Latest news with #IPXO


Forbes
01-08-2025
- Business
- Forbes
Why Unmanaged Network Resources Are A Hacker's Dream
Vincentas Grinius is a tech entrepreneur and cofounder of IPXO, with a focus on internet infrastructure and sustainable digital innovation. Cybersecurity discussions in today's increasingly connected world often emphasize software vulnerabilities, phishing schemes and ransomware threats. However, a more subtle—and equally dangerous—threat lurks beneath the surface: unmanaged digital infrastructure assets that many enterprises, universities and public institutions unknowingly leave exposed. One of the most overlooked assets is IPv4 address blocks—legacy allocations that, if left unmonitored and unnoticed by management systems, provide a hidden playground for cybercriminals to launch attacks, hide their activities and erode trust in internet systems. According to Cybersecurity Ventures, ransomware damages are expected to cost the global economy $275 billion annually by 2031. Organizations must face a new reality: They jeopardize security and value if they aren't actively managing their network resources. The Hidden Risk Of Idle Infrastructure: How Cybercriminals Exploit What We Ignore The IPv4 address space, which was initially distributed freely during the early days of the internet, has become increasingly scarce and valuable. However, many institutions retain large blocks of addresses without active oversight, making them susceptible to hijacking and abuse. IP hijacking occurs when a threat actor illegitimately takes control of an IP address block, often by announcing false routes to internet routers and redirecting traffic meant for the rightful owner. Because these IPs seem valid on the public internet, attackers can use them to send spam, host phishing sites or create botnets—all while staying under the radar. In many instances, the legitimate owner is unaware that their addresses are being exploited. Cybercriminals often scan inactive IP ranges, using them for various malicious activities. Spam distribution remains one of the most common threats: A 2023 report by Statista indicates that spam emails constituted approximately 45.6% of global email traffic. The U.S. and China have emerged as the primary sources of spam emails, sending close to 8 billion spam emails each day per country. Hijacked IP addresses frequently create new, seemingly clean environments to send these messages before detection systems can respond. Phishing campaigns continue to grow, too. The Cybercrime Info Center reported over 1.8 million unique phishing attacks between May 2022 and April 2023, many of which rely on hijacked or misused network blocks to avoid early detection. Botnet hosting also thrives on unmanaged infrastructure. According to Spamhaus, botnet command-and-control servers increased by 16% in Q4 2023, illustrating how cybercriminals exploit abandoned address space to carry out malware and ransomware campaigns. The command-and-control infrastructure for ransomware is especially concerning. The FBI reported a 9% rise in ransomware attacks on U.S. critical infrastructure in 2024, frequently facilitated by compromised or hijacked networks that lack active oversight. Even cryptocurrency fraud is driven by hijacked resources. The FBI's 2023 Internet Crime Report revealed that cryptocurrency-related fraud caused losses exceeding $5.6 billion, a 45% increase from the previous year, as criminals exploited compromised infrastructure to host phishing websites and steal assets. These realities underscore a hard truth: Unmanaged infrastructure isn't just wasted; cybercriminals actively weaponize it. Leasing As A Security Strategy The traditional view of leasing IP addresses focuses on monetization. However, leasing can also act as a strong security mechanism. When an IP block is actively leased through a trusted, structured platform, it's: • Continuously monitored for abuse patterns and dips in reputation. • Protected by know-your-customer (KYC), anti-money laundering (AML) and Office of Foreign Assets Control (OFAC) processes that screen lessees before allocation. • Secured with automated blacklisting detection and rapid incident response protocols. • Actively validated in routing systems, making unauthorized hijacking attempts considerably more difficult. Instead of remaining idle and exposed, the resource becomes a managed and monitored part of the global internet fabric. A New Model For Digital Asset Stewardship Every organization with internet-facing infrastructure must reconsider its stewardship model. It's no longer sufficient to secure servers and patch software—proactive management of network resources has become integral to the cybersecurity mandate. Practical steps forward: • Audit your IPv4 and network assets. Understand exactly what you own, where it's located and if it's in use. • Secure dormant resources. Consider collaborating with reputable leasing platforms that emphasize security, compliance and abuse prevention. • Align IT, finance and cybersecurity teams. Ensure that digital asset management is collaborative, not isolated. • Monitor continuously. Establish real-time visibility over leased or unused space to quickly identify anomalies. Inaction is no longer harmless; it's a liability. Stewardship Or Exposure—The Choice Is Clear The digital economy rewards those who actively manage and optimize their resources. Just as businesses protect financial assets and intellectual property, they must also secure and enhance their network resources. The days of neglecting idle IP address blocks without repercussions are over. Cybercriminals are aware of this. Forward-thinking institutions recognize it. Now, the broader enterprise and public sectors must catch up—or risk facing the consequences. Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?


Forbes
10-06-2025
- Business
- Forbes
Entering The Growing IPv4 Market: What Enterprises Should Do Now
Vincentas Grinius is a tech entrepreneur and cofounder of IPXO, with a focus on internet infrastructure and sustainable digital innovation. As cofounder of IPXO, an IP management platform, I've spent over a decade in internet infrastructure, watching IPv4 addresses evolve from basic networking tools into valuable financial assets. What began as a simple protocol in the 1980s has become a billion-dollar market, yet most enterprises remain unaware they're potentially sitting on revenue streams worth hundreds of thousands of dollars. With IPv4 addresses now trading at $20 to 30 each and IPv6 adoption progressing slowly, we're in an unprecedented situation where legacy infrastructure has become a commodity. Here's your practical roadmap for evaluating and potentially monetizing these hidden assets. Most organizations lack complete visibility into their IPv4 footprint, particularly those that have grown through acquisitions. Start by gathering documentation from your Regional Internet Registry (RIR), such as the American Registry for Internet Numbers (ARIN) in North America and Canada and the RIPE NCC in Europe. Here are some key questions to ask: • Which addresses actively route traffic versus sitting unused? • Do we have proper legal documentation proving ownership? • Are there transfer restrictions or encumbrances? Documentation gaps are endemic. I've seen companies discover forgotten address blocks worth over $1.6 million during routine audits. If records are incomplete, work with your RIR to reconstruct allocation history—missing documentation can be rebuilt but requires time and administrative effort. Geographic restrictions also complicate matters. Some RIRs limit transfers to specific regions, affecting your monetization options. Identify these constraints early to avoid surprises later. Once you understand your holdings, assess whether leasing or selling aligns with your strategic goals. This decision requires input from finance, legal and operations teams. Leasing Considerations: Leasing preserves ownership while generating recurring revenue of $0.30 to $0.60 per address monthly. This suits organizations maintaining a growing cloud infrastructure, as addresses can be reclaimed when needed. Sale Considerations: Selling your IPv4 holdings provides immediate capital but sacrifices future flexibility. This path works for organizations migrating entirely to IPv6 or needing capital for other investments. Risk Assessment Framework: Consider your five-year technology roadmap carefully. Companies I've worked with who sold addresses prematurely later faced expensive repurchasing decisions when IPv6 timelines slipped—a common occurrence given the technical complexity of full migration. Treating IPv4 addresses as financial assets requires proper governance. This means involving legal counsel familiar with internet governance and ensuring compliance with both corporate policies and regulatory requirements. Establish clear ownership documentation. Transfer agreements, RIR records and internal asset registers must align. Any discrepancies can delay transactions or create legal complications. Keep in mind that IPv4 monetization creates taxable events. Whether structured as capital gains (for sales) or ordinary income (for leasing), consult tax professionals familiar with digital asset transactions. Addresses previously used for spam or malicious activities lose value significantly. Implement reputation monitoring to understand your addresses' standing before entering any transaction. The IPv4 marketplace involves technical, legal and financial complexities that most enterprises shouldn't navigate alone. However, not all platforms offer equivalent services or protections. Look for comprehensive due diligence, not just transaction facilitation. This includes reputation monitoring, abuse prevention and technical validation. Platforms handling only financial aspects leave enterprises exposed to reputation risks. Then, assess the scope of provided services. Full-service platforms manage everything from technical configuration to legal documentation, reducing internal resource requirements but commanding higher fees. Limited-service brokers offer basic facilitation at lower costs but require more internal expertise. Partner with organizations providing transparent market data. I've seen IPv4 pricing swing 30% in six-month periods, which makes real-time market intelligence crucial for optimizing timing and pricing decisions. IPv4 monetization represents a unique opportunity in enterprise asset management—digital resources that often appreciate while generating income. However, success demands serious treatment with proper analysis, legal oversight and strategic planning. Organizations approaching this casually often leave money on the table or create unnecessary risks. The companies capitalizing today view digital infrastructure as a strategic asset class, not merely operational overhead. For enterprises discovering significant IPv4 holdings, the question isn't whether to monetize—it's how to do so strategically while maintaining operational flexibility for an uncertain technological future. Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?