[anti-abuse-wg] Hijack Factory: AS201640 / AS200002

In message <20141107233123.GC58817 at cilantro.c4inet.net>, 
Sascha Luck <lists-ripe at c4inet.net> wrote:

>On Thu, Nov 06, 2014 at 07:35:28PM -0800, Ronald F. Guilmette wrote:
>>in such contracts, perhaps along with some language that makes it clear
>>that _willful_ violations will be prosecuted to the full extent of the
>>law (as contract fraud).
>
>I'm pretty certain, most members do *not* want higher fees in order
>to prosecute dead-horse lawsuits. 

To be clear, I did not say that RIPE should routinely be initiating
lawsuits.  However in cases such as this present one with AS201640,
I do think that RIPE NCC would have a lot more leverage in its efforts
to cause the hijacking (or squatting) to quickly stop if they were in
a position to _threaten_ the perpetrator with massive damages.

For example, back when I first noticed this situation, On October 31st,
AS201640 was announcing illegitimate routes to 48,384 IPv4 addresses.
But it appears that it may have been doing something like that for a
period of perhaps two full months.

Now, imagine that MEGA - SPRED's contract with RIPE said that it would
pay liquidated damages of, say, one euro for each day and for each IP
address that was improperly routed.  You do the math... forty eight
thousand euros times sixty days.  If that was the penalty, don't you
think that a simple phone call or e-mail from RIPE NCC to MEGA - SPRED,
reminding them of the contract terms, might possibly have a helpful
effect in bringing this situation to a speedy close?  I do.

One thing _is_ perfectly clear and apparent... Whatever _is_ being done
now to try to stop this madness, and MEGA - SPRED's *ongoing* route
squatting (and the help it is providing to spammers and who knows what
other sorts of criminals), it is not working.  AS201640 is *still*
announcing fully eight bogus routes as we speak.

If you think this is all just fine, then yes, the solution is to do
absolutely nothing.  So far, all of RIPE seems to be very good at
doing exactly that.



Regards,
rfg