[arin-ppml] Waiting List IPv4 blocks transferred after issuance

[Robert Clarke]

With ARIN loudly sharing that they're scrutinizing transfers to a higher degree than ever before, and the DOJ making it clear they will indite IPv4 fraudsters, leasing is the best path forward for criminals (not that it wasn't already before). For this reason I think that the transfer statistics that John shared before can be discounted in this discussion.

Thanks,

Robert Clarke

> On May 29, 2019, at 2:04 PM, Jimmy Hess <mysidia at gmail.com> wrote:
> 
> On Wed, May 29, 2019 at 3:49 PM Robert Clarke <robert at rjfc.net <mailto:robert at rjfc.net>> wrote:
> Hi Hayee,
> 
> A legitimate ISP leasing their space is of course is legal. In this case I'm talking about bad actors who provide false information to ARIN to get large block sizes, and then turn around and lease them to third parties. My point is that transferring/selling IPv4 blocks is not the only way to make a large amount of money by providing fraudulent information to ARIN. For this reason it does not make sense to use the transfer/block size information that John provided as validity that a /19 or lower somehow leads to less fraud.
> 
> It can help demonstrate that /19 or lower leads to fewer suspect transfers that ARE the potential fraud of one major type.
> The fact that other kinds of fraud may exist is true,  but can be considered separately.
> 
> Fraudulent ISP ``leasing'' addresses  ALSO  puts  the end user at higher risk,  and thus
> provides strong encouragement for the end recipient/customer to discover the fraud 
> and make sure that  THEIR need for IP addresses does not get satisfied by an invalid leasing.
> 
> Because,  you see...  when ARIN revokes  the IP space from the fraudulent ISP
> (the ISP that is not really an ISP but an entity "Leasing" IP addresses not for ISP services):
> 
> then every entity that had "leased"   IP addresses from that entity will   no longer have those
> leased IP addresses  after the revocation and return to the waiting list of the bogus ISP's aggregate block.
> 
>  
> Thanks,
> --
> -JH

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.arin.net/pipermail/arin-ppml/attachments/20190529/09b51c65/attachment.htm>