Loading story…
ARIN has opened a public consultation on a plan to consolidate its directory services around RDAP and phase out legacy offerings including Whois-RWS, RWhois, and Whois over Port 43. The registry said the change is intended to reduce attack surface, lower operational overhead, and align its services with modern IETF standards, with RDAP positioned as the single standardized replacement for registration data access.
Under the proposal, ARIN would retire the Whois-RWS API after a 180-day outreach period, end RWhois no sooner than 1 January 2028 after providing a migration tool, and retire Whois over Port 43 on or after 1 January 2029 with a two-year sunset window. The consultation remains open until 14 September 2026, and ARIN is asking the community to identify migration barriers, transition requirements, and whether the proposed timelines are workable as it shifts fully to the standards-based RDAP framework documented in STD 95.
See the reporting duties and controls this puts on the clock.
1 event from the most recent confirmed update back to the earliest known activity.
ARIN announced a community consultation on consolidating its directory services around RDAP as the single standardized service and requested feedback on transition barriers, retirement timelines, and customer impacts. The consultation was stated to remain open until 5:00 PM ET on 14 September 2026.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
4 references tracked. Mallory keeps watching after this page renders.
seclists.org
Open sourceseclists.org
Open sourceseclists.org
Open sourcerfc-editor.org
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.