New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
Might be LyraHosting (?)
What information and for what purpose?
to bypass dmca, my competitor is not using Cloudflare i can see his Ip address and isp name, but it is linked with deployment code (d0t) c0m site, i want to reach hosting provider to get one,
not sure, let me g0o gle
really, it is
lyra hosting Test IPv4:
45.141.59.20
and my compootiter ip
45.141.56.187
quite similar
I mean, that doesn't need to mean anything, depending on how big the provider is. In this case, probably true. But normally,
23.193.11.288 can belong to WOWhosting
while
23.183.12.288 could belong to EvenMoreWOWhosting.
Well, i don't really see what's the big fuzz here. Going by whois ipconnect.services is the company you are looking for. Given the Seychelles setup and all this is probably some bulletproof company which won't be very interested in talking to you without a clear incentive though. The actual servers at seem to be in the Netherlands by the way.
Both are part of AS213373 "IP Connect Inc". Can't find much about them on the internet, it's mysterious to say the least.
It's probably a data center or provider they're reselling. Another Dutch LyraHosting IP (5.178.65.60/vmss78601.lyrahosting.com) is hosted with AS50673 Serverius, a big Dutch data center.
It reminded me of another provider I saw because their landing page looks similar. AS204615 "IP Fiber Inc." is also registered in the Seychelles and has a similar landing page, however their servers are in Sweden. The kiwifarms uses them.
I'm curious now, so if someone wants to contact them on the E-Mail they list please let me know what they say
The sites:
http://ipconnect.services/
https://ipfib.com/
Update:
I dug some more. Both ASNs host a lot of IPTV/Streaming/Piracy/Porn with some clearnet drug shops sprinkled in there. So it's probably some sort of Bulletproof network.
Also stumbled across AS202425 "IP Volume Inc", again, registered in Seychelles.
https://www.ipvolume.net/
Their landing page basically only states that they are totally not a bulletproof host, they even link to their own custom website created for the sole purpose of reporting CSAM on their network.
https://childporn.report/ (see the abuse contact mail).
Starting to get a bit worried here. Hope this isn't your competition, OP.
A little more digging, OP is not a pedo (thank god).
His competitor IP is a cdn server of some OF leak site.
I commend you for the amount of effort and time you put into this.
Weaponized autism haha
I ate in between, didn't research them for 2 hours
Well, the real question now is if some white knight will dig up those OF models OP is seemingly hosting content of and snitch to them about it and OP's plans of moving to LyraHost
correct, really a deep dive research.. thanks
Hello sir , if you like full ignore DMCA services check our deals > https://panel.ihostart.com/index.php?rp=/store/vps-kvm-ssd
Regards
I like to read good, honest digs. Something magical is happening when human dedicate his time to retrieve information about shady stuff.
yes, he did good research
@DP remove this thread, plz
You must be new(er than me) here.
Read here. It sucks, but it ain't the LowEndAdmin's fault.
intresting post, tanja is the owner/billing person at deploymentcode they run tenantos.com as well.
Seems unrelated? Maybe a different person.
My guess is that the people behind those ASNs are probably the Ecatel guys. They have a long-lasting reputation of hosting questionable stuff:
With "IP Volume Inc." the link is pretty clear https://nl.wikipedia.org/wiki/IP_Volume (you'll have to translate it). The other ones not so much. But given that they all share similar names, are registered in Seychelles, have non-descriptive landing pages and host questionable material it seems likely.
It's interesting that "IP Fiber Inc." has servers in Sweden, Ecatel only operated out of the Netherlands afaik.
Anyways, it's not that they only host bad stuff. They are also used by legitimate network scanning companies for example because a lot of other providers have issues with that.
About IP Connect INC
at.dpl-1 Announced Allocations
Prefixes
[Has a valid RPKI cert] 45.141.56.0/24 IP Connect Inc AS213373 - IP Connect Inc
[Matches a trusted IRR source] 45.141.57.0/24 LowHosting Services AS212508 - Lowhosting services of Davide Gennari
[Has a valid RPKI cert] 45.141.58.0/24 IP Connect Inc AS213373 - IP Connect Inc
[Has a valid RPKI cert] 45.141.59.0/24 IP Connect Inc AS213373 - IP Connect Inc
mnt-by: mnt-at-dpl-1-1
mnt-by: serverius-mnt
They started with serverius as uplink.
https://urlscan.io/asn/AS213373 gives a good view of what they are up to.
As for the IP fiber inc
https://urlscan.io/asn/AS204615
Pharmacy and movie streaming
They are connected, as a customer, to Ip volume/Fiberxpress which is a company of Novogara/Ip volume owners, see https://bgp.tools/rir-owner/sc.ipfib
sc.ipfib Announced Allocations
Prefixes
[Has a valid RPKI cert] 185.225.112.0/24 - AS57717 - FiberXpress BV
[Has a valid RPKI cert] 185.225.113.0/24 - AS204615 - IP Fiber Inc
[Has a valid RPKI cert] 185.225.114.0/23 - AS204615 - IP Fiber Inc
[Has a valid RPKI cert] 185.237.100.0/24 IP Fiber Inc AS57717 - FiberXpress BV
In this case, meaning that they use the IP fiber inc ASN with Obenework and Digital Suisse as uplinks,
And Fiberxpress announcing their 185.225.112.0/24 and 185.237.100.0/24.
FERNANDES, Gualter
sny-solutions-unipessoal-lda which used to have a LLP in UK
185.225.112.8 web.sny.pt
185.225.112.9 web.sny.pt
185.225.112.10 web.sny.pt
185.225.112.11 web.sny.pt