Forgot your password?
typodupeerror
The Internet

The Battle Over Africa's Great Untapped Resource: IP Addresses (msn.com) 55

In his mid-20s, Lu Heng "got an idea that has made him a lot richer," writes the Wall Street Journal.

He scooped up 10 million unused IP addresses, mostly form Africa, and then leases them to companies, mostly outside Africa, "that need them badly." [A]round half of internet traffic continues to use IPv4, because changing to IPv6 can be expensive and complex and many older devices still need IPv4. Companies including Amazon, Microsoft and Google still want IPv4 addresses because their cloud-hosting businesses need them as bridges between the IPv4 and IPv6 worlds... Africa, which has been slower to develop internet infrastructure than the rest of the world, is the only region that still has some of the older addresses to dole out... He searches for IPv4 addresses that aren't being used — by ISPs or anyone else that holds them — and uses his Hong Kong-based company, Larus, to lease them out to others.

In 2013, Lu registered a new company in the Seychelles, an African archipelago in the Indian Ocean, to apply for IP addresses from Africa's internet registry, called the African Network Information Centre, or Afrinic. Between 2013 and 2016, Afrinic granted that company, Cloud Innovation, 6.2 million IPv4 addresses. That's more addresses than are assigned to Nigeria, Africa's most populous nation. A single IPv4 address can be worth about $50 on its transfer to a company like Larus, which leases it onward for around 5% to 10% of that value annually. Larus and its affiliate companies, Lu said, control just over 10 million IPv4 addresses. The architects of the internet don't appear to have contemplated the possibility that anyone would seek to monetize IP addresses...

Lu's activities triggered a showdown with Africa's internet registry. In 2020, after what it said was an internal review, Afrinic sent letters to Lu and others seeking to reclaim the IP addresses they held. In Lu's case, Afrinic said he shouldn't be using the addresses outside Africa. Lu responded that he wasn't violating rules in place when he got the addresses... After some back-and-forth, Lu sued Afrinic in Mauritius to keep his allocated addresses, eventually filing dozens of lawsuits... One of the lawsuits that Lu filed in Mauritius prompted a court there to freeze Afrinic's bank accounts in July 2021, effectively paralyzing the organization and eventually sending it into receivership. The receivership choked off distributions of new IPv4 addresses, leaving the continent's service providers struggling to expand capacity...

In September, Afrinic elected a new board. Since then, some internet-service providers have been granted IPv4 addresses.

This discussion has been archived. No new comments can be posted.

The Battle Over Africa's Great Untapped Resource: IP Addresses

Comments Filter:
  • by viperidaenz ( 2515578 ) on Saturday November 29, 2025 @06:05PM (#65825271)

    Where there's money to be made from a finite resource, there's corruption.

    • Re:Corruption (Score:4, Insightful)

      by arglebargle_xiv ( 2212710 ) on Saturday November 29, 2025 @07:45PM (#65825387)
      Where there's Africa, there's corruption.
      • Re: (Score:1, Redundant)

        by davidwr ( 791652 )

        >Where there's Africa, there's corruption.
        Where there are people, there is corruption.

        There, fixed that for you.

      • Except that the guy who pulled this scam was Chinese, not African. AfriNIC was not at fault here, and since they were leasing out those IPv4 blocks, they were well within their rights to revoke them once they found out that the terms of service were being violated
    • by Zocalo ( 252965 )
      Doubly so in this case, albeit of a slightly different nature. I keep coming across IP addresses that are managed by Cloud Innovations all the time, and almost always leased out to some sketchy ISP that is either heavily compromised by botnets, or an out and out "bullet proof" hosting provider. The latter are particularly interesting as they are presumably raking in the cash because they both covering Lu's rental fees and maintaining a business relationship because they keep cycling to new subnets as the
  • by rossdee ( 243626 ) on Saturday November 29, 2025 @07:47PM (#65825393)

    Whatever happened to IPv6 ?

    • by Jeremi ( 14640 )

      Whatever happened to IPv6 ?

      I didn't do anything crazy like actually read the article, but I did go as far as to read the third sentence of the summary, which began like this:

      [A]round half of internet traffic continues to use IPv4, because changing to IPv6 can be expensive and complex [...]

      .... and that would seem to indicate that IPv6 is currently handling around half of Internet traffic.

      • by tlhIngan ( 30335 )

        .... and that would seem to indicate that IPv6 is currently handling around half of Internet traffic.

        Question is, is it actually making it out on the Internet or just being used to tunnel IPv4 through it?

        It's a serious question because LTE and 5G networks only handle IPv6 data - all data packets are IPv6. IPv4 traffic must be tunnelled through the mobile IPv6 network. (This is because obviously there are too many mobile devices). It's why CGNAT exists - to provide the IPv4 gateway to the Internet from the I

        • Re:So... (Score:4, Informative)

          by Dagger2 ( 1177377 ) on Sunday November 30, 2025 @10:55AM (#65826233)

          The "around half" figure comes from Google's stats [google.com]. These show which protocol people hit Google's front-end load balancers over, so yes it's making it out onto the Internet.

          Note that this is actually measuring the percentage of clients that will talk to a v6-enabled server over v6, not the percentage of Internet traffic that's going over v6. That one is very hard to measure, since nobody can see all of it.

          I don't have a source handy, but recent stats I've seen from dual-stack capable client ISPs have reported something like 70% of their traffic by volume going over v6 (which means it bypasses their CGNAT hardware, which is nice because that stuff ain't cheap). That's traffic from v6 clients to v6 servers, so not tunnelled v4 either.

          • A lot of the traffic on the internet is now via cellphones, and that too connected to LTE/5G and not to IPv4-only WiFi hotspots. That would drive IPv6 numbers higher - clients, servers, routers, everything
        • LTE, 5G, DOCSYS 3.0 and after, all define IPv6 in their spec. In other words, they may or may not support IPv4, but they have to support IPv6 in order to be compliant The backbones are now largely IPv6. If they're using transition mechanisms like xLAT464, then they definitely aren't tunneling, since they're appending 64:ff9b::/96 to the IPv4 address to make it an IPv6 address. Before connecting to the IPv4 gateway, they drop the 64:ff9b::/96 header, so that the host gets the packets to the correct IPv4
      • Yeah, I've been doing some digging, and looks like IPv6 is just short of the 50% mark. Hopefully in 2026, it will get there While I am an IPv6 advocate, I'm not an advocate of IPv6-only if one is transitioning from IPv4. That would result in releasing those freed-up IPv4s to the ISPs or RIRs involved, delaying the global move to IPv6. If an entity is on IPv4 and decides to add IPv6, then they should stay dual stack and not release those IPv4 addresses. That would result in newer entities that are just
    • by quenda ( 644621 )

      Whatever happened to IPv6 ?

      Adoption is well ahead of IPv5. IPv6 is an LTS version.

    • by Anonymous Coward

      Whatever happened to IPv6 ?

      I'm holding out for "IP viii - The Revengening"

    • Whatever happened to IPv6 ?

      You don't need IPv6. You can just NAT the NAT and put NAT on top of that in the form of CG-NAT. Who needs end-to-end connectivity anyway. /s

      What happened to IPv6? We did. The "experts" who decided to not push it because we didn't understand it, mistake NAT for a firewall and thing an IP address is a security risk, and bitch and moan because they think they need to remember a complex hexadecimal address (which is rubbish).

      • At the moment, IPv6 is just short of the 50% mark when it comes to most internet traffic. LTE, 5G, DOCSYS, Starlink,... all explicitly call for IPv6. So that's what their gear uses. As for the clients, if they are cellphones and connected to these services, they automatically use IPv6. They'd only use IPv4 if connected to an access point configured for only IPv4 As for computers, one can enable IPv6 in settings, and be off to the races, if the gateway they're connected to has IPv6 enabled. Not sure ho
    • There has been more progress into IPv6-only, which was unthinkable a couple of years ago. That, and overall global network traffic in IPv6 almost getting to the 50% mark
  • Is the network equivalent of still using floppy disks and deserves to be ripped off. Don't say but my legacy devices as Windows NT from 30 years ago had an ipv6 driver.
    • My (otherwise excellent) network provider to this day does not support IPv6
    • by rekoil ( 168689 )

      Is the network equivalent of still using floppy disks and deserves to be ripped off. Don't say but my legacy devices as Windows NT from 30 years ago had an ipv6 driver.

      I know, screw all those backwater companies that haven't made their sites available over IPv6, like, you know, amazon.com, github.com, and... slashdot.org.

    • Most consumers today aren't using IPv4 by choice, but by necessity. Every OS out there supports IPv6, as does every router made in the last 10 years, and supports it pretty much automatically if it's available. The main reason they still use IPv4 is that their ISP hasn't deployed IPv6 support on their residential network, so IPv6 isn't available unless you're a techie and recognize the name Hurricane Electric. The next most common reason is that the site they're accessing only has IPv4 addresses assigned so

    • Too many. Some of the places I've been in the last several weeks only have IPv4 configured on their gateways. On my laptop, I have IPv6 enabled, but I can't just disable IPv4 for this very reason. At my home, I do have IPv6 enabled: have yet to try out disabling IPv4
  • by Mirnotoriety ( 10462951 ) on Saturday November 29, 2025 @11:35PM (#65825691)
    “One of the world's five regional internet registries, or RIRS, has been the subject of campaigns by a secretive lobby group calling itself the Number Resource Society [theregister.com]” (NRS).

    “In June 2020, in an action unrelated to its discovery of its own staff making inappropriate IP address allocations, AFRINIC management wrote to an organization called Cloud Innovation to which it previously granted the rights to use more than seven million IPv4 addresses. Cloud Innovation's CEO is Lu Heng, who also leads a company that, in correspondence with The Register, the NRS identified as a member: Hong-Kong-based Larus Limited.”

    "Seven million numbers leased at just $2/year can generate upwards of $14 million in revenue."
    --

    “Cloud Innovation's website does not list its address. But AFRINIC's WhoIs service lists an entity using the same name at Suite 202, 2nd Floor; Eden Plaza, Eden Island; Po Box 1352; Mahe; Seychelles. That same address is used by Appleby Global Services. That's the law firm that was the unwitting source of a trove of leaked documents that led to publication of The Paradise Papers – a major investigation by the International Consortium of Investigative Journalists that explored how giant corporations and wealthy individuals use offshore tax havens to legally minimize their taxes.”
    • "Seven million numbers leased at just $2/year can generate upwards of $14 million in revenue."

      Sure. But the cost of the addresses is what?

      A single IPv4 address can be worth about $50 on its transfer to a company like Larus

      So a 25 year ROI? I think these numbers are off.

  • by dskoll ( 99328 ) on Sunday November 30, 2025 @12:01AM (#65825741) Homepage

    I agree with the registries that even if this is legal, it's an abuse of the process. Whatever country has jurisdiction over Afrinic (Mauritius?) should simply expropriate the IP addresses and give them back to Afrinic. It's not as though we don't have enormous legal precedent for expropriating property when it's in the public interest.

  • Aren't there companies - mostly USA - with multiple 8s, much more than they could ever use?
    I can understand IBM and HP needing multiple 8s, but General Motors and others?

    • I think many have sold them off. Ford looks like they still own a /8(19.xxx), but gm does not anymore. The "big" guys these days are the cloud providers, although quite fractured. ATT & verizon as you'd expect have big chunks as well.
    • Most of the original legacy owners, such as DEC, have let go of theirs: now, you see it w/ the Googles and the Cloudflares. But nobody should release IPv4 addresses if they no longer need them: just go dual stack. That would force newer entities going online to for IPv6-only, w/ transition mechanisms to connect to IPv4-only clients or sites
  • Origins from Africa, should be worded,
    "Africanic"

    • No, that's how the RIRs are usually named: APNIC - Asia-Pacific NIC AfriNIC - Africa NIC LATNIC - LATin America NIC ARIN and RIPE NCC are the exceptions. ARIN is American Registry of Internet Numbers, but "America" here covers the US, Canada, and all of the Caribbean (including Latin American island countries like Cuba, Dominican Republic, Haiti,...) RIPE NCC stands for Réseaux IP Européens Network Coordination Centre and covers Europe, West Asia and Central Asia I would have split it differe

What the world *really* needs is a good Automatic Bicycle Sharpener.

Working...