Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Sign In Register

Quick Links


Categories

In this Discussion

› › About Hosting Provider Tanja Roitner
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

About Hosting Provider Tanja Roitner

fayaz90fayaz90 Member
in Help

Hiya
i am looking info about : Tanja Roitner (Seychelles [SC])
Hosting Provider Tanja Roitner (Seychelles [SC])

can somebody help me to findout ? most of my competitor using this isp provider,

let me know

thanks

Comments

  • shelfchairshelfchair Member

    Might be LyraHosting (?)

  • xvpsxvps Member

    What information and for what purpose?

  • fayaz90fayaz90 Member

    to bypass dmca, my competitor is not using Cloudflare i can see his Ip address and isp name, but it is linked with deployment code (d0t) c0m site, i want to reach hosting provider to get one,

  • fayaz90fayaz90 Member

    @shelfchair said:
    Might be LyraHosting (?)

    not sure, let me g0o gle

  • fayaz90fayaz90 Member

    @shelfchair said:
    Might be LyraHosting (?)

    really, it is
    lyra hosting Test IPv4:

    45.141.59.20

    and my compootiter ip
    45.141.56.187
    quite similar

  • shruubshruub Member

    @fayaz90 said:

    @shelfchair said:
    Might be LyraHosting (?)

    really, it is
    lyra hosting Test IPv4:

    45.141.59.20

    and my compootiter ip
    45.141.56.187
    quite similar

    I mean, that doesn't need to mean anything, depending on how big the provider is. In this case, probably true. But normally,

    23.193.11.288 can belong to WOWhosting
    while
    23.183.12.288 could belong to EvenMoreWOWhosting.

    Thanked by 1totally_not_banned
  • totally_not_bannedtotally_not_banned Member
    edited March 7

    Well, i don't really see what's the big fuzz here. Going by whois ipconnect.services is the company you are looking for. Given the Seychelles setup and all this is probably some bulletproof company which won't be very interested in talking to you without a clear incentive though. The actual servers at seem to be in the Netherlands by the way.

    Thanked by 1sasslik
  • matey0matey0 Member
    edited March 7

    @fayaz90 said:

    @shelfchair said:
    Might be LyraHosting (?)

    really, it is
    lyra hosting Test IPv4:

    45.141.59.20

    and my compootiter ip
    45.141.56.187
    quite similar

    Both are part of AS213373 "IP Connect Inc". Can't find much about them on the internet, it's mysterious to say the least.
    It's probably a data center or provider they're reselling. Another Dutch LyraHosting IP (5.178.65.60/vmss78601.lyrahosting.com) is hosted with AS50673 Serverius, a big Dutch data center.

    It reminded me of another provider I saw because their landing page looks similar. AS204615 "IP Fiber Inc." is also registered in the Seychelles and has a similar landing page, however their servers are in Sweden. The kiwifarms uses them.

    I'm curious now, so if someone wants to contact them on the E-Mail they list please let me know what they say :D
    The sites:
    http://ipconnect.services/
    https://ipfib.com/

    Update:
    I dug some more. Both ASNs host a lot of IPTV/Streaming/Piracy/Porn with some clearnet drug shops sprinkled in there. So it's probably some sort of Bulletproof network.
    Also stumbled across AS202425 "IP Volume Inc", again, registered in Seychelles.
    https://www.ipvolume.net/
    Their landing page basically only states that they are totally not a bulletproof host, they even link to their own custom website created for the sole purpose of reporting CSAM on their network.
    https://childporn.report/ (see the abuse contact mail).

    Starting to get a bit worried here. Hope this isn't your competition, OP.

    Thanked by 3Svensken fayaz90 emgh
  • matey0matey0 Member

    A little more digging, OP is not a pedo (thank god).
    His competitor IP is a cdn server of some OF leak site.

    Thanked by 2Svensken emgh
  • SvenskenSvensken Member

    @matey0 said:
    A little more digging, OP is not a pedo (thank god).
    His competitor IP is a cdn server of some OF leak site.

    I commend you for the amount of effort and time you put into this. :D

    Thanked by 2matey0 emgh
  • matey0matey0 Member

    @Svensken said:

    @matey0 said:
    A little more digging, OP is not a pedo (thank god).
    His competitor IP is a cdn server of some OF leak site.

    I commend you for the amount of effort and time you put into this. :D

    Weaponized autism haha
    I ate in between, didn't research them for 2 hours :D

    Thanked by 2Svensken emgh
  • totally_not_bannedtotally_not_banned Member
    edited March 7

    @matey0 said:

    @Svensken said:

    @matey0 said:
    A little more digging, OP is not a pedo (thank god).
    His competitor IP is a cdn server of some OF leak site.

    I commend you for the amount of effort and time you put into this. :D

    Weaponized autism haha
    I ate in between, didn't research them for 2 hours :D

    Well, the real question now is if some white knight will dig up those OF models OP is seemingly hosting content of and snitch to them about it and OP's plans of moving to LyraHost ;)

  • fayaz90fayaz90 Member

    @matey0 said:
    A little more digging, OP is not a pedo (thank god).
    His competitor IP is a cdn server of some OF leak site.

    correct, really a deep dive research.. thanks

    Thanked by 1emgh
  • CalinCalin Member, Patron Provider

    @fayaz90 said: to bypass dmca

    Hello sir , if you like full ignore DMCA services check our deals > https://panel.ihostart.com/index.php?rp=/store/vps-kvm-ssd

    Regards

  • LeviLevi Member

    @matey0 said:

    @fayaz90 said:

    @shelfchair said:
    Might be LyraHosting (?)

    really, it is
    lyra hosting Test IPv4:

    45.141.59.20

    and my compootiter ip
    45.141.56.187
    quite similar

    Both are part of AS213373 "IP Connect Inc". Can't find much about them on the internet, it's mysterious to say the least.
    It's probably a data center or provider they're reselling. Another Dutch LyraHosting IP (5.178.65.60/vmss78601.lyrahosting.com) is hosted with AS50673 Serverius, a big Dutch data center.

    It reminded me of another provider I saw because their landing page looks similar. AS204615 "IP Fiber Inc." is also registered in the Seychelles and has a similar landing page, however their servers are in Sweden. The kiwifarms uses them.

    I'm curious now, so if someone wants to contact them on the E-Mail they list please let me know what they say :D
    The sites:
    http://ipconnect.services/
    https://ipfib.com/

    Update:
    I dug some more. Both ASNs host a lot of IPTV/Streaming/Piracy/Porn with some clearnet drug shops sprinkled in there. So it's probably some sort of Bulletproof network.
    Also stumbled across AS202425 "IP Volume Inc", again, registered in Seychelles.
    https://www.ipvolume.net/
    Their landing page basically only states that they are totally not a bulletproof host, they even link to their own custom website created for the sole purpose of reporting CSAM on their network.
    https://childporn.report/ (see the abuse contact mail).

    Starting to get a bit worried here. Hope this isn't your competition, OP.

    I like to read good, honest digs. Something magical is happening when human dedicate his time to retrieve information about shady stuff.

    Thanked by 3fayaz90 shruub jugganuts
  • fayaz90fayaz90 Member

    @Levi said:

    @matey0 said:

    @fayaz90 said:

    @shelfchair said:
    Might be LyraHosting (?)

    really, it is
    lyra hosting Test IPv4:

    45.141.59.20

    and my compootiter ip
    45.141.56.187
    quite similar

    Both are part of AS213373 "IP Connect Inc". Can't find much about them on the internet, it's mysterious to say the least.
    It's probably a data center or provider they're reselling. Another Dutch LyraHosting IP (5.178.65.60/vmss78601.lyrahosting.com) is hosted with AS50673 Serverius, a big Dutch data center.

    It reminded me of another provider I saw because their landing page looks similar. AS204615 "IP Fiber Inc." is also registered in the Seychelles and has a similar landing page, however their servers are in Sweden. The kiwifarms uses them.

    I'm curious now, so if someone wants to contact them on the E-Mail they list please let me know what they say :D
    The sites:
    http://ipconnect.services/
    https://ipfib.com/

    Update:
    I dug some more. Both ASNs host a lot of IPTV/Streaming/Piracy/Porn with some clearnet drug shops sprinkled in there. So it's probably some sort of Bulletproof network.
    Also stumbled across AS202425 "IP Volume Inc", again, registered in Seychelles.
    https://www.ipvolume.net/
    Their landing page basically only states that they are totally not a bulletproof host, they even link to their own custom website created for the sole purpose of reporting CSAM on their network.
    https://childporn.report/ (see the abuse contact mail).

    Starting to get a bit worried here. Hope this isn't your competition, OP.

    I like to read good, honest digs. Something magical is happening when human dedicate his time to retrieve information about shady stuff.

    yes, he did good research

    Thanked by 1emgh
  • fayaz90fayaz90 Member

    @DP remove this thread, plz

  • totally_not_bannedtotally_not_banned Member

    @fayaz90 said:
    @DP remove this thread, plz

    You must be new(er than me) here.

    Thanked by 1jsg
  • shruubshruub Member

    @fayaz90 said:
    @DP remove this thread, plz

    Read here. It sucks, but it ain't the LowEndAdmin's fault.

  • wiggywiggy Member, Host Rep

    intresting post, tanja is the owner/billing person at deploymentcode they run tenantos.com as well.

  • matey0matey0 Member

    @wiggy said:
    intresting post, tanja is the owner/billing person at deploymentcode they run tenantos.com as well.

    Seems unrelated? Maybe a different person.
    My guess is that the people behind those ASNs are probably the Ecatel guys. They have a long-lasting reputation of hosting questionable stuff:

    The New York Times published an article in 2019 describing the company, under the name Novogara, as attractive to child pornography.[11] In 2020, the Ministry of Justice and Security published a ranking of Dutch hosting companies with the most child pornography on the servers. With 4,500 out of 175,000 verified reports, IP Volume was in second place. Unlike number one in the ranking, IP Volume was accused of deliberately countering the removal of child pornography.[12]

    With "IP Volume Inc." the link is pretty clear https://nl.wikipedia.org/wiki/IP_Volume (you'll have to translate it). The other ones not so much. But given that they all share similar names, are registered in Seychelles, have non-descriptive landing pages and host questionable material it seems likely.

    It's interesting that "IP Fiber Inc." has servers in Sweden, Ecatel only operated out of the Netherlands afaik.

    Anyways, it's not that they only host bad stuff. They are also used by legitimate network scanning companies for example because a lot of other providers have issues with that.

  • packetnextpacketnext Member

    About IP Connect INC
    at.dpl-1 Announced Allocations
    Prefixes

    • Prefix Description Origin ASN
      [Has a valid RPKI cert] 45.141.56.0/24 IP Connect Inc AS213373 - IP Connect Inc
      [Matches a trusted IRR source] 45.141.57.0/24 LowHosting Services AS212508 - Lowhosting services of Davide Gennari
      [Has a valid RPKI cert] 45.141.58.0/24 IP Connect Inc AS213373 - IP Connect Inc
      [Has a valid RPKI cert] 45.141.59.0/24 IP Connect Inc AS213373 - IP Connect Inc

    mnt-by: mnt-at-dpl-1-1
    mnt-by: serverius-mnt
    They started with serverius as uplink.

    https://urlscan.io/asn/AS213373 gives a good view of what they are up to.

    As for the IP fiber inc
    https://urlscan.io/asn/AS204615
    Pharmacy and movie streaming

    They are connected, as a customer, to Ip volume/Fiberxpress which is a company of Novogara/Ip volume owners, see https://bgp.tools/rir-owner/sc.ipfib
    sc.ipfib Announced Allocations
    Prefixes

    • Prefix Description Origin ASN
      [Has a valid RPKI cert] 185.225.112.0/24 - AS57717 - FiberXpress BV
      [Has a valid RPKI cert] 185.225.113.0/24 - AS204615 - IP Fiber Inc
      [Has a valid RPKI cert] 185.225.114.0/23 - AS204615 - IP Fiber Inc
      [Has a valid RPKI cert] 185.237.100.0/24 IP Fiber Inc AS57717 - FiberXpress BV

    In this case, meaning that they use the IP fiber inc ASN with Obenework and Digital Suisse as uplinks,

    And Fiberxpress announcing their 185.225.112.0/24 and 185.237.100.0/24.
    FERNANDES, Gualter
    sny-solutions-unipessoal-lda which used to have a LLP in UK
    185.225.112.8 web.sny.pt
    185.225.112.9 web.sny.pt
    185.225.112.10 web.sny.pt
    185.225.112.11 web.sny.pt

Sign In or Register to comment.