2 # override-other [.txt]
4 # This file contains Autonomous Systems (AS) or IP networks/addresses
5 # whose country information in corresponding RIR data is believed or proven
6 # to be invalid or inaccurate and which do not match to one of the special categories
9 # Such networks might be legitimate (poorly maintained WHOIS data), shady
10 # (networks owned by letterbox companies in offshore jurisdictions) or
11 # hostile (faked RIR data in order to bypass location-based filtering).
13 # Please keep this file sorted.
17 descr: WNET TELECOM USA Corp.
18 remarks: traces back to various locations in UA, seems to tamper with RIR data
22 descr: PJSC "Vimpelcom"
23 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
28 remarks: ISP (?) located in ZA, but some RIR data for announced prefixes contain garbage
33 remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data
37 descr: Leaseweb USA, Inc.
38 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
43 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
47 descr: Iron Mountain Data Center
48 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
53 remarks: IP hijacker, traces back to AP region
58 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
63 remarks: ISP headquatered in BG and/or UA, physically located in NL, some RIR data for announced prefixes contain inaccurate data
67 descr: DDOSING NETWORK
68 remarks: IP hijacker located somewhere in AP, massively tampers with RIR data
72 descr: HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED
73 remarks: IP hijacker (?) located in HK, tampers with RIR data
77 descr: Yes Networks Unlimited Ltd
78 remarks: traces to UA, but some RIR entries seem to contain garbage (VG)
82 descr: myLoc managed IT AG
83 remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage
87 descr: Netcalibre Ltd.
88 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
93 remarks: traces back to NL
97 descr: Leaseweb USA, Inc.
98 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
102 descr: ABGON Comunicaciones
103 remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ)
107 descr: Leaseweb Deutschland GmbH
108 remarks: ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage
112 descr: Leaseweb USA, Inc.
113 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage (BZ)
117 descr: IP Interactive UG (haftungsbeschraenkt)
118 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
123 remarks: tampers with RIR data, most probably located in HK
127 descr: Buena Telecom SRL
128 remarks: ISP located in RO, but RIR data for announced prefixes contain garbage
132 descr: Fiber Grid Inc.
133 remarks: tampers with RIR data, traces back to SE
138 remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage
143 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
148 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
152 descr: ab stract / Peter Kolmisoppi
153 remarks: tampers with RIR data, traces back to SE
157 descr: Confluence Networks Inc.
158 remarks: fake offshore location (VG), traces back to Austin, TX, US
163 remarks: Shady ISP located in US, tampers with RIR data
167 descr: Treidinvest LLC
168 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
172 descr: Packet Exchange Limited
173 remarks: shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in EU), routing stolen AfriNIC networks, RIR data of prefixes announced by this AS cannot be trusted
177 descr: NextGenWebs, S.L.
178 remarks: traces back to NL
182 descr: Bunea TELECOM SRL
183 remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage
187 descr: Safe Value Limited
188 remarks: tampers with RIR data, traces back to somewhere in central Europe
193 remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage
197 descr: Cloud Management LLC
198 remarks: tampers with RIR data, traces back to AP area
202 descr: DGN TEKNOLOJI A.S.
203 remarks: ISP located in TR, but many RIR data for announced prefixes contain garbage
208 remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage
212 descr: NForce Entertainment B.V.
213 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
217 descr: PQ HOSTING S.R.L.
218 remarks: tampers with RIR data sometimes, traces back to NL
222 descr: Landgard Management Inc.
223 remarks: bulletproof ISP with strong links to RU
227 descr: IP Oleinichenko Denis
228 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
232 descr: PPTECHNOLOGY LIMITED
233 remarks: bulletproof ISP (related to AS204655) located in NL
237 descr: ADM Service Ltd.
238 remarks: traces back to Vilnius, LT
243 remarks: tampers with RIR data, traces back to RU
248 remarks: part of the "Asline" IP hijacking gang, traces back to AP region
253 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
257 descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED
258 remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU
262 descr: Tamatiya EOOD / 4Vendeta
263 remarks: Questionable (at best) ISP located in BG, clients massively tamper with RIR data
267 descr: Serverius Holding B.V.
268 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
272 descr: Smart Telecom S.A.R.L
273 remarks: tampers with RIR data, traces back to RU
278 remarks: tampers with RIR data, traces back to RU
282 descr: Cloudie Limited
283 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
287 descr: REBA Communications BV
288 remarks: bulletproof ISP (related to AS202425) located in NL
292 descr: PE Skurykhin Mukola Volodumurovuch
293 remarks: tampers with RIR data, traces back to UA
298 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
302 descr: FiberXpress BV
303 remarks: bulletproof ISP (related to AS202425) located in NL
307 descr: DDOS-GUARD LTD
308 remarks: shady ISP, customers massively tamper with RIR data, we cannot trust this network
312 descr: Telefonica LLC
313 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
317 descr: Inter Connects Inc.
318 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
322 descr: Inter Connects Inc.
323 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data
328 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
333 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
337 descr: FOP Gubina Lubov Petrivna
338 remarks: bulletproof ISP operating from a war zone in eastern UA
343 remarks: another shady customer of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU
347 descr: Leaseweb Asia Pacific pte. ltd.
348 remarks: ISP located in SG, but some RIR data for announced prefixes contain garbage
352 descr: Batterflyai Media Ltd.
353 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
357 descr: The Infrastructure Group B.V.
358 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
362 descr: DignusData LLC
363 remarks: ISP located in PL, but _all_ RIR data for announced prefixes contain garbage
367 descr: Inter Connects Inc. / Jing Yun
368 remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks
372 descr: LeaseWeb Netherlands B.V.
373 remarks: ISP located in Amsterdam, NL, but many RIR data for announced prefixes contain garbage
377 descr: Vivo Trade L.P.
378 remarks: another shady customer of "DDoS Guard Ltd."
382 descr: SpectraIP B.V.
383 remarks: bulletproof ISP (linked to AS202425 et al.) located in NL
387 descr: Network Dedicated SAS
388 remarks: bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL
392 descr: VpsQuan L.L.C.
393 remarks: claims to be located in US, but traces to HK
398 remarks: ISP located in US, but many RIR data for announced prefixes contain garbage
402 descr: Inter Connects Inc.
403 remarks: part of a dirty ISP conglomerate, traces back to US this time
407 descr: SKB Enterprise B.V.
408 remarks: bulletproof ISP (linked to AS202425 et al.) located in NL
412 descr: NForce Entertainment BV
413 remarks: currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL
417 descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED
418 remarks: ISP located in HK, tampers with RIR data
422 descr: Leaseweb Asia Pacific pte. ltd.
423 remarks: ISP located in HK, some RIR data for announced prefixes contain garbage
427 descr: ULan Network Limited
428 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
432 descr: Leaseweb Japan K.K.
433 remarks: ISP located in JP, some RIR data for announced prefixes contain garbage
437 descr: DXTL Tseung Kwan O Service
438 remarks: tampers with RIR data, traces back to AP region
442 descr: Leaseweb Australia Pty. Ltd.
443 remarks: ISP located in AU, some RIR data for announced prefixes contain garbage
447 descr: Anchnet Asia Limited
448 remarks: IP hijacker located in HK, tampers with RIR data
452 descr: Clayer Limited
453 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
457 descr: SUPERCLOUDS LIMITED
458 remarks: ISP located in HK, tampers with RIR data
462 descr: Cloudflare Sydney, LLC
463 remarks: ... but CF failed to set the country for announced prefixes to AU as well :-/
467 descr: SANREN DATA LIMITED
468 remarks: IP hijacker located somewhere in AP region, tampers with RIR data
472 descr: ANLIAN NETWORK TECHNOLOGY CO., LIMITED
473 remarks: ISP located in HK, tampers with RIR data
477 descr: Galaxy Broadband
478 remarks: ISP located in PK, but announces 204.137.128.0/18, which is ARIN space, assigned to "AGIS" / Cogent - odd...
482 descr: Wujidun Network Limited
483 remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region
488 remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network
493 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
497 descr: Datashield, Inc.
498 remarks: fake offshore location (SC), traces back to NL
502 descr: Network Management Ltd.
503 remarks: traceroutes dead-end somewhere in or near RU
507 descr: AVATEL TELECOM
508 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
512 descr: Intelcom Group Ltd.
513 remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage
518 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
522 descr: FutureNow Incorporated
523 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
528 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
532 descr: IP Volume Inc.
533 remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL
537 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS
538 remarks: fake offshore location (SC), traces back to RU
542 descr: Cooperative Investments LLC
543 remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL
548 remarks: another shady customer of "DDoS Guard Ltd."
552 descr: Kevin Holly trading as Silent Ghost e.U.
553 remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/
557 descr: Rishikeshan Lavakumar
558 remarks: Network operator thinks messing with RIR data is funny... :-/
562 descr: Global Offshore Limited
563 remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted
568 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
572 descr: Hauer Hosting Services Limited
573 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
577 descr: LEASEWEB UK LIMITED
578 remarks: ISP located in London, GB, but many RIR data for announced prefixes contain garbage
582 descr: Genius Guard / Genius Security Ltd.
583 remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU
587 descr: Server Hosting Pty Ltd
588 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
592 descr: Xtudio Networks S.L.U.
593 remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage
597 descr: Network Management Ltd.
598 remarks: traceroutes dead-end somewhere in or near RU
602 descr: Altrosky Technology Ltd.
603 remarks: fake offshore location (SC), traces back to CZ and NL
608 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
612 descr: Maximilian Kutzner trading as HostSlick
613 remarks: traces back to NL, but some RIR data for announced prefixes contain garbage
617 descr: Access2.IT Group B.V.
618 remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage
622 descr: Internet Hosting Ltd.
623 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
627 descr: Alviva Holding Limited
628 remarks: ISP located in BG, but RIR data for announced prefixes contain garbage
632 descr: Miti 2000 EOOD
633 remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data
637 descr: Alviva Holding Limited
638 remarks: bulletproof ISP operating from a war zone in eastern UA
642 descr: Gudaev Maxim Amrakhovich
643 remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage
647 descr: VPSSC Networks LTD
648 remarks: ISP located in UA, but RIR data for announced prefixes contain garbage
652 descr: Kakharov Orinbassar Maratuly
653 remarks: ISP located in RU, but RIR data for announced prefixes contain garbage
658 remarks: ISP located in GB, but RIR data for announced prefixes contain garbage
662 descr: RoyaleHosting B.V.
663 remarks: ISP located in NL, but RIR data for announced prefixes contain garbage
667 descr: Quality Area Ltd.
668 remarks: traceroutes dead-end somewhere near Crimera, UA
673 remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage
677 descr: Private Internet Hosting LTD
678 remarks: bulletproof ISP located in RU
682 descr: IP Connect Inc.
683 remarks: fake offshore location (SC), traces back to NL
687 descr: DDOS-GUARD CORP.
688 remarks: fake offshore location (BZ), traces back to RU
692 descr: Sun Network Company Limited
693 remarks: IP hijacker, traces back to AP region
697 descr: Datapacket Maroc SARL
698 remarks: bulletproof ISP (strongly linked to AS202425) located in NL
702 descr: Leaseweb USA, Inc.
703 remarks: ISP located in Dallas, TX, US, but some RIR data for announced prefixes contain garbage
707 descr: Leaseweb USA, Inc.
708 remarks: ISP located in US, but some RIR data for announced prefixes contain garbage
713 remarks: ISP located in HK, tampers with RIR data
717 descr: OLink Cloud LLC
718 remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage
723 remarks: routed to DE, inaccurate RIR data
728 remarks: routed to DE, inaccurate RIR data
733 remarks: routed to DE, inaccurate RIR data
738 remarks: routed to DE, inaccurate RIR data
742 descr: StormWall s.r.o.
743 remarks: claims to be located in DE, but traces back to somewhere else in central Europe
747 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
748 remarks: fake offshore location (BZ), traces back to NL
752 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
753 remarks: fake offshore location (BZ), traces back to NL
758 remarks: fake offshore location (SC), traces back to RO
762 descr: IP Volume Ltd. / Epik
763 remarks: fake location (CH), traces back to GB
767 descr: IPv4 Superhub Limited
768 remarks: network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try...
772 descr: MS Network LTD
773 remarks: fake offshore location (SC), traces back to NL
777 descr: IPv4 Superhub Limited
778 remarks: same as 45.93.16.0/22
782 descr: GlobalCache Technology CO., Ltd.
783 remarks: claims to be located in DE, but traces back to HK
787 descr: US AFG 20200130
788 remarks: claims to be located in US, but traces back to SK
792 descr: Vodafone US Inc.
793 remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data)
797 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
798 remarks: fake offshore location (BZ), traces back to US
802 descr: Golden Internet LLC
803 remarks: fake location (KP), WHOIS contact points to RU
807 descr: IP Volume Ltd. / Epik
808 remarks: fake location (CH), traces back to SE
812 descr: IP Volume Ltd. / Epik
813 remarks: fake location (CH), traces back to SE
817 descr: IP Volume Ltd. / Epik
818 remarks: fake location (CH), traces back to NO
822 descr: Petersburg Internet Network Ltd.
823 remarks: RIR data for suballocations contain garbage, they are all located in RU
828 remarks: fake location (US), WHOIS contact and traceroutes point to RU
831 net: 103.197.148.0/22
832 descr: I.C.S. Trabia-Network S.R.L.
833 remarks: fake offshore location (HK), traces back to MD
837 descr: PSINet, Inc. (PSI) / Cogent Communications
838 remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001")
842 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd.
843 remarks: fake location (BA), traces back to RO
848 remarks: fake offshore location (SC), traces back to RO
852 descr: Datashield, Inc.
853 remarks: fake offshore location (SC), traces back to NL
857 descr: Intelcom Group Ltd
858 remarks: fake offshore location (SC), traces back to RU
861 net: 185.140.204.0/22
862 descr: Hornetsecurity GmbH
863 remarks: all suballocations are used in DE, but are assigned to US
867 descr: Perfect Hosting Solutions
868 remarks: bulletproof ISP related to AS204655, traces back to BG
871 net: 185.169.253.0/24
872 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
873 remarks: fake offshore location (BZ), traces back to US
877 descr: Romanenko Stanislav Sergeevich
878 remarks: bulletproof ISP related to AS204655, traces back to BG
881 net: 185.193.124.0/22
882 descr: ab stract / Njalla
883 remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE
886 net: 185.227.152.0/22
887 descr: XinYuan Interconnect (HONG KONG [sic!]) Limited
888 remarks: claims to be located in DE, traces back to HK
892 descr: WorldStream (LATAM) BV
893 remarks: LACNIC IP chunk solely used in NL (inaccurate data)
897 descr: Deep Eddy Internet Consulting
898 remarks: claims to be located in US, traces back to AP region
902 descr: Bunea TELECOM SRL
903 remarks: RIR data contain garbage for this network
907 descr: NetConn Services Ltd
908 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
911 net: 193.186.196.0/22
913 remarks: claims to be located in DE, traces back to GB
917 descr: Posta Crne Gore
918 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
921 net: 195.252.115.0/24
923 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
926 net: 195.252.120.0/24
928 remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html
931 net: 198.144.120.0/23
932 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity
933 remarks: fake offshore location (BZ), traces back to NL
936 net: 202.128.108.0/23
937 descr: NetConn Services Ltd
938 remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC
941 net: 2a02:e00:ffe7::/48
942 descr: Bradler & Krantz GmbH & Co. KG
943 remarks: allocated to DE, but actually announced from LT
946 net: 2a02:e00:ffe8::/48
947 descr: Bradler & Krantz GmbH & Co. KG
948 remarks: allocated to DE, but actually announced from MD
951 net: 2a02:e00:ffe9::/48
952 descr: Bradler & Krantz GmbH & Co. KG
953 remarks: allocated to DE, but actually announced from GB
957 descr: Sibyl System LTD
958 remarks: RIR data contain garbage
962 descr: Datashield, Inc.
963 remarks: fake offshore location (SC), traces back to NL
966 net: 2a09:4c0:3000::/40
968 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
971 net: 2a0e:b101:3000::/40
972 descr: 4b42 UG (haftungsbeschränkt)
973 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/
977 descr: ASLINE Limited
978 remarks: APNIC chunk owned by a HK-based company, but assigned to DE
981 net: 2a0f:e400:3000::/40
983 remarks: ... who thinks assigning networks to unpopulated Bouvet Island (BV) is funny :-/