Apocalypse (possibly) incoming....

Billing issue resolved, servers no longer threatened with shutdown.

As you were.

I know most of you will have forgotten that's actually what the thread was about. Rather than ingo obsessing about Mel B again.

Support ticket thread, explaining outage. Read bottom up, all times are in yankee doodle.

Staff

15/07/25 16:40:35

Hello,

Thank you for your cooperation, and sorry for the confusion. I have reviewed your last reply and unlocked the server as requested. We noticed a typo in the abuse report: 146.0.36.11=5. However, please understand that we do not tolerate IPTV under any circumstances, which is why our system automatically locked the server.

The server is currently in normal mode. I invite you to take a look and confirm if everything is working properly. Feel free to contact us if there are any additional issues.

We remain at your disposal if you have further questions.
Regards,
My location: North America

tricky

Client

15/07/25 16:23:54

No response. Please escalate this ticket.

tricky

Client

15/07/25 8:52:47

There has not been a timely response to my previous matter, and my server remains incorrectly suspended (please read my previous message interpreting the abuse report).

Please Escalate this matter.

tricky

Client

15/07/25 4:12:54

Please confirm that this suspension has been made in ERROR (see below) and restore full service to my server immediately.

Here is an explanation of how this MISTAKE most likely has been made.

The abuse report as forwarded to me is included (again - Appendix 1) at the bottom of the page.

You will note that some spurious formatting is included in the report. Including the addition of an "=" to the end of each line. This is key.

In the first reporting including an ip address:

"The actual host for 7yhwsfb[.]xyz are the following IP addresses. 146.0=
.36.115."

There are two key points to take from this:

1. The end of line formatting "=" occurs in the middle of the ip address, but it is clear that 146.0.36.115 is the reported address.
   2. There is only a single ip address (146.0.36.115) actually being reported.

The report goes on to say how the abuse can be verified - note, this is exclusively in relation to verifying the abuse of the reported ip address (of which there is only one - 146.0.36.115):

"The actual host for 7yhwsfb[.]xyz are the following IP addresses. 146.0=
.36.115. Using the following command, you can confirm the site in question=
is hosted at that IP address: curl -v -H "Host: 7yhwsfb[.]xyz" 146.0.36.11=
5/=0A=0ABelow is the information we received:"

Key points:

1. In this final case of an ip address being quoted the end of line formatting "=" comes before the trailing '5'. The '5' occurs at the beginning of the next line.
2. This report only ever refers to the one ip address (146.0.36.115)
   3. The inclusion of my servers ip address in a suspension is purely as a result of a misreading of the report.

Please confirm that this suspension has been made in ERROR and restore full service to my server immediately.

Appendix 1

Abuse report email as forwarded to me:

Hello,=0A=0ACloudflare received a DMCA Copyright Infringement complaint reg=
arding 7yhwsfb[.]xyz=0A=0APlease be aware Cloudflare offers network service=
solutions including pass-through security services, a content distribution=
network (CDN) and registrar services. Due to the pass-through nature of ou=
r services, our IP addresses appear in WHOIS and DNS records for websites u=
sing Cloudflare. Cloudflare is generally not a website hosting provider, an=
d we cannot remove material from the Internet that is hosted by others.=0A=
\=0AThe actual host for 7yhwsfb[.]xyz are the following IP addresses. 146.0=
.36.115. Using the following command, you can confirm the site in question=
is hosted at that IP address: curl -v -H "Host: 7yhwsfb[.]xyz" 146.0.36.11=
5/=0A=0ABelow is the information we received:=0A=0AReporter's Name: SPORT T=
V PORTUGAL, S.A.=0AReporter's Email Address: adce.copyright@gmail.com=0ARep=
orter's Address: Rua Pedro e In=C3=AAs, Lote 2.08.01, Parque das Na=C3=A7=
\=C3=B5es, Lisboa, Lisbon, Lisbon, Portugal=0A=0AReported URLs:=0Ahxxp://7yh=
wsfb[.]xyz:8080/[.][.][.]/650=3Ftoken=3D[.][.][.]=0A=0A=0AOriginal Work: SP=
ORT TV PORTUGAL, S.A (SPORT TV), is a Portuguese sports-oriented premium ca=
ble and satellite television network with seven premium channels in Portuga=
l, one sports news channel, and one channel in Portuguese-speaking Africa. =
SPORT TV acquired the original worldwide and multi-platform rights to broad=
cast all the football matches for the Portuguese professional football leag=
ues and Portuguese football cups. SPORT TV is also a rights holder for Port=
ugal, diverse sports audiovisual content rights, such as UEFA, UFC, WRC, WW=
E, NBA, FIFA, SERIE A, FORMULA 1, MOTO GP, etc., including the acquisition =
of all IP rights associates. SPORT TV PORTUGAL, S.A, shall protect its IP r=
ights and will ensure there are no illegal streaming and transmission, incl=
uding (but not limited to) any trademark infringements of SPORT TV brand, n=
ame, logo, and IP Rights.=0A=0A=0APlease address this issue with your custo=
mer.=0A=0ATo respond to this issue, please reply to abusereply@cloudflare.c=
om.=0A=0ARegards,=0ACloudflare Trust & Safety=0A

tricky

Client

15/07/25 3:04:13

The log by which data centre? Show me the source of the report. The reported domain names HAVE NEVER resolved to my server. That's how I can be 100% sure that there is an error. If one of the servers that is identified as being responsible for abuse is 140.0.36.115 - then I know with certainty how it has happened that my server 140.0.36.11 has been listed for suspension. It's that your systems have led to the trailing '5' being dropped from the end of the server ip address that should have been suspended.

I know this, because you have done it before! Incorrectly then, as now.

My server has never been involved in that activity. The error is the report. I know for a fact that the report is incorrect as a result of the '5' being omitted from the end of the IP address.

Go back and check. You will find that you are wrong.

Then restore my server ASAP.

Staff

15/07/25 1:20:32

Hello tricky,

The log provided by the data center shows two IP addresses: 146.0.36.115 and 146.0.36.11. The IP 146.0.36.11 was in your possession while this abuse report was sent.

While this is the first instance of this type of abuse on your account, you are aware that IPTV is a serious violation of our Terms of Service. We have a zero-tolerance policy for such violations and expect you to cease this activity immediately. Failure to comply may result in further action, including intervention with your other services.

Your server will remain in rescue mode until you back up your data. Here is your rescue mode access:

username : root
password : redacted

Please contact us once you have completed your backup and let us know the OS so that we can reinstall the server.

We remain at your disposal if you have further questions.
Regards,
My location: North America

tricky

Client

15/07/25 0:17:37

I have provided a response to this at 15/07/25 0:08:55\

The abuse report appears to be for the server 146.0.36.115 Which is not my server. The address has been incorrectly transcribed and the the trailing '5'; dropped, and my server incorrectly suspended.

That service has never resolved to my server. My server has never been in breach of the Terms of Service.

Please resolve ASAP.

Staff

15/07/25 0:11:35

Hello,

Your server was flagged and subsequently suspended due to IPTV-related activity, which violates our Terms of Service. We take this type of abuse seriously as it can affect network integrity and compliance with legal regulations.

Please note that we have a strict policy against this type of activity, and we urge you to take appropriate measures to prevent it from happening in the future.

We need your approval that this will not happen again.

We look forward to your response.

We look forward to your response.

Regards,
My location: North America

tricky

Client

15/07/25 0:08:55

There has also been sent an "Abuse Complaint {995095]" apparently from the abuse team. This is complete rubbish. The service mentioned in the the abuse complaint email does not, and never has resolved to this server (or any of my servers).

This is completely spurious and incorrect, and I suspect (as has happened before) the result of someone adding the incorrect IP address to a report.

INVESTIGATE AND CORRECT THIS IMMEDIATELY. YOU HAVE INCORRECTLY SUSPENDED MY SERVICE. NEITHER OF THE TWO STATED GROUNDS ARE CORRECT.

copy of incorrect abuse email - Note that 7yhwsfb.xyz does not, nor never has, resolved to my server. It actually looks like a transcription error where the last '5' has been dropped from the address: 146.0.36.115 and thus my server incorrectly reported. Please resolve ASAP.

"Hello,=0A=0ACloudflare received a DMCA Copyright Infringement complaint reg=
arding 7yhwsfb[.]xyz=0A=0APlease be aware Cloudflare offers network service=
solutions including pass-through security services, a content distribution=
network (CDN) and registrar services. Due to the pass-through nature of ou=
r services, our IP addresses appear in WHOIS and DNS records for websites u=
sing Cloudflare. Cloudflare is generally not a website hosting provider, an=
d we cannot remove material from the Internet that is hosted by others.=0A=
\=0AThe actual host for 7yhwsfb[.]xyz are the following IP addresses. 146.0=
.36.115. Using the following command, you can confirm the site in question=
is hosted at that IP address: curl -v -H "Host: 7yhwsfb[.]xyz" 146.0.36.11=
5/=0A=0ABelow is the information we received:=0A=0AReporter's Name: SPORT T=
V PORTUGAL, S.A.=0AReporter's Email Address: adce.copyright@gmail.com=0ARep=
orter's Address: Rua Pedro e In=C3=AAs, Lote 2.08.01, Parque das Na=C3=A7=
\=C3=B5es, Lisboa, Lisbon, Lisbon, Portugal=0A=0AReported URLs:=0Ahxxp://7yh=
wsfb[.]xyz:8080/[.][.][.]/650=3Ftoken=3D[.][.][.]=0A=0A=0AOriginal Work: SP=
ORT TV PORTUGAL, S.A (SPORT TV), is a Portuguese sports-oriented premium ca=
ble and satellite television network with seven premium channels in Portuga=
l, one sports news channel, and one channel in Portuguese-speaking Africa. =
SPORT TV acquired the original worldwide and multi-platform rights to broad=
cast all the football matches for the Portuguese professional football leag=
ues and Portuguese football cups. SPORT TV is also a rights holder for Port=
ugal, diverse sports audiovisual content rights, such as UEFA, UFC, WRC, WW=
E, NBA, FIFA, SERIE A, FORMULA 1, MOTO GP, etc., including the acquisition =
of all IP rights associates. SPORT TV PORTUGAL, S.A, shall protect its IP r=
ights and will ensure there are no illegal streaming and transmission, incl=
uding (but not limited to) any trademark infringements of SPORT TV brand, n=
ame, logo, and IP Rights.=0A=0A=0APlease address this issue with your custo=
mer.=0A=0ATo respond to this issue, please reply to abusereply@cloudflare.c=
om.=0A=0ARegards,=0ACloudflare Trust & Safety=0A"

tricky

Client

14/07/25 23:52:57

This server has been suspended, apparently because of non-payment.

THIS IS ENTIRELY INCORRECT. PAYMENT IS NOT DUE UNTIL 22 DAYS FROM NOW. ALL INVOICES ARE PAID.

Remove the suspension immediately, and sort your billing systems out. This is not the first time that you have failed to correctly operate your own systems, to my detriment.

Don't know....but it must be the juice, if the Ruski's don't like it.

Not really. It's a known compromise (crap support versus price), and there's a lot of work moving stuff.