overrides/override-other.txt

   1 #
   2 # override-other [.txt]
   3 #
   4 # This file contains Autonomous Systems (AS) or IP networks/addresses
   5 # whose country information in corresponding RIR data is believed or proven
   6 # to be invalid or inaccurate and which do not match to one of the special categories
   7 # A[1-3].
   8 #
   9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
  10 # (networks owned by letterbox companies in offshore jurisdictions) or
  11 # hostile (faked RIR data in order to bypass location-based filtering).
  12 #
  13 # Please keep this file sorted.
  14 #
  15
  16 aut-num:        AS6134
  17 descr:          XNNET LLC
  18 remarks:        traces back to an unknown oversea location (HK?), seems to tamper with RIR data
  19 country:        HK
  20
  21 aut-num:        AS8359
  22 descr:          MTS PJSC
  23 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
  24 country:        RU
  25
  26 aut-num:        AS12025
  27 descr:          Iron Mountain Data Center
  28 remarks:        ISP located in US, but some RIR data for announced prefixes contain garbage
  29 country:        US
  30
  31 aut-num:        AS18013
  32 descr:          ASLINE LIMITED
  33 remarks:        IP hijacker, traces back to AP region
  34 country:        AP
  35
  36 aut-num:        AS18254
  37 descr:          KLAYER LLC
  38 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
  39 country:        AP
  40
  41 aut-num:        AS22769
  42 descr:          DDOSING NETWORK
  43 remarks:        IP hijacker located somewhere in AP, massively tampers with RIR data
  44 country:        AP
  45
  46 aut-num:        AS24009
  47 descr:          HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
  48 remarks:        IP hijacker (?) located in HK, tampers with RIR data
  49 country:        HK
  50
  51 aut-num:        AS24700
  52 descr:          Yes Networks Unlimited Ltd
  53 remarks:        traces to UA, but some RIR entries seem to contain garbage (VG)
  54 country:        UA
  55
  56 aut-num:        AS25098
  57 descr:          Netcalibre Ltd.
  58 remarks:        ISP located in GB, but some RIR data for announced prefixes contain garbage/
  59 country:        GB
  60
  61 aut-num:        AS28098
  62 descr:          ABGON Comunicaciones
  63 remarks:        ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
  64 country:        CL
  65
  66 aut-num:        AS35042
  67 descr:          IP Interactive UG (haftungsbeschraenkt)
  68 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
  69 country:        BG
  70
  71 aut-num:        AS35251
  72 descr:          NetLab
  73 remarks:        tampers with RIR data, most probably located in HK
  74 country:        HK
  75
  76 aut-num:        AS35478
  77 descr:          Buena Telecom SRL
  78 remarks:        ISP located in RO, but RIR data for announced prefixes contain garbage
  79 country:        RO
  80
  81 aut-num:        AS37518
  82 descr:          Fiber Grid Inc.
  83 remarks:        tampers with RIR data, traces back to SE
  84 country:        SE
  85
  86 aut-num:        AS39287
  87 descr:          ab stract / Peter Kolmisoppi
  88 remarks:        tampers with RIR data, traces back to SE
  89 country:        SE
  90
  91 aut-num:        AS40034
  92 descr:          Confluence Networks Inc.
  93 remarks:        fake offshore location (VG), traces back to Austin, TX, US
  94 country:        US
  95
  96 aut-num:        AS41466
  97 descr:          Treidinvest LLC
  98 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
  99 country:        RU
 100
 101 aut-num:        AS42397
 102 descr:          Bunea TELECOM SRL
 103 remarks:        ISP located in RO, but some RIR data for announced prefixes contain garbage
 104 country:        RO
 105
 106 aut-num:        AS42745
 107 descr:          Safe Value Limited
 108 remarks:        tampers with RIR data, traces back to somewhere in central Europe
 109 country:        EU
 110
 111 aut-num:        AS42831
 112 descr:          UKSERVERS
 113 remarks:        ISP located in GB, but some RIR data for announced prefixes contain garbage
 114 country:        GB
 115
 116 aut-num:        AS42960
 117 descr:          Cloud Management LLC
 118 remarks:        tampers with RIR data, traces back to HK
 119 country:        HK
 120
 121 aut-num:        AS44477
 122 descr:          IP Oleinichenko Denis
 123 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 124 country:        RU
 125
 126 aut-num:        AS48090
 127 descr:          PPTECHNOLOGY LIMITED
 128 remarks:        bulletproof ISP (related to AS204655) located in NL
 129 country:        NL
 130
 131 aut-num:        AS49466
 132 descr:          KLAYER LLC
 133 remarks:        part of the "Asline" IP hijacking gang, traces back to AP region
 134 country:        AP
 135
 136 aut-num:        AS49505
 137 descr:          Selectel
 138 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 139 country:        RU
 140
 141 aut-num:        AS51558
 142 descr:          Smart Telecom S.A.R.L
 143 remarks:        tampers with RIR data, traces back to RU
 144 country:        RU
 145
 146 aut-num:        AS55933
 147 descr:          Cloudie Limited
 148 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 149 country:        AP
 150
 151 aut-num:        AS56611
 152 descr:          REBA Communications BV
 153 remarks:        bulletproof ISP (related to AS202425) located in NL
 154 country:        NL
 155
 156 aut-num:        AS57717
 157 descr:          FiberXpress BV
 158 remarks:        bulletproof ISP (related to AS202425) located in NL
 159 country:        NL
 160
 161 aut-num:        AS58073
 162 descr:          YISP BV
 163 remarks:        ISP located in NL, but some RIR data for announced prefixes contain garbage
 164 country:        NL
 165
 166 aut-num:        AS58271
 167 descr:          FOP Gubina Lubov Petrivna
 168 remarks:        bulletproof ISP operating from a war zone in eastern UA
 169 country:        UA
 170
 171 aut-num:        AS59580
 172 descr:          Batterflyai Media Ltd.
 173 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 174 country:        RU
 175
 176 aut-num:        AS62355
 177 descr:          Network Dedicated SAS
 178 remarks:        bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
 179 country:        NL
 180
 181 aut-num:        AS62468
 182 descr:          VpsQuan L.L.C.
 183 remarks:        claims to be located in US, but traces to HK
 184 country:        HK
 185
 186 aut-num:        AS134548
 187 descr:          DXTL Tseung Kwan O Service
 188 remarks:        tampers with RIR data, traces back to AP region
 189 country:        AP
 190
 191 aut-num:        AS137443
 192 descr:          Anchnet Asia Limited
 193 remarks:        IP hijacker located in HK, tampers with RIR data
 194 country:        HK
 195
 196 aut-num:        AS137951
 197 descr:          Clayer Limited
 198 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 199 country:        AP
 200
 201 aut-num:        AS139330
 202 descr:          SANREN DATA LIMITED
 203 remarks:        IP hijacker located somewhere in AP region, tampers with RIR data
 204 country:        AP
 205
 206 aut-num:        AS140733
 207 descr:          Wujidun Network Limited
 208 remarks:        part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
 209 country:        AP
 210
 211 aut-num:        AS200699
 212 descr:          Datashield, Inc.
 213 remarks:        fake offshore location (SC), traces back to NL
 214 country:        NL
 215
 216 aut-num:        AS200845
 217 descr:          AVATEL TELECOM
 218 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 219 country:        ES
 220
 221 aut-num:        AS201118
 222 descr:          Intelcom Group Ltd.
 223 remarks:        ISP located in RU, but some RIR data for announced prefixes contain garbage
 224 country:        RU
 225
 226 aut-num:        AS201133
 227 descr:          Verdina Ltd.
 228 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 229 country:        BG
 230
 231 aut-num:        AS201912
 232 descr:          FutureNow Incorporated
 233 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 234 country:        BG
 235
 236 aut-num:        AS202425
 237 descr:          IP Volume Inc.
 238 remarks:        bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
 239 country:        NL
 240
 241 aut-num:        AS202492
 242 descr:          SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
 243 remarks:        fake offshore location (SC), traces back to NL
 244 country:        NL
 245
 246 aut-num:        AS202769
 247 descr:          Cooperative Investments LLC
 248 remarks:        bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
 249 country:        NL
 250
 251 aut-num:        AS204655
 252 descr:          Novogara Ltd.
 253 remarks:        bulletproof ISP (strongly linked to AS202425) located in NL
 254 country:        NL
 255
 256 aut-num:        AS205026
 257 descr:          Hauer Hosting Services Limited
 258 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 259 country:        ES
 260
 261 aut-num:        AS207046
 262 descr:          Xtudio Networks S.L.U.
 263 remarks:        ISP located in ES, but some RIR data for announced prefixes contain garbage
 264 country:        ES
 265
 266 aut-num:        AS207616
 267 descr:          Altrosky Technology Ltd.
 268 remarks:        fake offshore location (SC), traces back to CZ and NL
 269 country:        EU
 270
 271 aut-num:        AS208046
 272 descr:          Maximilian Kutzner trading as HostSlick
 273 remarks:        traces back to NL, but some RIR data for announced prefixes contain garbage
 274 country:        NL
 275
 276 aut-num:        AS209132
 277 descr:          Alviva Holding Limited
 278 remarks:        ISP located in BG, but RIR data for announced prefixes contain garbage
 279 country:        BG
 280
 281 aut-num:        AS209272
 282 descr:          Alviva Holding Limited
 283 remarks:        bulletproof ISP operating from a war zone in eastern UA
 284 country:        UA
 285
 286 aut-num:        AS209401
 287 descr:          Gudaev Maxim Amrakhovich
 288 remarks:        announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
 289 country:        EU
 290
 291 aut-num:        AS213035
 292 descr:          Serverion BV
 293 remarks:        ISP located in NL, but RIR data for most announced prefixes contain garbage
 294 country:        NL
 295
 296 aut-num:        AS213058
 297 descr:          Private Internet Hosting LTD
 298 remarks:        bulletproof ISP located in RU
 299 country:        RU
 300
 301 aut-num:        AS213373
 302 descr:          IP Connect Inc.
 303 remarks:        fake offshore location (SC), traces back to NL
 304 country:        NL
 305
 306 aut-num:        AS262254
 307 descr:          DDOS-GUARD CORP.
 308 remarks:        fake offshore location (BZ), traces back to RU
 309 country:        RU
 310
 311 aut-num:        AS328543
 312 descr:          Sun Network Company Limited
 313 remarks:        IP hijacker, traces back to AP region
 314 country:        AP
 315
 316 aut-num:        AS328671
 317 descr:          Datapacket Maroc SARL
 318 remarks:        bulletproof ISP (strongly linked to AS202425) located in NL
 319 country:        NL
 320
 321 aut-num:        AS398478
 322 descr:          PEG TECH INC
 323 remarks:        ISP located in HK, tampers with RIR data
 324 country:        HK
 325
 326 net:        5.1.68.0/24
 327 descr:      GaiacomLC
 328 remarks:    routed to DE, inaccurate RIR data
 329 country:    DE
 330
 331 net:        5.1.69.0/24
 332 descr:      GaiacomLC
 333 remarks:    routed to DE, inaccurate RIR data
 334 country:    DE
 335
 336 net:        5.1.83.0/24
 337 descr:      GaiacomLC
 338 remarks:    routed to DE, inaccurate RIR data
 339 country:    DE
 340
 341 net:        5.1.88.0/24
 342 descr:      GaiacomLC
 343 remarks:    routed to DE, inaccurate RIR data
 344 country:    DE
 345
 346 net:            5.252.32.0/22
 347 descr:          StormWall s.r.o.
 348 remarks:        claims to be located in DE, but traces back to somewhere else in central Europe
 349 country:        EU
 350
 351 net:            31.220.0.0/22
 352 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 353 remarks:        fake offshore location (BZ), traces back to NL
 354 country:        NL
 355
 356 net:            31.220.40.0/23
 357 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 358 remarks:        fake offshore location (BZ), traces back to NL
 359 country:        NL
 360
 361 net:            37.228.128.0/24
 362 descr:          FlokiNET Ltd.
 363 remarks:        fake offshore location (SC), traces back to RO
 364 country:        RO
 365
 366 net:            45.93.16.0/22
 367 descr:          IPv4 Superhub Limited
 368 remarks:        network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
 369 country:        HK
 370
 371 net:            45.134.12.0/24
 372 descr:          MS Network LTD
 373 remarks:        fake offshore location (SC), traces back to NLm
 374 country:        NL
 375
 376 net:            45.134.144.0/22
 377 descr:          IPv4 Superhub Limited
 378 remarks:        same as 45.93.16.0/22
 379 country:        HK
 380
 381 net:            45.145.36.0/22
 382 descr:          GlobalCache Technology CO., Ltd.
 383 remarks:        claims to be located in DE, but traces back to HK
 384 country:        HK
 385
 386 net:            45.148.167.0/24
 387 descr:          US AFG 20200130
 388 remarks:        claims to be located in US, but traces back to SK
 389 country:        SK
 390
 391 net:            47.60.0.0/14
 392 descr:          Vodafone US Inc.
 393 remarks:        large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
 394 country:        ES
 395
 396 net:            85.202.80.0/24
 397 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 398 remarks:        fake offshore location (BZ), traces back to US
 399 country:        US
 400
 401 net:            88.151.117.0/24
 402 descr:          Golden Internet LLC
 403 remarks:        fake location (KP), WHOIS contact points to RU
 404 country:        RU
 405
 406 net:            95.181.152.0/21
 407 descr:          QWARTA LLC
 408 remarks:        fake location (US), WHOIS contact and traceroutes point to RU
 409 country:        RU
 410
 411 net:            103.197.148.0/22
 412 descr:          I.C.S. Trabia-Network S.R.L.
 413 remarks:        fake offshore location (HK), traces back to MD
 414 country:        MD
 415
 416 net:            130.117.0.0/16
 417 descr:          PSINet, Inc. (PSI) / Cogent Communications
 418 remarks:        Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
 419 country:        EU
 420
 421 net:            178.239.20.0/24
 422 descr:          Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
 423 remarks:        fake location (BA), traces back to RO
 424 country:        RO
 425
 426 net:            185.10.68.0/24
 427 descr:          FlokiNET Ltd.
 428 remarks:        fake offshore location (SC), traces back to RO
 429 country:        RO
 430
 431 net:            185.56.80.0/22
 432 descr:          Datashield, Inc.
 433 remarks:        fake offshore location (SC), traces back to NL
 434 country:        NL
 435
 436 net:            185.85.120.0/22
 437 descr:          Intelcom Group Ltd
 438 remarks:        fake offshore location (SC), traces back to RU
 439 country:        RU
 440
 441 net:        185.140.204.0/22
 442 descr:      Hornetsecurity GmbH
 443 remarks:    all suballocations are used in DE, but are assigned to US
 444 country:    DE
 445
 446 net:            185.175.93.0/24
 447 descr:          Perfect Hosting Solutions
 448 remarks:        bulletproof ISP related to AS204655, traces back to BG
 449 country:        BG
 450
 451 net:            185.169.253.0/24
 452 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 453 remarks:        fake offshore location (BZ), traces back to US
 454 country:        US
 455
 456 net:            185.193.91.0/24
 457 descr:          Romanenko Stanislav Sergeevich
 458 remarks:        bulletproof ISP related to AS204655, traces back to BG
 459 country:        BG
 460
 461 net:            185.193.124.0/22
 462 descr:          ab stract / Njalla
 463 remarks:        bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
 464 country:        SE
 465
 466 net:            185.227.152.0/22
 467 descr:          XinYuan Interconnect (HONG KONG [sic!]) Limited
 468 remarks:        claims to be located in DE, traces back to HK
 469 country:        HK
 470
 471 net:            190.2.128.0/19
 472 descr:          WorldStream (LATAM) BV
 473 remarks:        LACNIC IP chunk solely used in NL (inaccurate data)
 474 country:        NL
 475
 476 net:            192.12.3.0/24
 477 descr:          Deep Eddy Internet Consulting
 478 remarks:        claims to be located in US, traces back to AP region
 479 country:        AP
 480
 481 net:            193.29.12.0/22
 482 descr:          Bunea TELECOM SRL
 483 remarks:        RIR data contain garbage for this network
 484 country:        RO
 485
 486 net:            193.119.0.0/19
 487 descr:          NetConn Services Ltd
 488 remarks:        APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
 489 country:        AP
 490
 491 net:            198.144.120.0/23
 492 descr:          Amarutu Technology Ltd. / KoDDoS / ESecurity
 493 remarks:        fake offshore location (BZ), traces back to NL
 494 country:        NL
 495
 496 net:            202.128.108.0/23
 497 descr:          NetConn Services Ltd
 498 remarks:        APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
 499 country:        AP
 500
 501 net:            2a02:e00:ffe7::/48
 502 descr:          Bradler & Krantz GmbH & Co. KG
 503 remarks:        allocated to DE, but actually announced from LT
 504 country:        LT
 505
 506 net:            2a02:e00:ffe8::/48
 507 descr:          Bradler & Krantz GmbH & Co. KG
 508 remarks:        allocated to DE, but actually announced from MD
 509 country:        MD
 510
 511 net:            2a02:e00:ffe9::/48
 512 descr:          Bradler & Krantz GmbH & Co. KG
 513 remarks:        allocated to DE, but actually announced from GB
 514 country:        GB
 515
 516 net:            2a05:9f06::/31
 517 descr:          Sibyl System LTD
 518 remarks:        RIR data contain garbage
 519 country:        NL
 520
 521 net:            2a06:e80::/29
 522 descr:          Datashield, Inc.
 523 remarks:        fake offshore location (SC), traces back to NL
 524 country:        NL