On Tue, 2011-03-08 at 10:36 -0500, Jon Lewis wrote: > Odds are, they're looking for a willing host for a snowshoe spamming > operation. If I wanted space for something like that, Afrinic region > providers would not be my first choice...particularly for the > hosting. > AFAIK, there are numerous LIRs in the RIPE region, particularly > Romania > who are more than happy to lease large blocks of IPv4 to anyone for > any > purpose.
Indeed. However, and I too get similar requests (not quite as big, but /24's and /23's etc.) The first thing I do is search for their "name" and domain they're e-mailling from, with the term 'ROKSO' behind it. 50% of the time you find a reference to the domain or their name in Spamhaus' ROKSO list. The other 50% of the time you find someone that isn't in there, but really should be... Tom
