Name | Date | Event

IPv4 Transfers in the Region

Nikolas Pediaditis | NETNOD Spring Meeting 2017 | April 2017 !2

RIPE NCC Available IPv4 Pool

www.ripe.net/IPv4-graph

Nikolas Pediaditis | NETNOD Spring Meeting 2017 | April 2017 !3

IPv4 Address Distribution

• Less than 0.5 /8s in our pool - Projected to last 1,5 more years

• Each LIR can receive one final allocation from our remaining pool (last /8) - Allocation size: 1,024 addresses (/22)

- For both new and existing members

• IPv4 addresses cannot be transferred for 24 months from the date they were received by the resource holder

Transferring IPs

Presenter name | Event | Date !5

Country StatisticsCountry Code IPs Into Transfers Into IPs Inside Transfers Inside IPs From Transfers From

FI 8192 6 371456 37 82176 15

DK 229120 27 204544 43 632832 119

IS 12288 2 3328 4 6144 3

NO 294656 25 241664 25 5120 4

SE 250112 107 754432 75 20480 14

Legend:

IPs Into = IPs transferred into the country from another country

Transfers Into = Nr of transfers into the country from another country

IPs Inside = Nr of IPs transferred within the country

Transfers Inside = Nr of transfers within the country

IPs From = IPs transferred from the country to another country

Transfers From = Nr of transfers from the country to another country

Presenter name | Event | Date !6

Completed IPv4 Transfers

0

2000000

4000000

6000000

8000000

10000000

12000000

0

50

100

150

200

250

300

350

400

2017-06 2017-07 2017-08 2017-09 2017-10 2017-11 2017-12 2018-01 2018-02 2018-03 2018-04 2018-05

Size

of T

rans

fers

# of

Tra

nsfe

rs

IPv4 Total Transfers

Number of Transfers Size of Transfers

Presenter name | Event | Date !7

0

500

1000

1500

2000

2500

0

10

20

30

40

50

60

70

2017-06 2017-07 2017-08 2017-09 2017-10 2017-11 2017-12 2018-01 2018-02 2018-03 2018-04 2018-05

Size

of T

rans

fers

(/32

s)

# of

Tra

nsfe

rs

IPv6 Total Transfers

Number of Transfers Size of Transfers

Presenter name | Event | Date !8

0

10

20

30

40

50

60

70

80

2017-06 2017-07 2017-08 2017-09 2017-10 2017-11 2017-12 2018-01 2018-02 2018-03 2018-04 2018-05

ASN Transferred

Presenter name | Event | Date !9

-0 .5

-0 .4

-0 .3

-0 .2

-0 .1

0

0.1

0.2

0.3

0.4

0.5

-1 5

-1 0

-5

0

5

10

15

2017-06 2017-07 2017-08 2017-09 2017-10 2017-11 2017-12 2018-01 2018-02 2018-03 2018-04 2018-05

Size

of T

rans

fers

Mill

ions

of I

Ps

# of

Tra

nsfe

rs

IPv4 Inter-RIR Transfers to/from RIPE NCC

APNIC Transfers ARIN Transfers APNIC IPs ARIN IPs

Ougo

ing

Nikolas Pediaditis | NETNOD Spring Meeting 2017 | April 2017 !10

IPv4 Hijacks

• IPv4 addresses are becoming more valuable due to scarcity

• Criminals use very sophisticated methods to obtain control over (seemingly) unused address blocks - Faking registration and identity papers

- Faking entire websites and domains

• Hijackers often target resources with outdated contact details!

Nikolas Pediaditis | NETNOD Spring Meeting 2017 | April 2017 !11

Increase in Disputes Over IP Addresses

• Disputed transfers - Outdated contact information

- “LIR contact was no longer working at the company”

• Hijacked, disputed LIR accounts - LIR contacts removing other contacts from the LIR Portal

- LIR accounts opened on behalf of unaware organisations

• We see an increase in efforts to hijack legacy space

Questions

Nikolas Pediaditis | NETNOD Spring Meeting 2017 | April 2017 !13

Actions Taken by the RIPE NCC