[ev1]

Nah this is all just fake whois entries announced elsewhere. Has no connection to IN outside of that.

[elij]

interesting that they're having so much success with false RIPE/ARIN entries. Proper geolocation (as in with visiblity of most T1s) would trivially identify the origin of traffic.

[ev1]

There is less success than you would expect, but it's mostly just there to tick a box, not really used much.