# # override-other [.txt] # # This file contains Autonomous Systems (AS) or IP networks/addresses # whose country information in corresponding RIR data is believed or proven # to be invalid or inaccurate and which do not match to one of the special categories # A[1-3]. # # Such networks might be legitimate (poorly maintained WHOIS data), shady # (networks owned by letterbox companies in offshore jurisdictions) or # hostile (faked RIR data in order to bypass location-based filtering). # # Please keep this file sorted. # aut-num: AS1820 descr: WNET TELECOM USA Corp. remarks: traces back to various locations in UA, seems to tamper with RIR data country: UA aut-num: AS3216 descr: PJSC "Vimpelcom" remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU aut-num: AS6134 descr: XNNET LLC remarks: traces back to an unknown oversea location (HK?), seems to tamper with RIR data country: HK aut-num: AS7203 descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US aut-num: AS8359 descr: MTS PJSC remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU aut-num: AS12025 descr: Iron Mountain Data Center remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US aut-num: AS18013 descr: ASLINE LIMITED remarks: IP hijacker, traces back to AP region country: AP aut-num: AS18254 descr: KLAYER LLC remarks: part of the "Asline" IP hijacking gang, traces back to AP region country: AP aut-num: AS22769 descr: DDOSING NETWORK remarks: IP hijacker located somewhere in AP, massively tampers with RIR data country: AP aut-num: AS24009 descr: HK UNITE TELECOMMUNICATIONS DEVELOPMENT LIMITED remarks: IP hijacker (?) located in HK, tampers with RIR data country: HK aut-num: AS24700 descr: Yes Networks Unlimited Ltd remarks: traces to UA, but some RIR entries seem to contain garbage (VG) country: UA aut-num: AS24961 descr: myLoc managed IT AG remarks: ISP located in DE, but some RIR data for announced prefixes contain garbage country: DE aut-num: AS25098 descr: Netcalibre Ltd. remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage country: GB aut-num: AS27411 descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US aut-num: AS28098 descr: ABGON Comunicaciones remarks: ISP located in CL, but some RIR data for announced prefixes contain garbage (BZ) country: CL aut-num: AS28753 descr: Leaseweb Deutschland GmbH remarks: ISP located in Frankfurt/Main, DE, but many RIR data for announced prefixes contain garbage country: DE aut-num: AS30633 descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage (BZ) country: US aut-num: AS35042 descr: IP Interactive UG (haftungsbeschraenkt) remarks: ISP located in BG, but RIR data for announced prefixes contain garbage country: BG aut-num: AS35251 descr: NetLab remarks: tampers with RIR data, most probably located in HK country: HK aut-num: AS35478 descr: Buena Telecom SRL remarks: ISP located in RO, but RIR data for announced prefixes contain garbage country: RO aut-num: AS37518 descr: Fiber Grid Inc. remarks: tampers with RIR data, traces back to SE country: SE aut-num: AS34224 descr: Neterra Ltd. remarks: ISP located in BG, but some RIR data for announced prefixes contain garbage country: BG aut-num: AS35624 descr: Neterra Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU aut-num: AS39287 descr: ab stract / Peter Kolmisoppi remarks: tampers with RIR data, traces back to SE country: SE aut-num: AS40034 descr: Confluence Networks Inc. remarks: fake offshore location (VG), traces back to Austin, TX, US country: US aut-num: AS41466 descr: Treidinvest LLC remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data country: BG aut-num: AS41564 descr: Packet Exchange Limited remarks: shady uplink for a bunch of dirty ISPs in SE (and likely elsewhere in EU), routing stolen AfriNIC networks, RIR data of prefixes announced by this AS cannot be trusted country: EU aut-num: AS42397 descr: Bunea TELECOM SRL remarks: ISP located in RO, but some RIR data for announced prefixes contain garbage country: RO aut-num: AS42745 descr: Safe Value Limited remarks: tampers with RIR data, traces back to somewhere in central Europe country: EU aut-num: AS42831 descr: UKSERVERS remarks: ISP located in GB, but some RIR data for announced prefixes contain garbage country: GB aut-num: AS42960 descr: Cloud Management LLC remarks: tampers with RIR data, traces back to HK country: HK aut-num: AS43310 descr: TOV "LVS" remarks: ISP located in UA, but some RIR data for announced prefixes contain garbage country: UA aut-num: AS44015 descr: Landgard Management Inc. remarks: bulletproof ISP with strong links to RU country: RU aut-num: AS44477 descr: IP Oleinichenko Denis remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU aut-num: AS48090 descr: PPTECHNOLOGY LIMITED remarks: bulletproof ISP (related to AS204655) located in NL country: NL aut-num: AS41564 descr: Global Colocation Limited remarks: part of a dirty ISP conglomerate most likely operating out of SE country: SE aut-num: AS48721 descr: ADM Service Ltd. remarks: traces back to Vilnius, LT country: LT aut-num: AS49466 descr: KLAYER LLC remarks: part of the "Asline" IP hijacking gang, traces back to AP region country: AP aut-num: AS49505 descr: Selectel remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU aut-num: AS49921 descr: F.I.H. FORMULA INVESTMENT HOUSE CLEARING LIMITED remarks: claims GR for announced prefixes, but traceroutes dead-end somewhere else in EU country: EU aut-num: AS50360 descr: Tamatiya EOOD / 4Vendeta remarks: Questionable (at best) ISP located in BG, clients massively tamper with RIR data country: BG aut-num: AS51558 descr: Smart Telecom S.A.R.L remarks: tampers with RIR data, traces back to RU country: RU aut-num: AS55933 descr: Cloudie Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region country: AP aut-num: AS56611 descr: REBA Communications BV remarks: bulletproof ISP (related to AS202425) located in NL country: NL aut-num: AS56851 descr: PE Skurykhin Mukola Volodumurovuch remarks: tampers with RIR data, traces back to UA country: UA aut-num: AS57717 descr: FiberXpress BV remarks: bulletproof ISP (related to AS202425) located in NL country: NL aut-num: AS57724 descr: DDOS-GUARD LTD remarks: shady ISP, customers massively tamper with RIR data, we cannot trust this network country: RU aut-num: AS57858 descr: Inter Connects Inc. remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking stolen AfriNIC networks, massively tampers with RIR data country: SE aut-num: AS58073 descr: YISP BV remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage country: NL aut-num: AS58271 descr: FOP Gubina Lubov Petrivna remarks: bulletproof ISP operating from a war zone in eastern UA country: UA aut-num: AS58349 descr: INNETRA PC remarks: another shady customer of "DDoS Guard Ltd.", jurisdiction is probably RU, but traceroutes dead-end somewhere else in EU country: EU aut-num: AS59253 descr: Leaseweb Asia Pacific pte. ltd. remarks: ISP located in SG, but some RIR data for announced prefixes contain garbage country: SG aut-num: AS59580 descr: Batterflyai Media Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU aut-num: AS60412 descr: DignusData LLC remarks: ISP located in PL, but _all_ RIR data for announced prefixes contain garbage country: PL aut-num: AS60485 descr: Inter Connects Inc. / Jing Yun remarks: part of a dirty ISP conglomerate operating most likely out of SE, hijacking AfriNIC networks country: SE aut-num: AS60781 descr: LeaseWeb Netherlands B.V. remarks: ISP located in Amsterdam, NL, but many RIR data for announced prefixes contain garbage country: NL aut-num: AS61977 descr: Vivo Trade L.P. remarks: another shady customer of "DDoS Guard Ltd." country: RU aut-num: AS62068 descr: SpectraIP B.V. remarks: bulletproof ISP (linked to AS202425 et al.) located in NL country: NL aut-num: AS62355 descr: Network Dedicated SAS remarks: bulletproof ISP and IP hijacker, claims to be located in CH, but traces to NL country: NL aut-num: AS62468 descr: VpsQuan L.L.C. remarks: claims to be located in US, but traces to HK country: HK aut-num: AS63119 descr: Inter Connects Inc. remarks: part of a dirty ISP conglomerate, traces back to US this time country: US aut-num: AS64425 descr: SKB Enterprise B.V. remarks: bulletproof ISP (linked to AS202425 et al.) located in NL country: NL aut-num: AS64437 descr: NForce Entertainment BV remarks: currently hijacks a single stolen /20 AfriNIC IPv4 net, hosted in NL country: NL aut-num: AS132369 descr: XIANGAO INTERNATIONAL TELECOMMUNICATION LIMITED remarks: ISP located in HK, tampers with RIR data country: HK aut-num: AS133752 descr: Leaseweb Asia Pacific pte. ltd. remarks: ISP located in HK, some RIR data for announced prefixes contain garbage country: HK aut-num: AS134351 descr: Leaseweb Japan K.K. remarks: ISP located in JP, some RIR data for announced prefixes contain garbage country: JP aut-num: AS134548 descr: DXTL Tseung Kwan O Service remarks: tampers with RIR data, traces back to AP region country: AP aut-num: AS136988 descr: Leaseweb Australia Pty. Ltd. remarks: ISP located in AU, some RIR data for announced prefixes contain garbage country: AU aut-num: AS137443 descr: Anchnet Asia Limited remarks: IP hijacker located in HK, tampers with RIR data country: HK aut-num: AS137951 descr: Clayer Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region country: AP aut-num: AS138571 descr: SUPERCLOUDS LIMITED remarks: ISP located in HK, tampers with RIR data country: HK aut-num: AS139242 descr: Cloudflare Sydney, LLC remarks: ... but CF failed to set the country for announced prefixes to AU as well :-/ country: AU aut-num: AS139330 descr: SANREN DATA LIMITED remarks: IP hijacker located somewhere in AP region, tampers with RIR data country: AP aut-num: AS139811 descr: ANLIAN NETWORK TECHNOLOGY CO., LIMITED remarks: ISP located in HK, tampers with RIR data country: HK aut-num: AS140733 descr: Wujidun Network Limited remarks: part of the "Asline" IP hijacking gang, tampers with RIR data, traces back to AP region country: AP aut-num: AS200019 descr: ALEXHOST SRL remarks: ISP located in MD, majority of RIR data for announced prefixes contain garbage, we cannot trust this network country: MD aut-num: AS200391 descr: KREZ 999 EOOD remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data country: BG aut-num: AS200699 descr: Datashield, Inc. remarks: fake offshore location (SC), traces back to NL country: NL aut-num: AS200740 descr: Network Management Ltd. remarks: traceroutes dead-end somewhere in or near RU country: RU aut-num: AS200845 descr: AVATEL TELECOM remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage country: ES aut-num: AS201118 descr: Intelcom Group Ltd. remarks: ISP located in RU, but some RIR data for announced prefixes contain garbage country: RU aut-num: AS201133 descr: Verdina Ltd. remarks: ISP located in BG, but RIR data for announced prefixes contain garbage country: BG aut-num: AS201912 descr: FutureNow Incorporated remarks: ISP located in BG, but RIR data for announced prefixes contain garbage country: BG aut-num: AS202325 descr: 4Media Ltd. remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data country: BG aut-num: AS202425 descr: IP Volume Inc. remarks: bulletproof ISP (aka: AS29073 / Ecatel Ltd. / Quasi Networks Ltd.) located in NL country: NL aut-num: AS202492 descr: SILVERHILL GROUP HOLDING LTD / SAKIS POLUNIGIS remarks: fake offshore location (SC), traces back to NL country: NL aut-num: AS202769 descr: Cooperative Investments LLC remarks: bulletproof ISP and IP hijacker, related to AS202425 and AS62355, traces to NL country: NL aut-num: AS202920 descr: DataClub S.A. remarks: another shady customer of "DDoS Guard Ltd." country: RU aut-num: AS204136 descr: Kevin Holly trading as Silent Ghost e.U. remarks: AS run by someone who thinks allocating IP networks to AQ is funny (it is not, kid) :-/ country: NL aut-num: AS204353 descr: Global Offshore Limited remarks: part of a dirty ISP conglomerate with links to SE, RIR data of prefixes announced by this AS cannot be trusted country: EU aut-num: AS204655 descr: Novogara Ltd. remarks: bulletproof ISP (strongly linked to AS202425) located in NL country: NL aut-num: AS205026 descr: Hauer Hosting Services Limited remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage country: ES aut-num: AS205544 descr: LEASEWEB UK LIMITED remarks: ISP located in London, GB, but many RIR data for announced prefixes contain garbage country: GB aut-num: AS206397 descr: Genius Guard / Genius Security Ltd. remarks: another shady customer of "DDoS Guard Ltd.", probably located in RU country: RU aut-num: AS206898 descr: Server Hosting Pty Ltd remarks: ISP located in NL, but some RIR data for announced prefixes contain garbage country: NL aut-num: AS207046 descr: Xtudio Networks S.L.U. remarks: ISP located in ES, but some RIR data for announced prefixes contain garbage country: ES aut-num: AS207569 descr: Network Management Ltd. remarks: traceroutes dead-end somewhere in or near RU country: RU aut-num: AS207616 descr: Altrosky Technology Ltd. remarks: fake offshore location (SC), traces back to CZ and NL country: EU aut-num: AS207812 descr: DM AUTO EOOD remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data country: BG aut-num: AS208046 descr: Maximilian Kutzner trading as HostSlick remarks: traces back to NL, but some RIR data for announced prefixes contain garbage country: NL aut-num: AS208410 descr: Internet Hosting Ltd. remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data country: BG aut-num: AS209132 descr: Alviva Holding Limited remarks: ISP located in BG, but RIR data for announced prefixes contain garbage country: BG aut-num: AS209160 descr: Miti 2000 EOOD remarks: another shady customer of "Tamatiya EOOD / 4Vendeta", located in BG, tampers with RIR data country: BG aut-num: AS209272 descr: Alviva Holding Limited remarks: bulletproof ISP operating from a war zone in eastern UA country: UA aut-num: AS209401 descr: Gudaev Maxim Amrakhovich remarks: announcements scatter across various places in EU (DE/CZ/??), but RIR data contain garbage country: EU aut-num: AS210119 descr: VPSSC Networks LTD remarks: ISP located in UA, but RIR data for announced prefixes contain garbage country: UA aut-num: AS211849 descr: Kakharov Orinbassar Maratuly remarks: ISP located in RU, but RIR data for announced prefixes contain garbage country: RU aut-num: AS212231 descr: Harry Dowd remarks: ISP located in GB, but RIR data for announced prefixes contain garbage country: GB aut-num: AS212962 descr: Quality Area Ltd. remarks: traceroutes dead-end somewhere near Crimera, UA country: UA aut-num: AS213035 descr: Serverion BV remarks: ISP located in NL, but RIR data for most announced prefixes contain garbage country: NL aut-num: AS213058 descr: Private Internet Hosting LTD remarks: bulletproof ISP located in RU country: RU aut-num: AS213373 descr: IP Connect Inc. remarks: fake offshore location (SC), traces back to NL country: NL aut-num: AS262254 descr: DDOS-GUARD CORP. remarks: fake offshore location (BZ), traces back to RU country: RU aut-num: AS328543 descr: Sun Network Company Limited remarks: IP hijacker, traces back to AP region country: AP aut-num: AS328671 descr: Datapacket Maroc SARL remarks: bulletproof ISP (strongly linked to AS202425) located in NL country: NL aut-num: AS394380 descr: Leaseweb USA, Inc. remarks: ISP located in Dallas, TX, US, but some RIR data for announced prefixes contain garbage country: US aut-num: AS395954 descr: Leaseweb USA, Inc. remarks: ISP located in US, but some RIR data for announced prefixes contain garbage country: US aut-num: AS398478 descr: PEG TECH INC remarks: ISP located in HK, tampers with RIR data country: HK aut-num: AS398826 descr: OLink Cloud LLC remarks: shady ISP located in US, but some RIR data for announced prefixes contain garbage country: US net: 5.1.68.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data country: DE net: 5.1.69.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data country: DE net: 5.1.83.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data country: DE net: 5.1.88.0/24 descr: GaiacomLC remarks: routed to DE, inaccurate RIR data country: DE net: 5.252.32.0/22 descr: StormWall s.r.o. remarks: claims to be located in DE, but traces back to somewhere else in central Europe country: EU net: 31.220.0.0/22 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to NL country: NL net: 31.220.40.0/23 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to NL country: NL net: 37.228.128.0/24 descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO net: 45.89.97.0/24 descr: IP Volume Ltd. / Epik remarks: fake location (CH), traces back to GB country: GB net: 45.93.16.0/22 descr: IPv4 Superhub Limited remarks: network owned by an HK company, traces back to HK as well - but is assigned to DE. Nice try... country: HK net: 45.134.12.0/24 descr: MS Network LTD remarks: fake offshore location (SC), traces back to NL country: NL net: 45.134.144.0/22 descr: IPv4 Superhub Limited remarks: same as 45.93.16.0/22 country: HK net: 45.145.36.0/22 descr: GlobalCache Technology CO., Ltd. remarks: claims to be located in DE, but traces back to HK country: HK net: 45.148.167.0/24 descr: US AFG 20200130 remarks: claims to be located in US, but traces back to SK country: SK net: 47.60.0.0/14 descr: Vodafone US Inc. remarks: large Vodafone IP chunk used in ES, but assigned by ARIN (inaccurate data) country: ES net: 85.202.80.0/24 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to US country: US net: 88.151.117.0/24 descr: Golden Internet LLC remarks: fake location (KP), WHOIS contact points to RU country: RU net: 91.149.194.0/24 descr: IP Volume Ltd. / Epik remarks: fake location (CH), traces back to SE country: SE net: 91.149.195.0/24 descr: IP Volume Ltd. / Epik remarks: fake location (CH), traces back to SE country: SE net: 91.149.224.0/24 descr: IP Volume Ltd. / Epik remarks: fake location (CH), traces back to NO country: NO net: 91.243.32.0/19 descr: Petersburg Internet Network Ltd. remarks: RIR data for suballocations contain garbage, they are all located in RU country: RU net: 95.181.152.0/21 descr: QWARTA LLC remarks: fake location (US), WHOIS contact and traceroutes point to RU country: RU net: 103.197.148.0/22 descr: I.C.S. Trabia-Network S.R.L. remarks: fake offshore location (HK), traces back to MD country: MD net: 130.117.0.0/16 descr: PSINet, Inc. (PSI) / Cogent Communications remarks: Cogent IP range used in Europe, according to ARIN whois ("COGENT-EUROPEAN-OPERATIONS-001") country: EU net: 178.239.20.0/24 descr: Anthony Marshall / Game Hosting Net / FlokiNET Ltd. remarks: fake location (BA), traces back to RO country: RO net: 185.10.68.0/24 descr: FlokiNET Ltd. remarks: fake offshore location (SC), traces back to RO country: RO net: 185.56.80.0/22 descr: Datashield, Inc. remarks: fake offshore location (SC), traces back to NL country: NL net: 185.85.120.0/22 descr: Intelcom Group Ltd remarks: fake offshore location (SC), traces back to RU country: RU net: 185.140.204.0/22 descr: Hornetsecurity GmbH remarks: all suballocations are used in DE, but are assigned to US country: DE net: 185.175.93.0/24 descr: Perfect Hosting Solutions remarks: bulletproof ISP related to AS204655, traces back to BG country: BG net: 185.169.253.0/24 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to US country: US net: 185.193.91.0/24 descr: Romanenko Stanislav Sergeevich remarks: bulletproof ISP related to AS204655, traces back to BG country: BG net: 185.193.124.0/22 descr: ab stract / Njalla remarks: bogus RIR data pointing to the unpopulated Bouvet Island (BV), suballocations trace back to SE country: SE net: 185.227.152.0/22 descr: XinYuan Interconnect (HONG KONG [sic!]) Limited remarks: claims to be located in DE, traces back to HK country: HK net: 190.2.128.0/19 descr: WorldStream (LATAM) BV remarks: LACNIC IP chunk solely used in NL (inaccurate data) country: NL net: 192.12.3.0/24 descr: Deep Eddy Internet Consulting remarks: claims to be located in US, traces back to AP region country: AP net: 193.29.12.0/22 descr: Bunea TELECOM SRL remarks: RIR data contain garbage for this network country: RO net: 193.119.0.0/19 descr: NetConn Services Ltd remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC country: AP net: 195.66.165.0/24 descr: Posta Crne Gore remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html country: ME net: 195.252.115.0/24 descr: Drenik ISP remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html country: ME net: 195.252.120.0/24 descr: AB SOFT remarks: Orphaned RIR data, see: https://lists.ipfire.org/pipermail/location/2021-April/000267.html country: ME net: 198.144.120.0/23 descr: Amarutu Technology Ltd. / KoDDoS / ESecurity remarks: fake offshore location (BZ), traces back to NL country: NL net: 202.128.108.0/23 descr: NetConn Services Ltd remarks: APNIC chunk owned by a HK-based company, routed to AP region, but assigned to SC country: AP net: 2a02:e00:ffe7::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from LT country: LT net: 2a02:e00:ffe8::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from MD country: MD net: 2a02:e00:ffe9::/48 descr: Bradler & Krantz GmbH & Co. KG remarks: allocated to DE, but actually announced from GB country: GB net: 2a05:9f06::/31 descr: Sibyl System LTD remarks: RIR data contain garbage country: NL net: 2a06:e80::/29 descr: Datashield, Inc. remarks: fake offshore location (SC), traces back to NL country: NL net: 2a0f:7a80::/29 descr: ASLINE Limited remarks: APNIC chunk owned by a HK-based company, but assigned to DE country: AP