John Kristoff1d ago

You might not like this one, I believe this is an AI training org and has been spreading IP4 prefixes around to be announced and originated by big broadband providers.

https://social.bgp.tools/@transfers/statuses/01KN7R98TTMGET2E47SCND67FJ

Post by IP/ASN Transfers, @[email protected]

"IBM" (ARIN) transferred: 9.151.0.0/16 (Taken from 9.150.0.0/14), 9.232.0.0/15, 9.237.0.0/16 (Taken from 9.236.0.0/13), 9.249.0.0/16 (Taken from 9.249.0.0 - 9.255.255.255) to "Aviation RE LLC" (RIPE) (Estimated Market Value: $3.34 M)

bgp.tools
Show threadRootWyrm 🇺🇦

@jtk @cR0w I can confirm "AVIATION RE LLC" is a long-standing and well documented source of all KINDS of abuse piggybacking on various US MSOs. It would not surprise me at all if they were involved in scraping; they have a history of being involved in spamming, mass phishing, and IPs engaged in various brute force attacks.

They also hide behind MSOs, so you can't ASN block.

Apr 2 at 8:26pmWeb
Show threadcR0w 🏴‍☠️🫈🫍1d ago
@rootwyrm @jtk Yep. I'll post the prefixes shortly for those interested in blocking them but like you said, it's cat and mouse with groups like that.
Show threadRootWyrm 🇺🇦1d ago

@cR0w @jtk especially as the MSOs refuse to stop doing business with them, even though they know full fucking well what is going on and has been going on for years.

We used to basically fucking disconnect ISPs that did shit like this.