RE: Purchasing IPv4 space - due diligence homework

[Sam Roche <sroche () lakelandnetworks com>]

I used this gentleman’s Powershell script and modified it slightly to check a block last summer. The broker we were 
using said that they also did their due diligence on the addresses, but I wanted to do our own because of the cost of 
the IPs.

https://www.saotn.org/powershell-blacklist-check-script/

We worked with the Brander Group as a broker. They were great and have since launched a portal/storefront I believe.

Kind regards,

Sam.

From: NANOG <nanog-bounces () nanog org> On Behalf Of John Alcock
Sent: Wednesday, April 3, 2019 11:34 AM
To: Torres, Matt <Matt.Torres () state or us>
Cc: nanog () nanog org
Subject: Re: Purchasing IPv4 space - due diligence homework

Well,

I did all three above and still had issues.  I am still having issues.  I had to contact many people to get off of 
various blacklists, etc.  These are lists that are not publish and you will not know until you start using the space.

Luckily, I have had great help from the list here in getting support and in some cases back-channel support.

The hard part is getting a hold of the right people.

For example:

Softlayer/IBM was initially blocking my ip space.  But, it was not really them.  It was NTT on behalf of Softlayer.  
The request has to come from Softlayer.  That has been resolved.  I honestly do not even know who to thank.

I am currently fighting the same issue with playstation.com<http://playstation.com>.  Akami is blocking access on 
behalf of Sony.  The request has to come from Sony.  After many emails with abuse@playstation, I am making headway.  
Problem is not solved yet, but I believe they are making headway. Luckly Akami open a ticket and told me what to tell 
the Sony NOC.


Right now, I am fighting some odd ball blocks.  Several mobile banking sites.  There is not even a support number.  I 
am having to try and use the NOC/Abuse contacts via ARIN first and not having any luck.  Try calling a bank and telling 
them that your are a network engineer and can not access their sites.  That goes downhill pretty quick. If you can get 
past the first line of tech support it is a challenge.  "Have you cleared your cookies?  You need to call your ISP", 
then you get a 2nd line person who basically blows you off.

Here is the thing.  You will have problems.  Just be prepared to make lots of phone calls and send lots of emails.  
Once you get to the right person, things can get a moving.

John


On Wed, Apr 3, 2019 at 11:20 AM Torres, Matt via NANOG <nanog () nanog org<mailto:nanog () nanog org>> wrote:
All,
Side stepping a migration to IPv6 debate…. I’d like to hear advise from the group about performing due diligence 
research on an IPv4 block before purchasing it on the secondary market (on behalf of an end-user company). My research 
has branched into two questions: a) What ‘checks’ should I perform?, and b) what results from those checks should cause 
us to walk away?

My current list is:

  1.  Check BGP looking glass for route. It should not show up in the Internet routing table. If it does, walk away.
  2.  Check the ARIN registry. The longer history without recent transfers or changes is better. I don’t know what 
explicit results should cause me to walk away here.
  3.  Check SORBS blacklisting. It should not show up except maybe the DUHL list(?). If it does, walk away.

Anything else? Advise?
Thanks,
Matt