[afnog] Suspicious request for IP address space
tom at ninjabadger.net
Tue Mar 8 09:52:26 CST 2011
On Tue, 2011-03-08 at 10:36 -0500, Jon Lewis wrote:
> Odds are, they're looking for a willing host for a snowshoe spamming
> operation. If I wanted space for something like that, Afrinic region
> providers would not be my first choice...particularly for the
> AFAIK, there are numerous LIRs in the RIPE region, particularly
> who are more than happy to lease large blocks of IPv4 to anyone for
Indeed. However, and I too get similar requests (not quite as big,
but /24's and /23's etc.)
The first thing I do is search for their "name" and domain they're
e-mailling from, with the term 'ROKSO' behind it.
50% of the time you find a reference to the domain or their name in
Spamhaus' ROKSO list.
The other 50% of the time you find someone that isn't in there, but
really should be...
More information about the NANOG