spammers trying to "lease" IP space?

Mailman List Mirror (Read Only)
1

I know this tactic isn't exactly new .. just thought I'd pass this along.

Text below is exact with exception of our ARIN information and ranges
(which any of you could figure out anyway).

Cheers,

Michael Holstein
Cleveland State University

--snip--

Description: ABC Widgets

*Greetings, NOC or IP Admin at (our ARIN NetName)*

2

Hi!

This was mailed to many ISP's the last days.

Bye,
Raymond.

3

Michael -

  We're aware of several parties out there soliciting to 'lease'
  your address space, and it appears that most of them are bulk
  email operations. Given that the nearly inevitable consequence
  is that the blocks in question end up on various anti-spam
  blacklists, I imagine that anyone would have to think very
  carefully about pursuing that option...

  If you truly have more address space than you need, you can always
  return it :-), list it as available on ARIN's specified transfer listing
  service (note - this may result in potential recipients calling you) or
  working with a facilitator to make it available. More info on all of
  these options: https://www.arin.net/resources/transfers/index.html
  and: https://www.arin.net/resources/transfer_listing/listers.html

FYI,
/John

John Curran
President and CEO
ARIN

4

I think this highlights a very important aspect of the paid IP address
transfer process - whomever is buying had better perform some due
diligence on the block. These sorts of rent-a-block-for-SPAM activities
are extremely common. Most of the time, they aren't quite this blatant.

- Dan

From: John Curran [mailto:jcurran@arin.net]
Sent: Wednesday, March 21, 2012 11:05 AM
To: Michael Holstein
Cc: NANOG list
Subject: Re: spammers trying to "lease" IP space?

Michael -

  We're aware of several parties out there soliciting to 'lease'
  your address space, and it appears that most of them are bulk
  email operations. Given that the nearly inevitable consequence
  is that the blocks in question end up on various anti-spam
  blacklists, I imagine that anyone would have to think very
  carefully about pursuing that option...

  If you truly have more address space than you need, you can always
  return it :-), list it as available on ARIN's specified transfer
listing
  service (note - this may result in potential recipients calling you)
or
  working with a facilitator to make it available. More info on all

of

  these options: https://www.arin.net/resources/transfers/index.html
  and: https://www.arin.net/resources/transfer_listing/listers.html

FYI,
/John

John Curran
President and CEO
ARIN

> I know this tactic isn't exactly new .. just thought I'd pass this
along.
>
> Text below is exact with exception of our ARIN information and

ranges

> (which any of you could figure out anyway).
>
> Cheers,
>
> Michael Holstein
> Cleveland State University
>
> --snip--
>
> Description: ABC Widgets
>
> *Greetings, NOC or IP Admin at (our ARIN NetName)*
>
> **
>
> We would like to Lease or even Purchase some of your IPv4 Ranges

like

> (our/16)
>
> "Why do You want to lease our IPs?"
>
>
>
> Very Simply: Our Business is the delivery of Opted In Marketing
Email. The key
> to this business is good stewardship of IP assets to ensure
deliverability, and
> even more importantly; *Sustainability. *Many of our IP leases last
years due to
> our investment in our network before we ever even mail. As a result
it takes
> Several months before a subnet is profitable for us after recouping
our initial
> infrastructure expenses. So to Hit and Run simply does not make good
business
> sense, after all maybe if we are good to our word you will offer us
additional IPs!
>
> **
>
> there are two core requirements in any Major League Mail Campaign ?
>
>
>
> a. _Having a solid list_ with real recipients and records to prove
their Sign up
> is vital to delivery but also to settling any complaints registered
with an ISP.
>
> b. _Using Multiple IP addresses_. If having a good list is a good
defense then
> using Multiple Static IP addresses is a proactive measure. ISPs,
Backbone
> Carriers, Software Makers, and more all use (among other means)
Algorithms to
> shape traffic across their networks and to their clients. Using an
MTA to spread
> our traffic across thousands of IP addresses from then thousands of
'C-Blocks'
> we mitigate the footprint of our traffic originating from any one
network range.
>
>
>
> ?/It should be noted here that this email is a Request for Pricing
(RFP) and its
> recipients have in no way requested it, they have instead been
identified
> through research, and therefore this email should not be thought of
as
> characteristic of our normal mailings./
>
>
>
> Precision Management of Texas (USA) offers on-demand solutions for
brand
> marketers and website promotion chiefly through email marketing.
Currently PM is
> seeking to expand its network capability both overseas and here in
the US with
> the addition of several points of presence (PoP) in geographically
diverse
> locations. Precision Management makes no attempt to conceal identity
or
> intentions as a show of good faith on our part that we will be good
customers
> with an eye on building a relationship beyond this installation. It
should go
> without saying that our use of your network will be totally AUP
Compliant and
> any complaints will be handled in 12 hours or less. We only mail to
Top Level
> Domain's and do no General Internet mailing. Also i want you to be
aware that we
> are an American Company with verifiable references who can attest to
how we
> conduct our email business.
>
> Description:
C:\Users\BLEAUH~1\AppData\Local\Temp\~ed_sb_i\~files\3.gif
>
> Description: Content Image InlinePM seeks to obtain as much

diversity

in the
> allocated IP space as possible, however the most important thing is
the Subnets
> need to have no abuse history.
>
> We can take the IPs via GRE or BGP or other such tunneling solution
to where you
> have them announced. Alternatively we can advertise them ourselves

on