SPAM from other LIRs to db-contacts regarding resource sale
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Cheerio AA-WG, while we all are familiar with the joys of receiving spam on our whois-db contact mail addresses, this one below sets a new low. Unsolicited mail from another LIR to one of my whois-db contacts advertising IPv4 address space sale, underlining their legitimacy by bragging with their LIR status. afaik there are currently no effective sanctions provided for such behaviour. I am a bit dumbfounded by the chutzpah they display and don't really know how to approach this. I'm sure that I am not the only one who has received one of these. How do we - as a community - want to handle cases like these? - - Michael Begin forwarded message: Date: Sun, 19 Apr 2015 02:02:21 +0300 From: "Aleksey Bulgakov" <aleksey@###> To: "ripe" <ripe@###> Subject: IPv4 allocation offer ePochta Mailer Email Template Hello. As you know, the RIPE NCC can only provide one final /22 to your LIR because it is currently allocating address space from the last /8 of IPv4 addresses. However the RIPE NCC allows to get IPv4 addresses from other LIR. Our company has LIR status and ready to transfer such addresses to your LIR. This operation is approved by the RIPE NCC and absolutely legal. The blocks are absolutely clean, haven't been in usage, are absent in any blacklist. If you have any questions, don't hesitate to ask me. Simply answer to this letter and you will get the answer shortly. - -- Kind regards, Aleksey Bulgakov Chief Director FastTelecom Tel. +7 926 690-87-29 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCgAGBQJVNLuxAAoJEB+r0I6sHZXyYlkH+wV+sxqbYWyNT7iZSMG4iozM w60C4FpavwcYeoZUX2SBDwmcixgHiXr/01zga+iN18jp8q7Fl1LxmJvdfhGYY50P 6Sv9F7/oIypNjlB9RvBEUZHczJiZXGrNjJE98sI2HslDeamz3YRkmoaXSil524RT V7uZfASkpfpok7BbPiIqL0YndIibC7yIZfu17yLk48k6LSGRs9dqg4xJsaz8wMIJ 26V98PlCmaCw4utVPUxMttxfz+yEL1rGzNqcV8FYQBNq3wjVqlmA4lnfkKPjTTKr Nx4FO6HvZZoSO3EeWXURs6r7P+KtoI1e0Kx9Vhp7QTqGI7gZ6F6SN/lqGQUWU3I= =jpdO -----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 * Michael Horn <nibbler@nibbler.de> [2015-04-20 10:54]:
Cheerio AA-WG,
while we all are familiar with the joys of receiving spam on our whois-db contact mail addresses, this one below sets a new low. Unsolicited mail from another LIR to one of my whois-db contacts advertising IPv4 address space sale, underlining their legitimacy by bragging with their LIR status.
afaik there are currently no effective sanctions provided for such behaviour. I am a bit dumbfounded by the chutzpah they display and don't really know how to approach this. I'm sure that I am not the only one who has received one of these. How do we - as a community - want to handle cases like these?
- Michael
Begin forwarded message:
Date: Sun, 19 Apr 2015 02:02:21 +0300 From: "Aleksey Bulgakov" <aleksey@###> To: "ripe" <ripe@###> Subject: IPv4 allocation offer
Hello, I received the same SPAM today, from the same person. Ironically this person is currently arguing to stop a proposal over in the address-policy WG that is trying to impede exactly this behaviour. As that person is a LIR/RIPE NCC member I think that this could be a breach of the RIPE NCC LIR terms and I would like the RIPE NCC to investigate this. Regards Sebastian - -- GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQF6BAEBCgBkBQJVPdjlMxSAAAAAABUAFXBrYS1hZGRyZXNzQGdudXBnLm9yZ3Nl YmFzdGlhbkBrYXJvdHRlLm9yZykaaHR0cHM6Ly93d3cua2Fyb3R0ZS5vcmcvcGdw LXBvbGljeS5zaHRtbAAKCRBYotlKk6C5zkcHCADT/aEvmwd8xChfu2QUkK8FDnIG aKR51y89HPu08YgUgVEqE6xs+ew0jVOQb4/vXzjMiVr9lD38QiQ2XG+jlGzML8E3 SsNJ8dlntseqeRm85GVh5guo1ADmQaEUjHJ1oC+CpWJyNUBarUodcg3UxuzYkyIM JNkYGFO5su6s8pJyhzkIcsOfGo5uZYgDpW4tHgrX2Re40wjFu9BP8eYQENhr1qpt 1ZsKJojmvdVNFC5NXZUQWuoWpb/lFmnBM9l+rScMabN2R70xS+JO6a//Qq34zS+w dxr4Y3uPRmJpUVN7diV2lPfRjpKkW1MofgbJ8e1FLm4+Ap6w905BlOMJ4CCF =X5bk -----END PGP SIGNATURE-----
Hi, On 26/04/15 23:36, Sebastian Wiesinger wrote: [snip]
Hello,
I received the same SPAM today, from the same person. I got it as well :) Ironically this person is currently arguing to stop a proposal over in the address-policy WG that is trying to impede exactly this behaviour. I actually made him an offer :)) A very low one, but still, an offer.
As that person is a LIR/RIPE NCC member I think that this could be a breach of the RIPE NCC LIR terms and I would like the RIPE NCC to investigate this. For the RIPE NCC to even start anything, a proper report must be filled in:
https://www.ripe.net/report-form I'd say you could report a violation of the RIPE DB Terms and Conditions. Although.. it is very difficult to prove it. regards, Elvis
Regards
Sebastian
- -- GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
iQF6BAEBCgBkBQJVPdjlMxSAAAAAABUAFXBrYS1hZGRyZXNzQGdudXBnLm9yZ3Nl YmFzdGlhbkBrYXJvdHRlLm9yZykaaHR0cHM6Ly93d3cua2Fyb3R0ZS5vcmcvcGdw LXBvbGljeS5zaHRtbAAKCRBYotlKk6C5zkcHCADT/aEvmwd8xChfu2QUkK8FDnIG aKR51y89HPu08YgUgVEqE6xs+ew0jVOQb4/vXzjMiVr9lD38QiQ2XG+jlGzML8E3 SsNJ8dlntseqeRm85GVh5guo1ADmQaEUjHJ1oC+CpWJyNUBarUodcg3UxuzYkyIM JNkYGFO5su6s8pJyhzkIcsOfGo5uZYgDpW4tHgrX2Re40wjFu9BP8eYQENhr1qpt 1ZsKJojmvdVNFC5NXZUQWuoWpb/lFmnBM9l+rScMabN2R70xS+JO6a//Qq34zS+w dxr4Y3uPRmJpUVN7diV2lPfRjpKkW1MofgbJ8e1FLm4+Ap6w905BlOMJ4CCF =X5bk -----END PGP SIGNATURE-----
* Elvis Daniel Velea <elvis@velea.eu> [2015-04-27 09:54]:
For the RIPE NCC to even start anything, a proper report must be filled in:
https://www.ripe.net/report-form
I'd say you could report a violation of the RIPE DB Terms and Conditions. Although.. it is very difficult to prove it.
Hello, I already contacted the NCC about this. In our case it's not so difficult to prove, the address is only used in the database, it is not used in outgoing communication. If it is not from the database it would be quite interested to hear where he got it. :) My guess is he harvested the last /8 for all members who got their /22. Regards Sebastian -- GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant
On Mon, 27 Apr 2015, Sebastian Wiesinger wrote:
* Elvis Daniel Velea <elvis@velea.eu> [2015-04-27 09:54]:
For the RIPE NCC to even start anything, a proper report must be filled in:
https://www.ripe.net/report-form
I'd say you could report a violation of the RIPE DB Terms and Conditions. Although.. it is very difficult to prove it.
Hello,
I already contacted the NCC about this. In our case it's not so difficult to prove, the address is only used in the database, it is not used in outgoing communication. If it is not from the database it would be quite interested to hear where he got it. :)
My guess is he harvested the last /8 for all members who got their /22.
You are not the only one to receive them, I can assure you. Cheers, Daniel _________________________________________________________________________________ Daniel Stolpe Tel: 08 - 688 11 81 stolpe@resilans.se Resilans AB Fax: 08 - 55 00 21 63 http://www.resilans.se/ Box 45 094 556741-1193 104 30 Stockholm
I guess he just sent to everybody... On Apr 27, 2015 10:12 AM, "Daniel Stolpe" <stolpe@resilans.se> wrote:
On Mon, 27 Apr 2015, Sebastian Wiesinger wrote:
* Elvis Daniel Velea <elvis@velea.eu> [2015-04-27 09:54]:
For the RIPE NCC to even start anything, a proper report must be filled in:
https://www.ripe.net/report-form
I'd say you could report a violation of the RIPE DB Terms and Conditions. Although.. it is very difficult to prove it.
Hello,
I already contacted the NCC about this. In our case it's not so difficult to prove, the address is only used in the database, it is not used in outgoing communication. If it is not from the database it would be quite interested to hear where he got it. :)
My guess is he harvested the last /8 for all members who got their /22.
You are not the only one to receive them, I can assure you.
Cheers,
Daniel
_________________________________________________________________________________ Daniel Stolpe Tel: 08 - 688 11 81 stolpe@resilans.se Resilans AB Fax: 08 - 55 00 21 63 http://www.resilans.se/ Box 45 094 556741-1193 104 30 Stockholm
participants (5)
-
Daniel Stolpe -
Elvis Daniel Velea -
Lu Heng -
Michael Horn -
Sebastian Wiesinger