IP leasing
Renting IPv4 addresses from the network that holds them, without the internet connection that normally comes with them. The holder keeps the registration.
Updated 19 September 2026 · 13 primary sources
IP leasing is renting IPv4 addresses from the organisation that holds them, for a set period, instead of buying them. ARIN, the North American registry, describes it as providing address blocks to other organisations "independent of connectivity services": the tenant gets addresses but no internet connection. The holder keeps the registration. The tenant announces the block from its own network or through a cloud provider.
Leasing grew because IPv4 ran out. Between 2011 and 2020 the regional registries ran out of IPv4 or began rationing it. A network that needs more addresses now buys them on the transfer market or rents them. A study of the whole routing table estimated that 4.1 percent of announced IPv4 blocks were leased in April 2024, covering 0.9 percent of routed IPv4 space.
Two meanings of an IP lease
The word came into networking with DHCP. Its standard of October 1993 called the period a device may use an address a "lease", citing a 1989 paper on file caching. It even let a client ask for "an infinite lease". That is the lease in "IPv4 lease time": a router lends a device an address, and the device renews it, by default when half the lease has passed. It is also how a home line's dynamic IP address works.
Leasing whole blocks between companies came later, with the address market. In 2011 a bankrupt network equipment maker, Nortel, sold 666,624 addresses to Microsoft for 7.5 million dollars, 11.25 dollars each, through ARIN's new transfer policy. Renting blocks grew out of that market, and APNIC's chief scientist now reviews sales and leases side by side each year.
How a lease works
The holder, or lessor, keeps the block registered in its own name. ARIN asks lessors to record the tenant in its whois as a reassignment, although the lease contract itself stays private. The holder also authorises the tenant's network to announce the block, often with a route origin authorisation (ROA) in the registry's RPKI system. The 2024 study counted 31,156 ROAs covering leased blocks.
The tenant, or lessee, then announces the block from its own network. Some bring it to a cloud provider instead. AWS, for example, asks for a ROA naming its own AS numbers and does not charge its hourly IPv4 fee on addresses customers bring. When the lease ends, in ARIN's words, "the lessor can demand that you return and stop using the addresses".
| Party | What it holds | What it does |
|---|---|---|
| Registry | The public record of the block | Records the holder and, at ARIN, the tenant as a reassignment. At ARIN a lease never justifies new addresses |
| Holder (lessor) | The registration | Authorises the tenant's network with a ROA, and can take the block back when the lease ends |
| Tenant (lessee) | The right to use the block for a set period | Announces the block from its own network |
| Cloud provider (optional) | Nothing in the registry | Announces the tenant's block after checking the registry record and the ROA |
What an IPv4 address costs
One broker publishes its sale prices, and APNIC's chief scientist tracks them every year. An address cost just under 10 dollars before 2016 and 45 to 60 dollars by the end of 2021. In the 40 days to 10 January 2026 the mean was 22 dollars, with a large block selling for 9 dollars an address. Lease prices are less visible, because leases are private contracts. The one broker that publishes them saw its average lease price fall 15 percent during 2025, while sale prices fell 50 percent.
Cloud providers pass the cost on. Since 1 February 2024 AWS has charged 0.005 dollars an hour for public IPv4 addresses, about 3.60 dollars a month each. It said the cost of acquiring one had risen more than 300 percent in five years.
| When | Price per address |
|---|---|
| March 2011 | 11.25 dollars (666,624 addresses for 7.5 million) |
| Before 2016 | Just under 10 dollars |
| End of 2021 | 45 to 60 dollars |
| End of 2023 | 26 to 40 dollars |
| 2024 and 2025 (RIPE NCC report) | About 30 euros for blocks of /24 to /20 |
| 40 days to 10 January 2026 | Mean 22 dollars, low 9 dollars for a /14 |
Why leased space has a reputation
The 2024 study found leased blocks about five times as likely as other blocks to be announced by a network on Spamhaus's ASN-DROP list. The shares were 1.1 percent of leased blocks against 0.2 percent of the rest. Spamhaus lists a network only after finding evidence that cybercrime groups or "bulletproof" hosts control it. It also notes that since IPv4 ran out, blocks are "typically" handed to customers by IPv4 brokers and move far more often than they used to.
A block keeps its history when it changes hands. The registries hold returned blocks back for months or years for exactly this reason, so that reputation services and routing records can see the old use end. When a leased block moves to a new tenant, the record of the last one comes with it.
IP leasing and proxies
Proxy sellers commonly describe ISP proxies as addresses leased from internet providers: blocks registered to a provider and announced from servers in a data centre. The 2024 study adds that commercial VPN providers "often lease different address spaces on a short-term basis".
Our free proxy list shows how common borrowed space is. On 19 September 2026 we matched 4,036 of its live proxies to their registry records. For 15.8 percent, the block was registered in one country and announced by a network registered in another. That is the pattern a lease leaves, though a multinational announcing a subsidiary's block looks the same. The largest groups were blocks registered in the United States and announced by networks in Indonesia, Colombia, Venezuela and Mexico. Another large group was blocks registered in Singapore and announced by networks in China.
For a proxy buyer the checks are the same as for any rented space: who holds the block, which network announces it, and which blocklists it is on. Leases end, so the same block can serve a new tenant next month.
How HProxy handles it
Our IP lookup shows which network announces an address, who operates it and whether it is hosting space. Every proxy on our free list links to its network. Set that against the block's registry record, and a lease usually shows.
Frequently asked questions
What is IP leasing?
Renting IPv4 addresses from the organisation that holds them, for a set period, without buying them and without an internet connection from the holder. The holder keeps the registration, and the tenant announces the addresses from its own network.
How does IP leasing work?
The holder records the tenant in the registry's whois, as ARIN asks, and signs a route origin authorisation that lets the tenant's network announce the block. The tenant announces it from its own network or through a cloud provider. When the lease ends, the holder can take the block back.
What is an IPv4 lease time?
That is a different lease: the time a DHCP server, such as a home router, lends an address to a device. The device renews it before it runs out, by default when half the lease time has passed. It is how a dynamic IP address works.
Do the registries allow IP leasing?
ARIN does, with conditions. The addresses must have been obtained legitimately and no longer be needed. Leased space must be recorded as reassignments, and a lease is never a reason to get more addresses from ARIN. In its words, the concern is "not preventing leasing but ensuring scarce IPv4 addresses are not obtained via false pretenses to be leased".
Is it cheaper to lease or buy IPv4 addresses?
It depends on how long you need them. Buying cost a mean of 22 dollars an address in early 2026, after prices fell by half during 2025. A lease is paid for only while you use the block. APNIC's chief scientist puts it as a bet on the market: if demand for IPv4 fades, a tenant is not left holding an asset that has lost its value.
Why are leased IP addresses blocked more often?
Because abusers use them more. In April 2024 leased blocks were about five times as likely as other blocks to be announced by a network on Spamhaus's ASN-DROP list. That list names networks controlled by cybercrime groups or bulletproof hosts. A block also keeps its reputation from one tenant to the next.
Sources
- ARIN and IPv4 Address Leasing, ARIN, 2023-02-23.
- Sublet Your Subnet: Inferring IP Leasing in the Wild (IMC 2024), UC San Diego, IIJ, Georgia Tech, CAIDA, 2024-11.
- IP addresses through 2025, APNIC (Geoff Huston), 2026-01-20.
- The State of IPv4 and the Evolving Transfer Landscape, RIPE NCC, 2025-06.
- RFC 1531: Dynamic Host Configuration Protocol, IETF, 1993-10.
- RFC 2131: Dynamic Host Configuration Protocol, IETF, 1997-03.
- ARIN and Microsoft recognize transfer of IP addresses per community policy, ARIN, 2011-04-15.
- Microsoft spends $7.5m on IP addresses, The Register, 2011-03-24.
- New - AWS Public IPv4 Address Charge + Public IP Insights, AWS, 2023-07-28.
- Prerequisites for BYOIP in Amazon EC2, AWS, 2026-09-19.
- Do Not Route or Peer (DROP), Spamhaus, 2026-09-18.
- NRO combined delegation file (nro-delegated-stats), NRO, 2026-09-19.
- Registry and network country of 4,036 live proxy addresses, HProxy measurement, 2026-09-19.
Back to the full glossary.