[LACNIC/Politicas] Host Sailor, Ltd.

Thu Aug 11 21:07:13 BRT 2016

Mr. Guilmette,

As your investigation probably let you know, LACNIC maintains its 
policies public and you can find them in the following link 
http://www.lacnic.net/en/web/lacnic/manual

According to LACNIC policy (1.11),   “The numbering resources under the 
stewardship of LACNIC must be distributed among organizations legally 
constituted within its service region and mainly serving networks and 
services operating in this region. External clients connected directly 
to main infrastructure located in the region are allowed.”

As mentioned in our previous response, HostSailor provided legal 
documentation demonstrating their legal presence in Belize, and 
presented a plan detailing how they will use the resources in the 
region, complying at that moment with the requirements established in 
the policies developed by our community.

We appreciate the information you have provided about the utilization of 
these resources outside the Latin America and Caribbean region and we 
are going to further investigate the matter and follow our policies in 
that process.

Regarding your allegations of illegal activities by HostSailor, even if 
they are effectively accurate, we do not have established any 
procedures, policy nor contractual right to proceed, unless ordered by a 
competent authority. Furthermore, LACNIC´s role is primordially that of 
a technical coordinator, it is not our job nor do we have the resources 
to police the internet, and much less its content.

As explained in the previous paragraph we are following our role the 
community has defined in the policies for the assignment of internet 
addresses, so we kindly request to keep this mailing list for the 
purposes it was established (update or propose a new one).

Finally, the fact that the person who responds to your questions is 
listed at the bottom of an alphabetically ordered list, doesn’t make me 
less authorized to answer you, if that is what you implied by your tone 
in your message. I’m in charge of analyzing IP requests in LACNIC and 
have the authority to answer you. I request you to communicate with 
respect to me or anyone in this list if you want to keep this dialogue.

Best regards,

Sergio Rojas. . .

El 10/08/16 a las 23:51, Ronald F. Guilmette escribió:
> Mr. Rojas,
>
> You have responded to my recent request on this mailing list in English.
> I will therefore take the liberty of likewise responding back to you
> in English.  I send my apologies to any and all mailing list subscribers
> for whom this may not be satisfactory.
>
>
> In message <0947ca9d-719e-0876-5f12-8eda447e127f at lacnic.net>,
> "Sergio Rojas. . ." <sergio at lacnic.net> wrote:
>
>> Thank you for contacting us. We acknowledge receipt of the information
>> you provided, we inform you that we reviewed our records, and when we
>> proceeded to review the request for IP space from Host Sailor, it
>> complied at that time with all the requisites and polices in place in
>> LACNIC.
> Mr. Rojas, I am sorry that I am forced to say that although your response
> is entirely clear, it is also entirely unsatisfactory and incomplete.
>
> The company at issue, Host Sailor, Ltd. is quite clearly, and by its
> own admission, located exclusively and entirely in the Middle East
> (UAE) and has only servers and equipment which are located only and
> entirely within Europe (Netherlands and Romania).  Numerous WHOIS
> records from the RIPE WHOIS server (see below) confirm that the company
> has claimed and does currently claim to be located in UAE.  Additional
> recent press reports about the sinister and criminal activities of
> this company and its customers, which I have already provided links
> to here, also describe the company as being located in UAE, and with
> servers located *only* in Europe.  Finally, traceroutes directed at
> any of the company's IP addresses appear to all end in Europe,
> specifically in the Netherlands or Romania.
>
> Now, despite all of this mountain of evidence, you, in your capacity
> as the last-listed operative of the "Services Department" of LACNIC
> (http://www.lacnic.net/en/web/lacnic/staff) have asserted the claim
> that this company, Host Sailor, Ltd., has "complied at that time
> with all the requisites and polices in place in LACNIC."  You make
> this assertion, and yet you do not even name *any* of the specific
> LACNIC policies which you claim this company has "complied" with,
> let alone give any information about HOW they complied.
>
> Very well.  Let us not even consider, look at, or even discuss HOW
> this crooked fiction of a company may or may not have "complied"
> with the applicable LACNIC "requisites and polices".  At this point,
> I do not even care about HOW they did that.  I will instead ask you
> JUST and ONLY to identify which specific "requisites and polices"
> you are asserting this company has complied with.  What are these,
> and where may they be viewed online?
>
> Or are you telling me that even the LACNIC policies are secret?  Is
> LACNIC a society of secrets, like the Freemasons?
>
> Or is LACNIC more like Mossack Fonseca?
>
> If you cannot or will not even identify which LACNIC policies this
> criminal-hosting company, Host Sailor, has allegedly "complied" with...
> a company that has already been publically ``outted'' by both Brian Krebs
> *and* also by TrendMicro as one that is supporting hackers breaking into
> GOVERNMENTS (e.g. Germany, UAE and others)... then I must instead ask
> Mr. Ernesto MajÃ³, who I am CC'ing on this response, to do so.
>
> LACNIC may decide to protect this criminal-hosting company, but I
> believe that LACNIC has a responsibility, both the public and even
> LACNIC's own members, which requires LACNIC to at least say which
> policies this crooked company has allegedly "complied" with, and when.
>
>
> Regards,
> Ron Guilmette
>
>
> P.S.  The company itself provides its actual location (in UAE) near the
> bottom of its own corporate home page (https://hostsailor.com/)
>
> Here also is a list of RIPE WHOIS records that explicitly contain the
> company's correct and actual location (in UAE):
>
>      AF11712-RIPE
>      AS60117
>      EU-HOSTSAILOR-20140124
>      HSLR1-RIPE
>      MNT-HS
>
> And here is a list of company-owned domain names that also have WHOIS
> records that say that the company is located in UAE:
>
>      hostingsailors.com
>      hostsailor.com
>      hostsailor.net
>      ibereg.net
>
> Last but not least, here is a LIST of official LACNIC WHOIS records that
> also tell everyone EXACTLY where the company is _actually_ located:
>
>      HOA7
>      HOM16
>      HOT10
>
> Your own (LACNIC) official WHOIS records give the real location of the
> company, and it is NOT within LACNIC territory.  So I ask again, what
> policies has this phony hacker-supporting company "complied" with?  The
> company does not even have a working phone number!  Not anywhere!  It
> is only even a fictitious shell company, even in UAE.  And yet LACNIC
> gives this crooked company *two* /22 blocks out of LACNIC's "exhausted"
> supply of IPv4 addresses!
>
> You give these blocks to a company that does not even have *any* actual
> presence in, or equipment in, or any actual offices in LACNIC territory
> and then you have the audacity to claim that this company has "complied"
> with LACNIC policies!  So I ask again, which are these insane policies?
> Where may I read them for myself?
>
> I want to read for myself the policy that says that LACNIC shall give
> ouit IP addresses to fake and criminal-supporting companies that are
> not even located in the LACNIC territory, even while legitimate companies
> that *are* inside of the LACNIC region are STARVING for those same IPv4
> addresses.
>
>
> _______________________________________________
> Politicas mailing list
> Politicas at lacnic.net
> https://mail.lacnic.net/mailman/listinfo/politicas