (SC), traces back to NL
319 country: NL
320
321 aut-num: AS202769
322 descr: Cooperative Investments LLC
323 remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
324 country: NL
325
326 aut-num: AS204136
327 descr: Kevin Holly trading as Silent Ghost e.U.
328 remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/
329 country: NL
330
331 aut-num: AS204353
332 descr: Global Offshore Limited
333 remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
334 country: EU
335
336 aut-num: AS204655
337 descr: Novogara Ltd.
338 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
339 country: NL
340
341 aut-num: AS205026
342 descr: Hauer Hosting Services Limited
343 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
344 country: ES
345
346 aut-num: AS206397
347 descr: Genius Guard / Genius Security Ltd.
348 remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU
349 country: RU
350
351 aut-num: AS207046
352 descr: Xtudio Networks S.L.U.
353 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
354 country: ES
355
356 aut-num: AS207616
357 descr: Altrosky Technology Ltd.
358 remarks: fake offshore location (SC), traces back to CZ and NL
359 country: EU
360
361 aut-num: AS208046
362 descr: Maximilian Kutzner trading as HostSlick
363 remarks: traces back to NL, but some RIR data for announced prefixes contain garbage
364 country: NL
365
366 aut-num: AS209132
367 descr: Alviva Holding Limited
368 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
369 country: BG
370
371 aut-num: AS209272
372 descr: Alviva Holding Limited
373 remarks: bulletproof ISP operating from a war zone in eastern UA
374 country: UA
375
376 aut-num: AS209401
377 descr: Gudaev Maxim Amrakhovich
378 remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
379 country: EU
380
381 aut-num: AS211849
382 descr: Kakharov Orinbassar Maratuly
383 remarks: ISP located in RU, but RIR data for announced prefixes contain garbage
384 country: RU
385
386 aut-num: AS213035
387 descr: Serverion BV
388 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
389 country: NL
390
391 aut-num: AS213058
392 descr: Private Internet Hosting LTD
393 remarks: bulletproof ISP located in RU
394 country: RU
395
396 aut-num: AS213373
397 descr: IP Connect Inc.
398 remarks: fake offshore location (SC), traces back to NL
399 country: NL
400
401 aut-num: AS262254
402 descr: DDOS-GUARD CORP.
403 remarks: fake offshore location (BZ), traces back to RU
404 country: RU
405
406 aut-num: AS328543
407 descr: Sun Network Company Limited
408 remarks: IP hijacker, traces back to AP region
409 country: AP
410
411 aut-num: AS328671
412 descr: Datapacket Maroc SARL
413 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
414 country: NL
415
416 aut-num: AS398478
417 descr: PEG TECH INC
418 remarks: ISP located in HK, tampers with RIR data
419 country: HK
420
421 aut-num: AS398826
422 descr: OLink Cloud LLC
423 remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage
424 country: US
425
426 net: 5.1.68.0/24
427 descr: GaiacomLC
428 remarks: routed to DE, inaccurate RIR data
429 country: DE
430
431 net: 5.1.69.0/24
432 descr: GaiacomLC
433 remarks: routed to DE, inaccurate RIR data
434 country: DE
435
436 net: 5.1.83.0/24
437 descr: GaiacomLC
438 remarks: routed to DE, inaccurate RIR data
439 country: DE
440
441 net: 5.1.88.0/24
442 descr: GaiacomLC
443 remarks: routed to DE, inaccurate RIR data
444 country: DE
445
446 net: 5.252.32.0/22
447 descr: StormWall s.r.o.
448 remarks: claims to be located in DE, but traces back to somewhere else in central Europe
449 country: EU
450
451 net: 31.220.0.0/22
452 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
453 remarks: fake offshore location (BZ), traces back to NL
454 country: NL
455
456 net: 31.220.40.0/23
457 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
458 remarks: fake offshore location (BZ), traces back to NL
459 country: NL
460
461 net: 37.228.128.0/24
462 descr: FlokiNET Ltd.
463 remarks: fake offshore location (SC), traces back to RO
464 country: RO
465
466 net: 45.93.16.0/22
467 descr: IPv4 Superhub Limited
468 remarks: network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
469 country: HK
470
471 net: 45.134.12.0/24
472 descr: MS Network LTD
473 remarks: fake offshore location (SC), traces back to NLm
474 country: NL
475
476 net: 45.134.144.0/22
477 descr: IPv4 Superhub Limited
478 remarks: same as 45.93.16.0/22
479 country: HK
480
481 net: 45.145.36.0/22
482 descr: GlobalCache Technology CO., Ltd.
483 remarks: claims to be located in DE, but traces back to HK
484 country: HK
485
486 net: 45.148.167.0/24
487 descr: US AFG 20200130
488 remarks: claims to be located in US, but traces back to SK
489 country: SK
490
491 net: 47.60.0.0/14
492 descr: Vodafone US Inc.
493 remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
494 country: ES
495
496 net: 85.202.80.0/24
497 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
498 remarks: fake offshore location (BZ), traces back to US
499 country: US
500
501 net: 88.151.117.0/24
502 descr: Golden Internet LLC
503 remarks: fake location (KP), WHOIS contact points to RU
504 country: RU
505
506 net: 91.243.32.0/19
507 descr: Petersburg Internet Network Ltd.
508 remarks: RIR data for suballocations contain garbage, they are all located in RU
509 country: RU
510
511 net: 95.181.152.0/21
512 descr: QWARTA LLC
513 remarks: fake location (US), WHOIS contact and traceroutes point to RU
514 country: RU
515
516 net: 103.197.148.0/22
517 descr: I.C.S. Trabia-Network S.R.L.
518 remarks: fake offshore location (HK), traces back to MD
519 country: MD
520
521 net: 130.117.0.0/16
522 descr: PSINet, Inc. (PSI) / Cogent Communications
523 remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
524 country: EU
525
526 net: 178.239.20.0/24
527 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
528 remarks: fake location (BA), traces back to RO
529 country: RO
530
531 net: 185.10.68.0/24
532 descr: FlokiNET Ltd.
533 remarks: fake offshore location (SC), traces back to RO
534 country: RO
535
536 net: 185.56.80.0/22
537 descr: Datashield, Inc.
538 remarks: fake offshore location (SC), traces back to NL
539 country: NL
540
541 net: 185.85.120.0/22
542 descr: Intelcom Group Ltd
543 remarks: fake offshore location (SC), traces back to RU
544 country: RU
545
546 net: 185.140.204.0/22
547 descr: Hornetsecurity GmbH
548 remarks: all suballocations are used in DE, but are assigned to US
549 country: DE
550
551 net: 185.175.93.0/24
552 descr: Perfect Hosting Solutions
553 remarks: bulletproof ISP related to AS204655, traces back to BG
554 country: BG
555
556 net: 185.169.253.0/24
557 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
558 remarks: fake offshore location (BZ), traces back to US
559 country: US
560
561 net: 185.193.91.0/24
562 descr: Romanenko Stanislav Sergeevich
563 remarks: bulletproof ISP related to AS204655, traces back to BG
564 country: BG
565
566 net: 185.193.124.0/22
567 descr: ab stract / Njalla
568 remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
569 country: SE
570
571 net: 185.227.152.0/22
572 descr: XinYuan Interconnect (HONG KONG [sic!]) Limited
573 remarks: claims to be located in DE, traces back to HK
574 country: HK
575
576 net: 190.2.128.0/19
577 descr: WorldStream (LATAM) BV
578 remarks: LACNIC IP chunk solely used in NL (inaccurate data)
579 country: NL
580
581 net: 192.12.3.0/24
582 descr: Deep Eddy Internet Consulting
583 remarks: claims to be located in US, traces back to AP region
584 country: AP
585
586 net: 193.29.12.0/22
587 descr: Bunea TELECOM SRL
588 remarks: RIR data contain garbage for this network
589 country: RO
590
591 net: 193.119.0.0/19
592 descr: NetConn Services Ltd
593 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
594 country: AP
595
596 net: 195.66.165.0/24
597 descr: Posta Crne Gore
598 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
599 country: ME
600
601 net: 195.252.115.0/24
602 descr: Drenik ISP
603 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
604 country: ME
605
606 net: 195.252.120.0/24
607 descr: AB SOFT
608 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
609 country: ME
610
611 net: 198.144.120.0/23
612 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
613 remarks: fake offshore location (BZ), traces back to NL
614 country: NL
615
616 net: 202.128.108.0/23
617 descr: NetConn Services Ltd
618 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
619 country: AP
620
621 net: 2a02:e00:ffe7::/48
622 descr: Bradler & Krantz GmbH & Co. KG
623 remarks: allocated to DE, but actually announced from LT
624 country: LT
625
626 net: 2a02:e00:ffe8::/48
627 descr: Bradler & Krantz GmbH & Co. KG
628 remarks: allocated to DE, but actually announced from MD
629 country: MD
630
631 net: 2a02:e00:ffe9::/48
632 descr: Bradler & Krantz GmbH & Co. KG
633 remarks: allocated to DE, but actually announced from GB
634 country: GB
635
636 net: 2a05:9f06::/31
637 descr: Sibyl System LTD
638 remarks: RIR data contain garbage
639 country: NL
640
641 net: 2a06:e80::/29
642 descr: Datashield, Inc.
643 remarks: fake offshore location (SC), traces back to NL
644 country: NL
645
646 net: 2a0f:7a80::/29
647 descr: ASLINE Limited
648 remarks: APNIC chunk owned by a HK-based company, but assigned to DE
649 country: AP