IPv4 squatters on the move again?

Jeffrey Lyon jeffrey.lyon at blacklotus.net
Tue Sep 7 08:51:58 UTC 2010

We see this all the time, usually it involves either a /20 or multiple-/xx
that change every month.


On Tue, Sep 7, 2010 at 12:54 PM, Tero Toikkanen <Tero.Toikkanen at nebula.fi>wrote:

> Anyone hear of the SundownGroup?
> On Thursday we received an interesting RFQ from them and suspect their
> intentions for requesting an IP assignment isn't exactly what they state. We
> have already turned them down, but thought others might be interested in
> their activities as well. RIPE NCC has also been notified of this.
> In brief they wanted to buy colo form us: "P4 single core @ 2 Ghz, 1 GB
> RAM, 60 GB HD, Linux CentOS 5x.x, 10 Mbps bandwidth. A single /21 or /20 net
> block of IP Adresses"
> Their reason for requesting such a large address block was "As we are
> currently launching our WholesaleVOIP operation we are in desperate need of
> this IP space as part of our ARIN process we will need these ranges SWIPd to
> us and we will in turn renumber with ARIN and return the netblocks to you as
> soon as ours are allocated and routed."
> Interesting tidbits about the company we and the networking community have
> already found out:
> Compare http://sundowngroup.com/ and http://www.edgecast.com/ (Edgecast
> has been notified).
> The contact address is the same as National University Nevada (nu.edu):
> Sundown Capital Management LLC
> 2850 Horizon Ridge Parkway
> Henderson, Nevada 89052
> United States of America
> They also have virtually no Internet presence (
> http://www.google.com/search?q=%22Sundown+Capital+Management%22)
> The first result shows them as a franchicing company with contact address
> in California:
> http://www.scribd.com/doc/14385124/QFA-Unit-Final-PDF-File-of-32709-FDD-With-Exhibits
> I'd say this case is pretty obvious...
> With Kind Regards,
> --
> Tero Toikkanen
> Nebula Oy Internet Services


Jeffrey Lyon, Leadership Team
jeffrey.lyon at blacklotus.net | http://www.blacklotus.net
Black Lotus Communications - AS32421
First and Leading in DDoS Protection Solutions

More information about the NANOG mailing list