Cyber Risks · Krebs on Security

Proxy Services Feast on Ukraine’s IP Address Exodus

Summary: A Kentik study found that nearly one-fifth of Ukraine's IPv4 address space has come under Russian control or been sold to address brokers since February 2022, with Ukrtelecom now routing just 29 percent of the ranges it held at the war's start. Much of that space now maps to commercial proxy services routed through U.S. ISPs including Amazon, AT&T, and Cogent, and AT&T has given customers until Sept. 1, 2025 to originate their own IP space under its February 2025 terms change.

Why it matters: Proxy and VPN providers will pay $100-$500 a month per 256-address block, so the addresses of a country under invasion became rentable infrastructure for anonymizing traffic - and the EU has already sanctioned Stark Industries Solutions, an ISP whose address space included blocks sourced from Ukrainian ISPs and was tied to Russian state-sponsored DDoS and spear-phishing.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related