Presentation by Vivek Nigam at APRICOT 2017 on Monday, 27 February 2017.

1. 2017#apricot2017
Member Services Update
Vivek Nigam
Member Services Manager, APNIC

2. 2017#apricot2017
Overview
2
MyAPNIC access
improvement
Fraudulent claims of
historical resources
IPv4 transfer trends

3. 2017#apricot2017
MyAPNIC access
improvement

4. 2017#apricot2017
Authenticated APNIC services
• MyAPNIC
• Confer tool
• Bulk whois access …
4

5. 2017#apricot2017
One login for all APNIC services
• Simplify access to all APNIC services
• Facilitate application deployment to public cloud
– Decreased latency
– Increased performance
– Greater redundancy
5

6. 2017#apricot2017
Two-Factor Authentication
• Digital Certificates
– Poor browser user experience
– Manual approval and renewal process
• Time-Based One-time password (TOTP)
– Flexible and compatible
– Implemented two years ago
– Has 592 MyAPNIC users
6

7. 2017#apricot2017
Transition phases
• Stage 1
– Login using MyAPNIC login or new APNIC login (Q2 2017)
• Stage 2
– Default login changes to new APNIC login
• Stage 3
– Deprecate MyAPNIC login
7

8. 2017#apricot2017
Fraudulent claims of
historical resources

9. 2017#apricot2017
Two types of fraud
9
Pretending to be legitimate
organizations (spoofing)
Claiming more than what has
been delegated

10. 2017#apricot2017
Organization spoofing
• Request to claim a /16 historical
prefix
• Declaration forms completed
• Company renewal certificate
provided
• Similar email domain used
• Company deregistered
• No response from requester
• Historical resource claim rejected
10

11. 2017#apricot2017
Overclaiming
• Request to claim a /23 historical prefix
• Organization was delegated a /24
• Justification based on usage of IP addresses
• Historical resource claim rejected
11

12. 2017#apricot2017
IPv4 transfer trends
12

13. 2017#apricot2017
IPv4 transfer policy
13
Can be used to transfer your excess
or unused IP addresses to
organizations that have a need for
more IPv4 addresses

14. 2017#apricot2017
IPv4 transfers
14
Organizations get IP addresses based on need
Finds organizations that need more IPv4Resources returned to APNIC
Over time, the need for IP address space may change
Organizations use the IP addresses for their needs
Transfer IPv4 addresses

15. 2017#apricot2017
Transfer reasons observed
• Save on membership fees
• Consolidate accounts
• Transfer to their ISP
15

16. 2017#apricot2017
Suspicious IPv4 transfer request
• Nineteen Members requested a transfer to the same
recipient account
• Request included all of their IPv4 resources
• Same reason for transfer provided
– “Business needs have changed”
16

17. 2017#apricot2017
Suspicious IPv4 transfer request
• Accounts created within span of three months
• Similar needs for IP addresses provided
• Same billing contacts provided
• Called Members to clarify request
– Recipient account has always used address space
– Not aware of source organization
• Membership terminated and resources reclaimed
17

18. 2017#apricot2017
Suspicious IPv4 transfer request
• Resources delegated < 12 months?
18

19. 2017#apricot2017
M&A transfer request
• Seven Members requested to transfer due to a M&A
• Sales agreement provided
– Company shares transferred
• Legal review found documents were fabricated
• Transfer request was rejected
19

20. 2017#apricot2017
IPv4 transfers involving 103/8
20
19
32
66
84
8
0
10
20
30
40
50
60
70
80
90
2013 2014 2015 2016 2017
Year
Number of
transfers

21. 2017#apricot2017
Questions?
21

22. #apricot2017
20 February – 2 March 2017HO CHI MINH CITY,VIET NAM
2017
41 22