<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">There are currently 246 entries on the waiting list that were there prior to the suspension. Maybe some thought should go into allowing those organizations to get their requested minimum acceptable prefix size using the 500k addresses
ARIN is reclaiming. Anything that was added to the list after Feb 7 2019 ( the date the suspension was posted) would be subject to the new policy, whatever that may be. <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Tom Pruitt <o:p></o:p></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> ARIN-PPML <arin-ppml-bounces@arin.net> <b>On Behalf Of
</b>Tom Fantacone<br>
<b>Sent:</b> Thursday, May 16, 2019 9:01 AM<br>
<b>To:</b> John Curran <jcurran@arin.net><br>
<b>Cc:</b> arin-ppml <arin-ppml@arin.net><br>
<b>Subject:</b> Re: [arin-ppml] Advisory Council Recommendation Regarding NRPM 4.1.8. Unmet Requests<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">At 06:18 PM 5/15/2019, John Curran wrote:<br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">On 15 May 2019, at 2:47 PM, Tom Fantacone <<a href="mailto:tom@iptrading.com">tom@iptrading.com</a>> wrote:<br>
> If we remove the waiting list activity of this one fraudster, how much<br>
> "statistically likely" fraud is left?<br>
> Was this one bad actor so bad that he accounted for almost all the likely<br>
> fraud on the waiting list?<br>
> Do we still even have a waiting list problem?<br>
<br>
Approximately half of the address blocks that were received from the waiting list and subsequently transferreed are affiliated with MICFO entities.<o:p></o:p></p>
</blockquote>
<p class="MsoNormal"><br>
That's a lot of addresses and a high percentage of all waiting list allocations. The genesis of ARIN suspending the waiting list and requesting/recommending changes to it to prevent fraud was the appearance of "likely fraud" based on the behavior of a small
handful of bad actors robbing the waiting list of a large number of addresses. Am I right to assume that there was really one bad actor (with a handful of bad aliases)?<br>
<br>
Obviously ARIN cannot state with certainty that there is no other fraud on the list, but if Micfo and its entities had never done what they did, would ARIN have even seen a problem with the waiting list?<br>
<br>
John Sweeting's presentation of suspected waiting list abuse is here:<br>
Youtube:<br>
<a href="https://www.youtube.com/watch?v=MJHgs4wWO58">https://www.youtube.com/watch?v=MJHgs4wWO58</a><br>
Transcript:<br>
<a href="https://www.arin.net/vault/participate/meetings/reports/ARIN_42/ppm1_transcript.html#anchor_5">https://www.arin.net/vault/participate/meetings/reports/ARIN_42/ppm1_transcript.html#anchor_5</a>
<br>
<br>
If virtually all this misbehavior was this one guy, and he's been stopped, do we still want to change the waiting list system and hurt the overwhelming majority of honest players?<br>
<br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">> Perhaps we still want to take strong measures to prevent this from<br>
> happening in the future, but before making that determination, I'd like<br>
> to know the answers to the above<br>
> <br>
> And on a related note, can anyone at ARIN tell us the total aggregate<br>
> space that is currently being requested on the waiting list?<br>
<br>
The entire waiting list is available here - <a href="https://www.arin.net/resources/guide/ipv4/waiting_list/">
https://www.arin.net/resources/guide/ipv4/waiting_list/</a><o:p></o:p></p>
</blockquote>
<p class="MsoNormal"><br>
Thanks, John. I was looking for totals but the list was easy enough to import into a spreadsheet and tally up. By my count the space being requested totals to roughly 825K addresses, and about 775K is the "minimum acceptable size" total. The 500K addresses
ARIN is reclaiming will go a long way in satisfying that demand.<br>
<br>
Are any of the existing waiting list requests from Micfo entities or have those already been scrubbed?<br>
<br>
<br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">Thanks!<br>
/John<br>
<br>
John Curran<br>
President and CEO<br>
American Registry for Internet Numbers<o:p></o:p></p>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>