[as112-ops] DMCA claim from Cloudflare

[Shane Kerr]

Matt,

On 07/03/2024 22.47, Matthew Pounsett wrote:
> 
> I got a weird email from CloudFlare's abuse department today.  Apparently someone is hosting a copyright-violating web site at 192.31.196.192, which is in one of the DNAME blocks reserved in RFC 7535.  CF got a DMCA complaint from someone, and passed it on to OARC.
> 
> I tried to explain the issues with this to their abuse desk.  I haven't heard back yet, so I'm unsure whether I was successful at pointing out why sending us the abuse complaint is problematic, or how they should go about finding the real location of the web site.
> 
> Anyone announcing the DNAME blocks might want to have a look at your servers though... I wouldn't be surprised if this is someone hosting a pirate site on a hacked DNS server, unaware that it won't be globally reachable.

You are correct that is is possible there is a hacked server - thank you 
for raising this!

It is also possible that someone is just hijacking the BGP prefix for 
their own purposes, not caring too much if it is not globally visible.

Either highlights a problem with the AS112 model, which is that nobody 
is in charge. Although the ultimate outcome of this - ISPs and other 
organizations blocking the AS112 IP addresses - is probably a good thing 
in the end, since it would just mean less junk traffic. 😆

Cheers,

--
Shane
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x3732979CF967B306.asc
Type: application/pgp-keys
Size: 11519 bytes
Desc: OpenPGP public key
URL: <https://lists.dns-oarc.net/mailman/private/as112-ops/attachments/20240308/e8d9cad1/attachment.key>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <https://lists.dns-oarc.net/mailman/private/as112-ops/attachments/20240308/e8d9cad1/attachment.sig>