2 # override-other [.txt]
4 # This file contains Autonomous Systems (AS) or IP networks/addresses
5 # whose country information in corresponding RIR data is believed or proven
6 # to be invalid or inaccurate and which do not match to one of the special categories
9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
10 # (networks owned by letterbox companies in offshore jurisdictions) or
11 # hostile (faked RIR data in order to bypass location-based filtering).
13 # Please keep this file sorted.
17 descr: PJSC "Vimpelcom"
18 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
23 remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data
28 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
32 descr: Iron Mountain Data Center
33 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
38 remarks: IP hijacker, traces back to AP region
43 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
47 descr: DDOSING NETWORK
48 remarks: IP hijacker located somewhere in AP, massively tampers with RIR data
52 descr: HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
53 remarks: IP hijacker (?) located in HK, tampers with RIR data
57 descr: Yes Networks Unlimited Ltd
58 remarks: traces to UA, but some RIR entries seem to contain garbage (VG)
62 descr: Netcalibre Ltd.
63 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage/
67 descr: ABGON Comunicaciones
68 remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
72 descr: IP Interactive UG (haftungsbeschraenkt)
73 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
78 remarks: tampers with RIR data, most probably located in HK
82 descr: Buena Telecom SRL
83 remarks: ISP located in RO, but RIR data for announced prefixes contain garbage
87 descr: Fiber Grid Inc.
88 remarks: tampers with RIR data, traces back to SE
93 remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage
97 descr: ab stract / Peter Kolmisoppi
98 remarks: tampers with RIR data, traces back to SE
102 descr: Confluence Networks Inc.
103 remarks: fake offshore location (VG), traces back to Austin, TX, US
107 descr: Treidinvest LLC
108 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
112 descr: Packet Exchange Limited
113 remarks: shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in EU), routing stolen AfriNIC networks, RIR data of prefixes announced by this AS cannot be trusted
117 descr: Bunea TELECOM SRL
118 remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage
122 descr: Safe Value Limited
123 remarks: tampers with RIR data, traces back to somewhere in central Europe
128 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
132 descr: Cloud Management LLC
133 remarks: tampers with RIR data, traces back to HK
138 remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage
142 descr: Landgard Management Inc.
143 remarks: bulletproof ISP with strong links to RU
147 descr: IP Oleinichenko Denis
148 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
152 descr: PPTECHNOLOGY LIMITED
153 remarks: bulletproof ISP (related to AS204655) located in NL
157 descr: Global Colocation Limited
158 remarks: part of a dirty ISP conglomerate most likely operating out of SE
163 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
168 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
172 descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
173 remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
177 descr: Smart Telecom S.A.R.L
178 remarks: tampers with RIR data, traces back to RU
182 descr: Cloudie Limited
183 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
187 descr: REBA Communications BV
188 remarks: bulletproof ISP (related to AS202425) located in NL
192 descr: PE Skurykhin Mukola Volodumurovuch
193 remarks: tampers with RIR data, traces back to UA
197 descr: FiberXpress BV
198 remarks: bulletproof ISP (related to AS202425) located in NL
202 descr: DDOS-GUARD LTD
203 remarks: shady ISP, customers massively tamper with RIR data, we cannot trust this network
207 descr: Inter Connects Inc.
208 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
213 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
217 descr: FOP Gubina Lubov Petrivna
218 remarks: bulletproof ISP operating from a war zone in eastern UA
223 remarks: another shady customer of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
227 descr: Batterflyai Media Ltd.
228 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
232 descr: Inter Connects Inc. / Jing Yun
233 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks
237 descr: Network Dedicated SAS
238 remarks: bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
242 descr: Vivo Trade L.P.
243 remarks: another shady customer of "DDoS Guard Ltd."
247 descr: VpsQuan L.L.C.
248 remarks: claims to be located in US, but traces to HK
252 descr: Inter Connects Inc.
253 remarks: part of a dirty ISP conglomerate, traces back to US this time
257 descr: NForce Entertainment BV
258 remarks: currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL
262 descr: DXTL Tseung Kwan O Service
263 remarks: tampers with RIR data, traces back to AP region
267 descr: Anchnet Asia Limited
268 remarks: IP hijacker located in HK, tampers with RIR data
272 descr: Clayer Limited
273 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
277 descr: SANREN DATA LIMITED
278 remarks: IP hijacker located somewhere in AP region, tampers with RIR data
282 descr: Wujidun Network Limited
283 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
288 remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
292 descr: Datashield, Inc.
293 remarks: fake offshore location (SC), traces back to NL
297 descr: AVATEL TELECOM
298 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
302 descr: Intelcom Group Ltd.
303 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
308 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
312 descr: FutureNow Incorporated
313 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
318 remarks: another shady customer of "DDoS Guard Ltd."
322 descr: IP Volume Inc.
323 remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
327 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
328 remarks: fake offshore location (SC), traces back to NL
332 descr: Cooperative Investments LLC
333 remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
337 descr: Kevin Holly trading as Silent Ghost e.U.
338 remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/
342 descr: Global Offshore Limited
343 remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
348 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
352 descr: Hauer Hosting Services Limited
353 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
357 descr: Genius Guard / Genius Security Ltd.
358 remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU
362 descr: Xtudio Networks S.L.U.
363 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
367 descr: Altrosky Technology Ltd.
368 remarks: fake offshore location (SC), traces back to CZ and NL
372 descr: Maximilian Kutzner trading as HostSlick
373 remarks: traces back to NL, but some RIR data for announced prefixes contain garbage
377 descr: Alviva Holding Limited
378 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
382 descr: Alviva Holding Limited
383 remarks: bulletproof ISP operating from a war zone in eastern UA
387 descr: Gudaev Maxim Amrakhovich
388 remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
392 descr: Kakharov Orinbassar Maratuly
393 remarks: ISP located in RU, but RIR data for announced prefixes contain garbage
398 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
402 descr: Private Internet Hosting LTD
403 remarks: bulletproof ISP located in RU
407 descr: IP Connect Inc.
408 remarks: fake offshore location (SC), traces back to NL
412 descr: DDOS-GUARD CORP.
413 remarks: fake offshore location (BZ), traces back to RU
417 descr: Sun Network Company Limited
418 remarks: IP hijacker, traces back to AP region
422 descr: Datapacket Maroc SARL
423 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
428 remarks: ISP located in HK, tampers with RIR data
432 descr: OLink Cloud LLC
433 remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage
438 remarks: routed to DE, inaccurate RIR data
443 remarks: routed to DE, inaccurate RIR data
448 remarks: routed to DE, inaccurate RIR data
453 remarks: routed to DE, inaccurate RIR data
457 descr: StormWall s.r.o.
458 remarks: claims to be located in DE, but traces back to somewhere else in central Europe
462 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
463 remarks: fake offshore location (BZ), traces back to NL
467 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
468 remarks: fake offshore location (BZ), traces back to NL
473 remarks: fake offshore location (SC), traces back to RO
477 descr: IPv4 Superhub Limited
478 remarks: network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
482 descr: MS Network LTD
483 remarks: fake offshore location (SC), traces back to NLm
487 descr: IPv4 Superhub Limited
488 remarks: same as 45.93.16.0/22
492 descr: GlobalCache Technology CO., Ltd.
493 remarks: claims to be located in DE, but traces back to HK
497 descr: US AFG 20200130
498 remarks: claims to be located in US, but traces back to SK
502 descr: Vodafone US Inc.
503 remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
507 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
508 remarks: fake offshore location (BZ), traces back to US
512 descr: Golden Internet LLC
513 remarks: fake location (KP), WHOIS contact points to RU
517 descr: Petersburg Internet Network Ltd.
518 remarks: RIR data for suballocations contain garbage, they are all located in RU
523 remarks: fake location (US), WHOIS contact and traceroutes point to RU
526 net: 103.197.148.0/22
527 descr: I.C.S. Trabia-Network S.R.L.
528 remarks: fake offshore location (HK), traces back to MD
532 descr: PSINet, Inc. (PSI) / Cogent Communications
533 remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
537 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
538 remarks: fake location (BA), traces back to RO
543 remarks: fake offshore location (SC), traces back to RO
547 descr: Datashield, Inc.
548 remarks: fake offshore location (SC), traces back to NL
552 descr: Intelcom Group Ltd
553 remarks: fake offshore location (SC), traces back to RU
556 net: 185.140.204.0/22
557 descr: Hornetsecurity GmbH
558 remarks: all suballocations are used in DE, but are assigned to US
562 descr: Perfect Hosting Solutions
563 remarks: bulletproof ISP related to AS204655, traces back to BG
566 net: 185.169.253.0/24
567 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
568 remarks: fake offshore location (BZ), traces back to US
572 descr: Romanenko Stanislav Sergeevich
573 remarks: bulletproof ISP related to AS204655, traces back to BG
576 net: 185.193.124.0/22
577 descr: ab stract / Njalla
578 remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
581 net: 185.227.152.0/22
582 descr: XinYuan Interconnect (HONG KONG [sic!]) Limited
583 remarks: claims to be located in DE, traces back to HK
587 descr: WorldStream (LATAM) BV
588 remarks: LACNIC IP chunk solely used in NL (inaccurate data)
592 descr: Deep Eddy Internet Consulting
593 remarks: claims to be located in US, traces back to AP region
597 descr: Bunea TELECOM SRL
598 remarks: RIR data contain garbage for this network
602 descr: NetConn Services Ltd
603 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
607 descr: Posta Crne Gore
608 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
611 net: 195.252.115.0/24
613 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
616 net: 195.252.120.0/24
618 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
621 net: 198.144.120.0/23
622 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
623 remarks: fake offshore location (BZ), traces back to NL
626 net: 202.128.108.0/23
627 descr: NetConn Services Ltd
628 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
631 net: 2a02:e00:ffe7::/48
632 descr: Bradler & Krantz GmbH & Co. KG
633 remarks: allocated to DE, but actually announced from LT
636 net: 2a02:e00:ffe8::/48
637 descr: Bradler & Krantz GmbH & Co. KG
638 remarks: allocated to DE, but actually announced from MD
641 net: 2a02:e00:ffe9::/48
642 descr: Bradler & Krantz GmbH & Co. KG
643 remarks: allocated to DE, but actually announced from GB
647 descr: Sibyl System LTD
648 remarks: RIR data contain garbage
652 descr: Datashield, Inc.
653 remarks: fake offshore location (SC), traces back to NL
657 descr: ASLINE Limited
658 remarks: APNIC chunk owned by a HK-based company, but assigned to DE