[LACNIC/Politicas] Host Sailor, Ltd.

[Ronald F. Guilmette]

Mr. Rojas,

You have responded to my recent request on this mailing list in English.
I will therefore take the liberty of likewise responding back to you
in English.  I send my apologies to any and all mailing list subscribers
for whom this may not be satisfactory.


In message <0947ca9d-719e-0876-5f12-8eda447e127f at lacnic.net>, 
"Sergio Rojas. . ." <sergio at lacnic.net> wrote:

>Thank you for contacting us. We acknowledge receipt of the information 
>you provided, we inform you that we reviewed our records, and when we 
>proceeded to review the request for IP space from Host Sailor, it 
>complied at that time with all the requisites and polices in place in 
>LACNIC.

Mr. Rojas, I am sorry that I am forced to say that although your response
is entirely clear, it is also entirely unsatisfactory and incomplete.

The company at issue, Host Sailor, Ltd. is quite clearly, and by its
own admission, located exclusively and entirely in the Middle East
(UAE) and has only servers and equipment which are located only and
entirely within Europe (Netherlands and Romania).  Numerous WHOIS
records from the RIPE WHOIS server (see below) confirm that the company
has claimed and does currently claim to be located in UAE.  Additional
recent press reports about the sinister and criminal activities of
this company and its customers, which I have already provided links
to here, also describe the company as being located in UAE, and with
servers located *only* in Europe.  Finally, traceroutes directed at
any of the company's IP addresses appear to all end in Europe,
specifically in the Netherlands or Romania.

Now, despite all of this mountain of evidence, you, in your capacity
as the last-listed operative of the "Services Department" of LACNIC
(http://www.lacnic.net/en/web/lacnic/staff) have asserted the claim
that this company, Host Sailor, Ltd., has "complied at that time
with all the requisites and polices in place in LACNIC."  You make
this assertion, and yet you do not even name *any* of the specific
LACNIC policies which you claim this company has "complied" with,
let alone give any information about HOW they complied.

Very well.  Let us not even consider, look at, or even discuss HOW
this crooked fiction of a company may or may not have "complied"
with the applicable LACNIC "requisites and polices".  At this point,
I do not even care about HOW they did that.  I will instead ask you
JUST and ONLY to identify which specific "requisites and polices"
you are asserting this company has complied with.  What are these,
and where may they be viewed online?

Or are you telling me that even the LACNIC policies are secret?  Is
LACNIC a society of secrets, like the Freemasons?

Or is LACNIC more like Mossack Fonseca?

If you cannot or will not even identify which LACNIC policies this
criminal-hosting company, Host Sailor, has allegedly "complied" with...
a company that has already been publically ``outted'' by both Brian Krebs
*and* also by TrendMicro as one that is supporting hackers breaking into
GOVERNMENTS (e.g. Germany, UAE and others)... then I must instead ask
Mr. Ernesto Majó, who I am CC'ing on this response, to do so.

LACNIC may decide to protect this criminal-hosting company, but I
believe that LACNIC has a responsibility, both the public and even
LACNIC's own members, which requires LACNIC to at least say which
policies this crooked company has allegedly "complied" with, and when.


Regards,
Ron Guilmette


P.S.  The company itself provides its actual location (in UAE) near the
bottom of its own corporate home page (https://hostsailor.com/)

Here also is a list of RIPE WHOIS records that explicitly contain the
company's correct and actual location (in UAE):

    AF11712-RIPE
    AS60117
    EU-HOSTSAILOR-20140124
    HSLR1-RIPE
    MNT-HS

And here is a list of company-owned domain names that also have WHOIS
records that say that the company is located in UAE:

    hostingsailors.com
    hostsailor.com
    hostsailor.net
    ibereg.net

Last but not least, here is a LIST of official LACNIC WHOIS records that
also tell everyone EXACTLY where the company is _actually_ located:

    HOA7
    HOM16
    HOT10

Your own (LACNIC) official WHOIS records give the real location of the
company, and it is NOT within LACNIC territory.  So I ask again, what
policies has this phony hacker-supporting company "complied" with?  The
company does not even have a working phone number!  Not anywhere!  It
is only even a fictitious shell company, even in UAE.  And yet LACNIC
gives this crooked company *two* /22 blocks out of LACNIC's "exhausted"
supply of IPv4 addresses!

You give these blocks to a company that does not even have *any* actual
presence in, or equipment in, or any actual offices in LACNIC territory
and then you have the audacity to claim that this company has "complied"
with LACNIC policies!  So I ask again, which are these insane policies? 
Where may I read them for myself?

I want to read for myself the policy that says that LACNIC shall give
ouit IP addresses to fake and criminal-supporting companies that are
not even located in the LACNIC territory, even while legitimate companies
that *are* inside of the LACNIC region are STARVING for those same IPv4
addresses.