Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Massive Globe Data Center Shut Down by FIOD and Europol
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Massive Globe Data Center Shut Down by FIOD and Europol

treesmokahtreesmokah Member
edited May 2023 in News

Globe Data Center allegedly hosted countless pirate IPTV streaming sites and didn't care that some of them may be illegal.

The operation was absolutely massive, 1,2 Tbps in IX traffic alone.
Reportedly dishes in Limburg were used to "steal" TV content and were rebroadcasted over IP.
Globe is at the moment entirely cut off from the internet, all announcements are dead.
https://bgp.tools/as/212708
https://radar.cloudflare.com/as212708

4 people got arrested, in Almere and Den Helder(I suspect who, but I do not think its relevant at the moment, some of them got arrested years back for similar things).
Large sums of cash, 5 cars, bank accounts and hardware got seized.

/ personal views
I do not want to make any accusations without concrete proof, but I have many reasons to believe Globe is extremely linked to SkyLink data center(which is used by a few providers here) and would recommend staying away from it for the time being. Both data centers shared management and employees with eachother, as well utilized eachother as upstreams.
\

All social channels of Globe are gone(Linkedin, Twitter etc.) which appears to indicate they accepted their fate.
One of Globe employees started to announce some subnets(previously announced at Globe) on Ecatel for reasons unknown to me.

Media reports;
https://www.europol.europa.eu/media-press/newsroom/news/one-of-europes-biggest-pirate-iptv-service-taken-down-in-netherlands
https://www.noordhollandsdagblad.nl/cnt/dmf20230523_48386857
https://www.limburger.nl/cnt/dmf20230526_93435964 (no paywall)
https://torrentfreak.com/dutch-police-take-down-massive-pirate-iptv-operation-with-a-million-users-230523/
https://torrentfreak.com/pirate-iptv-data-center-raid-took-down-several-innocent-websites-230525/

Comments

  • MannDudeMannDude Patron Provider, Veteran

    Welcome back.

  • conceptconcept Member

    yeah... there are a few posts about it on some other threads looking for DMCA ignored host. I have a couple vpses in Tube-Hosting/Skylink.

  • treesmokahtreesmokah Member
    edited May 2023

    @concept said:
    yeah... there are a few posts about it on some other threads looking for DMCA ignored host. I have a couple vpses in Tube-Hosting/Skylink.

    I got a vps with Hostslick in SkyLink as well, just idling at the moment.
    We'll see what comes out of it, because its certainly not the end, and SkyLink people(many of which worked for Globe) will be dragged to court most likely.

    Last time it was a "bulletproof hosting provider" who got them in a little bit of trouble, https://lowendtalk.com/discussion/185428/german-police-raid-ddos-friendly-host-flyhosting

  • LeviLevi Member

    When those crooks learn, that no cash should be held. And no houses, cars etc. should be in their name. Pumping millions and can't afford decent lawyer team to orchestrate all legal tasks.

    Received money? Buy gold and bury it in some private island. Accumulated enough gold for lifetime? Seize operation, wait decade, dig up gold and live one of the cocainy life.

    Now, fortune is arested by copyright cartel. It will fuel them for long years of trolling and corruption in gov to tighten grip on piracy. Amateurs.

    Thanked by 1Egyarmy
  • NeoonNeoon Community Contributor, Veteran
    edited May 2023

    Yea, Skylink had an outage, probability highly related to this.
    Everyone hosting there has keept silent, which is concerning.

    From the looks of it, Skylink is now single homed to combahton.

  • angstromangstrom Moderator

    Moved thread from General to News

    Thanked by 1treesmokah
  • treesmokahtreesmokah Member
    edited May 2023

    @Neoon said: Yea, Skylink had an outage, probability highly related to this.

    It was related to this.

    @Neoon said: From the looks of it, Skylink is now single homed to combahton.

    Yes, it is. Combahton also had Globe connectivity and was their DDoS-Protection provider. Owners of all Globe, SkyLink and Combahton appear to know eachother, chilled together and posted photos - may be related to business though.

    @Neoon said: Everyone hosting there has keept silent, which is concerning.

    SkyLink status page mentions nothing about the outage caused by this raid, Globe was their primary upstream so they were obviously affected.
    SkyLink owner was co-owner of Globe.

    Dishes used for alleged ripping of TV and streaming over IP by Globe are also owned by SkyLink.

  • jh_aurologicjh_aurologic Member, Patron Provider

    @treesmokah said:

    @Neoon said: From the looks of it, Skylink is now single homed to combahton.

    Yes, it is. Combahton also had Globe connectivity and was their DDoS-Protection provider. Owners of all Globe, SkyLink and Combahton appear to know eachother, chilled together and posted photos - may be related to business though.

    Right, AS212708 has been one of our upstreams and we did provide them with our DDoS-Protection appliance(s) in their datacenter, a customer like everyone else. Skylink Datacenter used to have upstream through them, the same as we had. As they lost AMS basically, we do provide them with more capacity since then, to keep things going normally, which is important for everyone operating a business. In terms of the AS212708 network, it was excellent - a lot of capacity.

    From what I heard and what I know, I'm not so much concerned about Skylink. The guys we're still doing business and I've met personally, are not in jail nor I'm aware that they are connected to what happened the past days.

    Thanked by 2treesmokah maverick
  • DrMakDrMak Member

    @Advin also uses skylink for VDS and vps's ... :o

  • kaitkait Member

    @DrMak said:
    @Advin also uses skylink for VDS and vps's ... :o

    Skylink will be fine.

  • kasodkkasodk Barred

    @angstrom said:
    Moved thread from General to News

    You should have moved it to old news.
    https://lowendtalk.com/discussion/186524/pirate-iptv-data-center-raid-took-down-several-innocent-websites

  • treesmokahtreesmokah Member
    edited May 2023

    @kasodk said:

    @angstrom said:
    Moved thread from General to News

    You should have moved it to old news.
    https://lowendtalk.com/discussion/186524/pirate-iptv-data-center-raid-took-down-several-innocent-websites

    I think my thread is more informative.
    Been following the topic since day one, but sadly wasn't able to post at the time.

  • SetsuraSetsura Member
    edited May 2023

    @treesmokah said:
    One of Globe employees started to announce some subnets(previously announced at Globe) on Ecatel for reasons unknown to me.

    Lol, is Ecatel/ipvolume/whatever they're called now somehow involved in this or are they just being dumb?

  • treesmokahtreesmokah Member
    edited May 2023

    @Setsura said:

    @treesmokah said:
    One of Globe employees started to announce some subnets(previously announced at Globe) on Ecatel for reasons unknown to me.

    Lol, is Ecatel/ipvolume/whatever they're called now somehow involved in this or are they just being dumb?

    I do not think Ecatel/ipvolume/fiberxpress/novogara/quassi/reba/... is involved, as I said I do not know exact reason why their employee started to put his subnets there, but it does not look like they are connected very much to eachother.

    https://bgp.tools/prefix/91.202.208.0/24 - no iptv there most likely, just a side project of one of globe employees. But going with Ecatel and not something more "reputable" is weird.

  • Shot2Shot2 Member

    FIOD is food for FUD

  • xx00xxxx00xx Member

    @combahton_it said:

    Right, AS212708 has been one of our upstreams and we did provide them with our DDoS-Protection appliance(s) in their datacenter, a customer like everyone else. Skylink Datacenter used to have upstream through them, the same as we had. As they lost AMS basically, we do provide them with more capacity since then, to keep things going normally, which is important for everyone operating a business. In terms of the AS212708 network, it was excellent - a lot of capacity.

    From what I heard and what I know, I'm not so much concerned about Skylink. The guys we're still doing business and I've met personally, are not in jail nor I'm aware that they are connected to what happened the past days.

    but why did the old twitter account of globe datacenter (now deleted) had a posting that they are "now" part of combahton?

  • @xx00xx said:

    @combahton_it said:

    Right, AS212708 has been one of our upstreams and we did provide them with our DDoS-Protection appliance(s) in their datacenter, a customer like everyone else. Skylink Datacenter used to have upstream through them, the same as we had. As they lost AMS basically, we do provide them with more capacity since then, to keep things going normally, which is important for everyone operating a business. In terms of the AS212708 network, it was excellent - a lot of capacity.

    From what I heard and what I know, I'm not so much concerned about Skylink. The guys we're still doing business and I've met personally, are not in jail nor I'm aware that they are connected to what happened the past days.

    but why did the old twitter account of globe datacenter (now deleted) had a posting that they are "now" part of combahton?

    They most certainly meant connectivity from Combahton, I dug deep in their company structure and there are absolutely no ties to Combahton.

    Thanked by 2kait let_rocks
  • jh_aurologicjh_aurologic Member, Patron Provider

    Not true at all, thats a customer and they got DDoS-Protection from us. Thats a totally different part of being part of something :smile:

    Thanked by 2kait let_rocks
  • Just out of interest: Are you talking about this data center in Eygelshoven near Heerlen: https://skylink-data-center.nl/
    As far as I know, it is owned and operated by XSServer GmbH in Übach-Palenberg near Aachen, just across the border between the Netherlands and Germany.

  • @Anthony2016 said:
    Just out of interest: Are you talking about this data center in Eygelshoven near Heerlen: https://skylink-data-center.nl/
    As far as I know, it is owned and operated by XSServer GmbH in Übach-Palenberg near Aachen, just across the border between the Netherlands and Germany.

    Yes, things said about SkyLink refer to this SkyLink.

  • Damnnn this explains why noone sells crystalott and variants anymore.. It was such a nice service for pennies.

  • treesmokahtreesmokah Member
    edited June 2023

    New upstream appeared;

    They are also back as upstream for SkyLink.

    @RoyaleHosting can you confirm Globe people are responsible for this? or is it some kind of a bug.

  • Oh baby we're still going.

    🍿

  • @treesmokah said:
    New upstream appeared;

    They are also back as upstream for SkyLink.

    @RoyaleHosting can you confirm Globe people are responsible for this? or is it some kind of a bug.

    Weird, I don’t see RoyaleHosting as upstream/peer on HE BGP toolkit (got recent update) or bgpview.

  • RoyaleHostingRoyaleHosting Member, Patron Provider

    Hi,

    Seems like this is some weird issue in their BGP configuration, they are not an downstream or customer of us.

    Could be a routing leak through the ERA-IX.

    Our noc is also looking into it :)

    Thanked by 1treesmokah
  • RoyaleHostingRoyaleHosting Member, Patron Provider

    Hi Everyone,

    This has been resolved now, it was a routing leak indeed.

    Thanks for alerting us! :)

    Thanked by 2let_rocks treesmokah
Sign In or Register to comment.