I was doing some weekend research on expanding our probe network. In that process, I was looking into ASNs with a vast quantity of hosted domains and came across AS206834.
This ASN has nearly 1.7 million hosted domains. We do not have a server in that ASN. Moreover, for a massive ASN, it is a stub_as with one upstream and no downstream. This is pretty unusual if it was a cloud service provider…
Heading to teaminternet.com, it looked to me less of a cloud provider and more like a domain name registry provider.
I used the example IP address, 104.247.81.50 IP Address Details - IPinfo.io and the hosted domains looked quite weird.
Trying to visit a website from that list, I was hit spam redirection:
I tried a few of the websites and was getting hit with either parked domains or spam website redirection to random youtube channels, betting sites etc.
I looked up the domain information for the website: dpstream.ws (dpstream.ws) - host.io
The NS records point to parkingcrew.net, which is a domain parking service.
Going to parkingcrew.com, I saw that this company is owned by TeamInternet, the owner of the ASN itself.
Now, to validate this, I look up some of our internal data for the ASN, which aggregates DNS records by IP address.
Upon a cursory glance, it appears that the entire ASN is dedicated to providing support for parked domains.
That’s it. Team Internet is a well-known major company that I was not aware of, but it was interesting to learn about them.