[afnog] Suspicious request for IP address space

Tue Mar 8 15:36:44 UTC 2011

On Tue, 8 Mar 2011, Phil Regnauld wrote:

>> Below is the exact request and I am sure there is something dodge about this
>> request. Anybody else in ISP receive this?
>>
>> We are looking for an IP address space of /17 and we would like to lease it
>>> for one complete year. Please quote us the price and if its something in
>>> our
>>> range, We will go ahead and purchase, Along with it do you provide
>>> dedicated
>>> servers and hosting services. Get back to me soon along with the requested
>>> details.
>
> 	Hi Shepherd,
>
> 	Without disclosing the sender of this mail, do you know where it's
> 	originating from, region wise ?  The size looks a bit large to be a
> 	legitimate request.  They might be probing the market to find a LIR
> 	willing to go along with a scam.

Odds are, they're looking for a willing host for a snowshoe spamming 
operation.  If I wanted space for something like that, Afrinic region 
providers would not be my first choice...particularly for the hosting. 
AFAIK, there are numerous LIRs in the RIPE region, particularly Romania 
who are more than happy to lease large blocks of IPv4 to anyone for any 
purpose.

----------------------------------------------------------------------
  Jon Lewis, MCP :)           |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________