ARIN Fraud Reporting Results - 3rd Quarter 2013 [Archived]

OUT OF DATE?

Here in the Vault, information is published in its final form and then not changed or updated. As a result, some content, specifically links to other pages and other references, may be out-of-date or no longer available.

Fraud Reports Received
Date/Ticket Number	Report Type	Actions Taken
20130725-F1312	Non-ARIN Fraud	Informed customer the report was out of scope
20130711-F1284	Report of possible incorrect registration info	Unclear which exact ARIN records, if any, are incorrect. Requested Clarification.
20130715-F1285	Non-ARIN Fraud	Informed customer the report was out of scope
20130726-F1313	Non-ARIN Fraud	Informed customer the report was out of scope
20130812-F1289	Non-ARIN Fraud	Informed customer the report was out of scope
20130816-F1290	Non-ARIN Fraud	Informed customer the report was out of scope
20130809-F1287	Non-ARIN Fraud	Informed customer the report was out of scope
20130801-F1286	Report of possible incorrect registration info	Unclear which exact ARIN records, if any, are incorrect. Requested Clarification.
20130810-F1288	Non-ARIN Fraud	Informed customer the report was out of scope
20130831-F1291	Non-ARIN Fraud	Informed customer the report was out of scope
20130819-F1314	Inaccurate SWIP information	Informed reporter it’s acceptable to use datacenter address; policy doesn’t require the SWIP reflect the end user location.
20130822-F1315	Possible fraudulent Whois information	Investigation ongoing
20130830-F1316	Non-ARIN Fraud	Informed customer the report was out of scope
20130917-F1317	Non-ARIN Fraud	Informed customer the report was out of scope
20130918-F1294	Possible Hijacking	Investigation ongoing
20130921-F1336	Falsified Whois information	Investigation ongoing
20130920-F1295	Falsified Whois information	Investigation ongoing
20130904-F1292	Non-ARIN Fraud	Informed customer the report was out of scope
20130917-F1293	Non-ARIN Fraud	Informed customer the report was out of scope

Total Fraud reports received this quarter = 19

Investigation Results

ARIN received a total of nineteen fraud reports during the 3rd quarter of 2013.

Two of the reports identified possible incorrect registration information in ARIN’s Whois, however, it was unclear to staff exactly which ARIN records, if any, were incorrect. Staff has requested clarification from the reporter on those. One report identified inaccurate SWIP information in ARIN’s Whois, however, upon further research, this turned out not to be the case. ARIN staff informed this reporter that it is acceptable to use a datacenter address; current policy doesn’t require the SWIP to reflect the physical end user location. There were four additional reports related to fraud; one hijacking and three falsified Whois information reports. All four of these require further research, which staff continues to work on.

Twelve fraud reports received during this quarter were reports of incidents related to phishing, spam, identity theft, etc. ARIN did not investigate any of these reports, because they are outside the scope of ARIN’s mission. ARIN’s response to each of these reports was to notify the reporter that the fraud reporting process is restricted to matters specifically related to ARIN’s mission and area of authority such as false utilization reporting, number resource hijacking in ARIN’s database, and other activity involving fraudulent submissions to ARIN or fraudulent changes to data in ARIN’s Whois. In each of these report responses, ARIN staff provides additional useful information, including information on querying Whois, contact information for the network operator associated with a given IP address, etc. No further action was taken.