<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div>
<div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">Hello David,</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">There has been an increase in organization and point of contact recovery requests in the past six months. These recovery requests are increasingly targeted at organizations and/or points of contact that have not been maintained
in ARIN’s database for up to ten years or more.</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">ARIN staff uses internal practices developed over the last several years to verify the legitimacy of these requests. Their processing is very similar to the chain of custody and verification work conducted for transfers. We are
finding a larger than usual number of these requests either being denied by ARIN staff or abandoned by the individual who submitted them. An increasing number of these requests appear to be hijacking attempts of legacy IPv4 registrations.</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><br>
</font></div>
<div><font face="Calibri,sans-serif">One thing that might help would be if organizations that have performed acquisitions over the years would be more proactive in updating their registrations at ARIN. This reduces the number of resources that have outdated
information and thus reduces the potential target area in the registry for hijacking attacks.</font></div>
<div><font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">We will be reporting on this and other registration trends we are experiencing at the upcoming ARIN meeting that takes place in April.</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">Regards,</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><br>
</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">Richard Jimmerson</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">CIO & Acting Director of Registration Services</font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif">American Registry for Internet Numbers </font></div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div id="MAC_OUTLOOK_SIGNATURE"></div>
</div>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:12pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span><<a href="mailto:arin-ppml-bounces@arin.net">arin-ppml-bounces@arin.net</a>> on behalf of David Huberman <<a href="mailto:David_Huberman@outlook.com">David_Huberman@outlook.com</a>><br>
<span style="font-weight:bold">Date: </span>Tuesday, March 22, 2016 at 12:03 PM<br>
<span style="font-weight:bold">To: </span>"<a href="mailto:arin-ppml@arin.net">arin-ppml@arin.net</a>" <<a href="mailto:arin-ppml@arin.net">arin-ppml@arin.net</a>><br>
<span style="font-weight:bold">Subject: </span>[arin-ppml] Hijackings on the increase?<br>
</div>
<div><br>
</div>
<blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0 0 0 5;">
<div><style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Hello,</p>
<p><br>
</p>
<p>I'm at the ARIN On the Road event in Austin, TX today. Eddie Diego from the ARIN staff is giving an excellent talk on registration services. He has pointed out in his slides, however, that hijackings of address blocks in Whois is on the rise.</p>
<p><br>
</p>
<p>Can someone at ARIN please discuss this a little on PPML -- data, things we can do to minimize risk, etc. </p>
<p><br>
</p>
<p>Thanks,</p>
<p>David</p>
</div>
</div>
</div>
</blockquote>
</span>
</body>
</html>