Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Questionable Business from AIO IPV4
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Questionable Business from AIO IPV4

This discussion was created from comments split from: THE AIO IP Related Thread. (IPv4 + IPv6 + ASN).
«1

Comments

  • @ReMoghadam said:
    Hello,

    RIPE NCC : 50 USD/Month

    We Have Two /24 IPv4 , Each one 50 USD per Month and /40 IPv6 100 USD Per Month available for rent from RIPE.

    Terms :
    0. All of RIPE objects will be change and update for your usage.
    1. Minimum rent for 3 months.
    2. Pay transfer with Bitcoin.
    3. we Provide ASN include IPv4/IPv6 without extra charge.
    4. LOA will be provided less that 4 Hour.

    IPv4 :
    185.137.111.0/24 > 50 USD / Month
    103.231.139.0/24 > 50 USD / Month

    IPv6 :
    2a0a:40c0::/29 > 100 USD / Month

    ASN :
    AS42869
    AS43233

    More Information :

    Company Name : Fara Negar Pardaz Noor Khuzestan Co.JSP

    RIPE NCC Reg.ID : ir.Faranegar

    Address : Unit 9 , 5th Floor , Kasra Building , Kianpars , Ahvaz , IRAN

    Phone : +98 916 32 000 56

    Website : www.FaraISP.ir

    Email : [email protected]

    Responsible Person : Reza Moghadam

    Hello,

    Update !

    New RIPE NCC IPv4 /20 Ranges for sale with cheap prices.

    *** 7 USD Per IP ***

    IPv4 Prefixes are > 213.176.20.x

  • Hi, everyone, and thank you to all for those great offers.

    I wanted to buy a /24 from "ReMoghadam" who unfortunately scammed me 100$ in Bitcoin.

    First, his prices increased from 50$ / month to 100$ / month, I said whatever, let's buy it. Chat went over Telegram after sending an email to "[email protected]" where he replied with "Yes , contact me at telegram +98 930 370 2793".

    I honestly don't care, scammers are everywhere, but honestly didn't expect it when buying IPs. Just hoping that no one else get's scammed by him.

    ASN:
    AS42869
    AS43233

    Do you guys know if its worth it to send an email to Ripe? Probably not, right? I am wasting time.

    Thanks,
    Finn

    Thanked by 1malek
  • FranciscoFrancisco Top Host, Host Rep, Veteran

    @finndev said:
    Hi, everyone, and thank you to all for those great offers.

    I wanted to buy a /24 from "ReMoghadam" who unfortunately scammed me 100$ in Bitcoin.

    First, his prices increased from 50$ / month to 100$ / month, I said whatever, let's buy it. Chat went over Telegram after sending an email to "[email protected]" where he replied with "Yes , contact me at telegram +98 930 370 2793".

    I honestly don't care, scammers are everywhere, but honestly didn't expect it when buying IPs. Just hoping that no one else get's scammed by him.

    ASN:
    AS42869
    AS43233

    Do you guys know if its worth it to send an email to Ripe? Probably not, right? I am wasting time.

    Thanks,
    Finn

    Check the ownership of the block he mentioned:

        "isp": "Iranian Research Organization Science & Technology",
        "org": "Iranian Research Organization Science & Technology",
        "as": "AS15611 Iranian Research Organization for Science & Technology",
    

    Pretty obvious it's jacked/a scam.

    Francisco

  • hzrhzr Member
    edited April 2019

    Francisco said: Pretty obvious it's jacked/a scam.

    Half of IROST's space is being rented out to CN/HK/RU/whatever, weirdly. See 213.176.44.0, 213.176.32.0, 62.60.160.0, etc [?]

    New too:

    mnt-by: IROST-MNT
    mnt-by: mnt-hk-ipv4superhub-1
    mnt-lower: mnt-hk-ipv4superhub-1
    mnt-domains: mnt-hk-ipv4superhub-1
    mnt-routes: mnt-hk-ipv4superhub-1
    created: 2019-04-29T11:35:59Z
    last-modified: 2019-04-29T11:41:44Z

    :thinking:

  • JackHJackH Member
    edited April 2019

    Thanks for the heads up @finndev @Francisco @hzr, I'll look into it. Sorry to hear that you missed out on $100!

    Thanked by 1FHR
  • Hello, we actually have 2 subnet from "ReMoghadam", our entire infrastructure is totally down......

  • FranciscoFrancisco Top Host, Host Rep, Veteran

    @Nicola said:
    Hello, we actually have 2 subnet from "ReMoghadam", our entire infrastructure is totally down......

    Can you share the subnets so we can do lookups?

    Francisco

  • 103.231.139.0/22
    185.137.111.0/22

    our subnet are inside these 2 /22s

  • Is it not possible to contact Ripe regarding this and get his partnership removed?

  • rickey318rickey318 Member, Host Rep

    Now I see I wasn’t the only one. After leasing a /24 from @ReMoghadam a week before the month was up. The subnet was removed from my RIPE account and he claim that he had been receiving spam noticed but couldn’t show any emails and the subnet wasn’t even being announced on my asn at the times he claim. Then wanted to try and up the price with a 12 month contract. I passed on that and go thing I did. Maybe need to look into his LET account.

  • ReMoghadamReMoghadam Member
    edited April 2019

    Hi Guys,

    First of all I know both accounts @Nicola and @Finndev are a same person, and I know what he want spammed about me here and their lies very basic and childish.

    @finndev said:
    Hi, everyone, and thank you to all for those great offers.

    I wanted to buy a /24 from "ReMoghadam" who unfortunately scammed me 100$ in Bitcoin.

    First, his prices increased from 50$ / month to 100$ / month, I said whatever, let's buy it. Chat went over Telegram after sending an email to "[email protected]" where he replied with "Yes , contact me at telegram +98 930 370 2793".

    I honestly don't care, scammers are everywhere, but honestly didn't expect it when buying IPs. Just hoping that no one else get's scammed by him.

    ASN:
    AS42869
    AS43233

    Do you guys know if its worth it to send an email to Ripe? Probably not, right? I am wasting time.

    Thanks,
    Finn

    Mr Fake , you wanted to buy a /24 and in start I increased from 50$ to 100$ ?

    did you think about your Stupid jokes ?

    a /24 has 256 IPs , so if imagin 100$ for sell /24 , it will be 0.39 USD per IP.

    however if you check my last post here , you can see my monthly rent offer is 60$ , not 50 USD and at least for 3 months. so if we wanna to accept you you have to paid 180 USD for start our proceess.

    so I think everyone can handle this case.

    please provide your payments and ...

  • @rickey318 said:
    Now I see I wasn’t the only one. After leasing a /24 from @ReMoghadam a week before the month was up. The subnet was removed from my RIPE account and he claim that he had been receiving spam noticed but couldn’t show any emails and the subnet wasn’t even being announced on my asn at the times he claim. Then wanted to try and up the price with a 12 month contract. I passed on that and go thing I did. Maybe need to look into his LET account.

    Can you tell me please for how long you paid payment and how many ?

    how long you get my IP ?

    whats happened to our contract closed ?

    I think you can provide your proof and our conversation here.

  • @Nicola said:
    Hello, we actually have 2 subnet from "ReMoghadam", our entire infrastructure is totally down......

    I'm sending email to you to start conversation about our contracts , then you can come here and tell about strory here to everyone.

    1. I rent my IPs to you , but you rented my IPs to a person ?
    2. Why you are using my ips for spamm and abuse ?
    3. Why you changed information of my IP in RIPE to someone else ?

    Everyone please check My IPs in blacklists :

    https://www.talosintelligence.com/reputation_center/lookup?search=185.137.111.0/24

    https://www.talosintelligence.com/reputation_center/lookup?search=103.231.139.0/24

    this week I receved many emails about smap and abuse , Botnet , ddos to Netherland , Iran , US , Germany.

  • Unfortunately we decide to rent our IPs with cheap prices ( 60$ ) , but some IP Brokers such above , rent our IPs with 60$ and then they rent our IPs to thirdparties and someone else with at least 200$.

    Then , they think are smart

  • FoulFoul Member

    I may want to point out that @finndev is an administrator at a forum that participates in illegal things =]

    Thanked by 1finndev
  • @ReMoghadam said:

    @Nicola said:
    Hello, we actually have 2 subnet from "ReMoghadam", our entire infrastructure is totally down......

    I'm sending email to you to start conversation about our contracts , then you can come here and tell about strory here to everyone.

    1. I rent my IPs to you , but you rented my IPs to a person ?
    2. Why you are using my ips for spamm and abuse ?
    3. Why you changed information of my IP in RIPE to someone else ?

    Everyone please check My IPs in blacklists :

    https://www.talosintelligence.com/reputation_center/lookup?search=185.137.111.0/24

    https://www.talosintelligence.com/reputation_center/lookup?search=103.231.139.0/24

    this week I receved many emails about smap and abuse , Botnet , ddos to Netherland , Iran , US , Germany.

    Every abuse ips has been suspended after customer was not going to deal with them in max 24/48 hours.
    What you did was just change our route information and send more than 130 vps's down, now this user is accusing us to re-rent to other customer? YES and ? What? We have datacenter with many customer and we sell ips to customer which ant more ips, whats thw problem? Guys this user is scamming people.

  • And he also blackmailed us asking for 200 USD for ips.

  • finndevfinndev Member
    edited April 2019

    Possible to get his Ripe membership revoked?

  • feezioxiiifeezioxiii Member, Host Rep
    edited April 2019

    @finndev said:

    Possible to get his Ripe membership revoked?

    Nah, as you are his customer not RIPE so they don't care (or even need to) at all as long as ReMoghadam follow their agreement with RIPE and pay their annual membership fee :(

  • FHRFHR Member, Host Rep
    edited May 2019

    @finndev said:

    Possible to get his Ripe membership revoked?

    The screenshot says "LOA will be be provided less than 4 hour"

    To me that doesn't read like a scam?

    I'm very skeptical about the whole situation. 2 new accounts with no posts suddenly start screaming "scam".

    Truth is probably somewhere in the middle.

  • PieHasBeenEatenPieHasBeenEaten Member, Host Rep

    @ReMoghadam First off have you been drinking? I call your business practices into question. Why don't you provide the proof then to show that you weren't doing anything shady?

  • ReMoghadamReMoghadam Member
    edited May 2019

    Hello all,

    First of all …

    It's so stupid that someone with his or her own Name or Nickname made an account and attempts to scam.

    I'm using my original name [ Nickname Reza Moghadam > ReMoghadam ] , which exists on all social networks ( Facebook , Telegram , Whatsapp , Twitter , Youtube , Instagram , My Website ... ) , can be traced and identified.

    There is usually no place in the world who is a fraudsters, and usually use nicknames to scam like that person ( Nicola Brali > Nicknames @Nicola , @Finndev ).

    ——————

    Second ,

    As I said earlier, this fraudster wants to defame me with two different accounts ( @Nicola , @Finndev )

    Notice the construction date and the first post of his account ( @Finndev )

    Also, according to his own words, he transferred $ 100 to me and I scamped him, but by email to me it's obvious that there are two accounts of one person and they are talking about a $ 100 refund.

    @Finndev said :

    I wanted to buy a /24 from "ReMoghadam" who unfortunately scammed me 100$ in Bitcoin.
    First, his prices increased from 50$ / month to 100$ / month, I said whatever, let's buy it.

    Please note the following image (email) and its content text (it used to say $ 100 for the first time and now with your own email)

    @Nicola are telling about that 100 USD

    https://pasteboard.co/IcPDPzm.png

    in here i'm sure you find these two account are belong a person ( Nicola Brali )

    and one of big lies is , he decide to buy my IPs 50 USD and then 100 USD , Buy 256 IP with 50 or 100 USD ?

    —————-

    As I said in previous posts

    He intended to rent two IPs ( 185.137.111.0/24 , 103.231.139.0/24 ) sufferings for his own company, called the SpeedyInternet located in Italy, with a monthly charge of $ 60, but after the delivery of the IPs they leased it to someone else ( InterUTransit , BGCloud ) for $ 200 (this is another of his scams)

    Please note the following pictures that, without my knowledge, changed all the specifications of the IPs ( Ripe Database Whois ) and rented another persons and they were using in Russia ( InterUTransit ) and Netherland (BGCloud).

    According to our agreement, these IPs were to be used on his ISP in Italy for his customers.

    https://pasteboard.co/IcPBwpH.png

    https://pasteboard.co/IcPBXnu.png

    —————

    In the first days, I received the calls and emails from many Iranian companies and directors who, through your IPs (which I rented), were infected with various types of attacks, and the volume of traffic was very high.

    In the following, I received many emails from foreign companies ( Germany , Netherland , Iran , Russia , USA , … ) informing me that they received attacks, spam , botnets and huge traffics from my IPs.

    Eventually, one of the company's telecoms managers contacted me and told me that spammers usually lease IPs from a country and spam other IPs in that country.

    https://pasteboard.co/IcPCNpk.png

    https://pasteboard.co/IcPD46d.png

    https://pasteboard.co/IcPDhK7.png

  • ReMoghadamReMoghadam Member
    edited May 2019

    After receiving many calls and emails, by checking the routes and the RIPE database for my rented IPs, I realized that my IPs are leased to other people and that, contrary to the agreement in different countries and datacenters, they are in use. By checking out the http://talosintelligence.com website and other , I noticed that my IPs were blocked by blacklists for sending spam and attacks and many iranian datacenters and infrastructures blocked my ips.

    https://pasteboard.co/IcPCpLT.png

    https://pasteboard.co/IcPCCTn.png

    —————

    After these incidents, I sent mail to the data center‌s ( Novogara - www.novogara.com ) that Transited my leased IPs , with my surprise and the Data Center support department, we found that this fraudster had used fake LOA documents

    It also surprised and regret the data center support unit

    Then , they prohibited announcing my IPs from his user ( Top Scammer Mr Nicola Brali )

    https://pasteboard.co/IcPDFRP.png

    —————

    And after these incidents, he began to create a new account on this site and gave me a post and introduced me as a swindler.

    And I also posted an incomplete picture of our conversations in WhatsApp, which I did not give the courage to show my whole conversation here, and eventually stated that I got rid of it and said I should pay $ 200

    The truth of the story is that when he sent message in whatsapp, I asked him to explain why he did this, but he repeatedly repeated “refund my money”; otherwise, I will post against you in all the forums and make you a crook.

    Eventually I suggested to him two choices

    1. My IPs was clear and there was not listed in any Blacklists , clear my IPs from all blacklist , then I will refund your paid money.
      Or
    2. Clear my IPs from all blacklists , then if you would like to have my IPs you have to rent them with 200$ ( same as that price he rented to another persons )

    https://pasteboard.co/IcPDqAh.png

    https://pasteboard.co/IcPDymN.png

    —————

    When I suggested two choices , I did not answer him and after a few hours I received this email


    Hello again!

    We just seen your instagram, is nice, we suggest using the money you
    stole from us to pay a 3 fucking month gym (Gymnastics) membership so
    you can remove some fat from your body, especially that fat pig face.

    We wish you the best adventures with the $550 you stole from us. Happy
    McDonalds.

    https://pasteboard.co/IcPDWda.png

  • I'm sure that according to the principle of the subject and the events that occurred and the documents I provided, any honest person can judge between my conversations and the lies of this crooks.

    My biggest mistake was that I provided a cheap monthly charge and also rented my IPs to individual, and not to the prestigious company, and these fraudsters were found and the result of that blocking of my IPs.

    this case closed for me , I will not waste much of my time for this case.

    Hoping the world without crooks

  • AIOAIO Member

    @ReMoghadam said:
    After receiving many calls and emails, by checking the routes and the RIPE database for my rented IPs, I realized that my IPs are leased to other people and that, contrary to the agreement in different countries and datacenters, they are in use. By checking out the http://talosintelligence.com website and other , I noticed that my IPs were blocked by blacklists for sending spam and attacks and many iranian datacenters and infrastructures blocked my ips.

    https://pasteboard.co/IcPCpLT.png

    https://pasteboard.co/IcPCCTn.png

    —————

    After these incidents, I sent mail to the data center‌s ( Novogara - www.novogara.com ) that Transited my leased IPs , with my surprise and the Data Center support department, we found that this fraudster had used fake LOA documents

    It also surprised and regret the data center support unit

    Then , they prohibited announcing my IPs from his user ( Top Scammer Mr Nicola Brali )

    https://pasteboard.co/IcPDFRP.png

    —————

    And after these incidents, he began to create a new account on this site and gave me a post and introduced me as a swindler.

    And I also posted an incomplete picture of our conversations in WhatsApp, which I did not give the courage to show my whole conversation here, and eventually stated that I got rid of it and said I should pay $ 200

    The truth of the story is that when he sent message in whatsapp, I asked him to explain why he did this, but he repeatedly repeated “refund my money”; otherwise, I will post against you in all the forums and make you a crook.

    Eventually I suggested to him two choices

    1. My IPs was clear and there was not listed in any Blacklists , clear my IPs from all blacklist , then I will refund your paid money.
      Or
    2. Clear my IPs from all blacklists , then if you would like to have my IPs you have to rent them with 200$ ( same as that price he rented to another persons )

    https://pasteboard.co/IcPDqAh.png

    https://pasteboard.co/IcPDymN.png

    —————

    When I suggested two choices , I did not answer him and after a few hours I received this email


    Hello again!

    We just seen your instagram, is nice, we suggest using the money you
    stole from us to pay a 3 fucking month gym (Gymnastics) membership so
    you can remove some fat from your body, especially that fat pig face.

    We wish you the best adventures with the $550 you stole from us. Happy
    McDonalds.

    https://pasteboard.co/IcPDWda.png

    That's amazing. Novogara is an Ecatel host, known for being a bulletproof (easily abusable) host. Can't believe they responded to an abuse inquiry.

    Thanked by 2FHR legalstuff
  • NicolaNicola Member
    edited May 2019

    @ReMoghadam said:
    I'm sure that according to the principle of the subject and the events that occurred and the documents I provided, any honest person can judge between my conversations and the lies of this crooks.

    My biggest mistake was that I provided a cheap monthly charge and also rented my IPs to individual, and not to the prestigious company, and these fraudsters were found and the result of that blocking of my IPs.

    this case closed for me , I will not waste much of my time for this case.

    Hoping the world without crooks

    You signed,authorized and sent us both LOAs via Whatsapp you dumb cunt.

    Same comment: For scamming us we suggest using the money for buying McDonalds because we don't see you into a gym any time soon. Now we have to eat shit because all stuff is down.

    https://pasteboard.co/IcQR4pg.jpg

    https://pasteboard.co/IcQS2WW.jpg

    You even put stamp in one of them, yet you told our Peer that we faked the LOA!?

  • This is getting interesting :-)

  • PieHasBeenEatenPieHasBeenEaten Member, Host Rep

    @ReMoghadam What about the other host you supposedly scammed @rickey318

  • cis64cis64 Member
    edited May 2019

    whatsup ?
    @PieHasBeenEaten

  • @PieHasBeenEaten said:
    @ReMoghadam What about the other host you supposedly scammed @rickey318

    Problem with this user was same, he leased my IPs to his customer ( and changed all of RIPE Database whois to his customer without inform me ) and I received many emails about abuse and spam ( I sent Screenshots of that abuse emails ) , The difference was that man ( @rickey318 ) was personified and polite , he apologized for this subject and even told me, if I'm not satisfied, he can update whois of RIPE Database to his own name.

    he paid monthly ( for a month 60 USD ) by Paypal ( not Bitcoin , so there was not scam with Bitcoin or etc ) payment date was Mar 29, 2019 and lease expired date Apr 29, 2019 , Our difference emerged at Apr 19,2019 ( 10 days before expire date ).

    https://pasteboard.co/IcTrE2k.jpg

    He also sent a whatsapp message and asked me for that IP for his customer with higher price , But we did not reach agreement on the intention of extending the monthly fee and paying with PayPal ( use bitcoin was better for us to import money to our country , but he told me payment with bitcoin is risky , and also our terms was at least rent for 3 months but he want to lease month by month) , and finally we did not speak on their own proposal.

    Also, he can confirm my above texts, and if there is mistake correct that, or send screenshots from our chat in whatsapp.

    @rickey318
    @PieHasBeenEaten

This discussion has been closed.