Server locked & RIAA noticed


There was a notice issued by RIAA which caused our server to get locked for some time. Our server doesn’t have any content as mention in below text.

Our server only have open source ERPNext, and developer got idea that this is happening as we are using cloud flare DNS.

I’m attaching the abuse report below, the infringing file is mentioned int he bottom of the report.

January 17, 2019


Dear Sir or Madam:

I am contacting you on behalf of the Recording Industry Association of America, Inc. (RIAA) and its member record companies. The RIAA is a trade association whose member companies create, manufacture and distribute approximately eighty-five (85) percent of all legitimate sound recordings sold in the United States. Under penalty of perjury, we submit that the RIAA is authorized to act on behalf of its member companies on matters involving the infringement of their sound recordings, including enforcing their copyrights and common law rights on the Internet.

We have learned that your service is hosting the below-referenced infringing web site(s) on its network. These site(s) are offering files containing sound recordings which are owned by one or more of our member companies and have not been authorized for this kind of use, including without limitation those referenced at the URL(s) below. We have a good faith belief that this activity is not authorized by the copyright owner, its agent, or the law. We assert that the information in this notification is accurate, based upon the data available to us.

We are asking for your immediate assistance in stopping this unauthorized activity. Specifically, we request that you remove the files from your system, including any mirrored or duplicate copies of those files, and/or that you disable all access to the infringing files and associated links, and that you inform the site operator(s) of the illegality of his or her conduct.

We also ask that you consider the widespread and repeated infringing nature of the site operator(s)’ conduct, and whether the site(s)’ activities violate your terms of service and/or your company’s repeat infringer policy.

This e-mail does not constitute a waiver of any right to recover damages incurred by virtue of any such unauthorized activities, and such rights as well as claims for other relief are expressly retained. In addition, our use of your service’s required notice form, if applicable, is merely meant to facilitate removal of the infringing material listed below and is not meant to suggest or imply that your activities and services are within the scope of the DMCA safe harbor.

You may contact me at RIAA, 1025 F Street NW, 10th Floor, Washington, DC, 20004, Tel. (202) 775-0101, or e-mail [email protected], to discuss this notice. We await your response.

Joseph Stewart
Online Anti-Piracy
RIAA mike posner noah s ark

So you are saying has nothing to do with you?

Yes, Exactly. is not our domain and we are not anywhere connected, but still we got this msg and our server getting locked two times.

That domain seems to be on Cloudflare. My guess, now, would be Cloudflare received an abuse report for that domain and forwarded it to the host in question. If you are not connected at all with this domain I would think there was somewhere a mix up.

I would first contact my host and enquire as to why they think this is related to you. If they cant come up with a justification they should explain themselves. If they can, my assumption would be Cloudflare provided them with one of your IP addresses, in which case the next step would be to contact Cloudflare and clarify why they would mention your IP address when you are - presumably - not involved at all here.

@cloonan, any idea?

Yes, we are using Cloudflare DNS free service.

To avoid this, we bypass the Cloudflare for this server pointing A record. Then also we are getting same problem.

I will raise the tkt as you suggested to Cloudflare.

No, you first need to clarify this with your host, not Cloudflare.

What is your domain?

1 Like

Server at
Dedicated Start-3-L server

Domain name :

Hi @HardikVK, I think that suggestion from @sandro is spot-on. I don’t see anything odd with account settings, IP, nor certificate that would/should lead to the confusion. I suspect they’ll not be able to assist and maybe the next stop would be Joseph Stewart to ask why as to why they contacted you about issues with

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.