[unisog] another round of bogus DMCA notices

George C. Russ george.russ at citadel.edu
Wed Nov 8 20:57:23 GMT 2006

arp cache on routers will tell you. keep a history. cattools.

-----Original Message-----
From: unisog-bounces at lists.dshield.org
[mailto:unisog-bounces at lists.dshield.org] On Behalf Of Dave Dittrich
Sent: Tuesday, October 31, 2006 12:07 PM
To: UNIversity Security Operations Group
Subject: Re: [unisog] another round of bogus DMCA notices

Michael Holstein wrote:
> I know this has happened several times in the past, but today I got a 
> round of DMCA notices for non-existent IP addresses.
> Is anybody saving these and their supporting evidence (that they're

What do you mean by "bogus" or "non-existent?"  If the IP addresses
are valid within your netblocks, but are just not active at the time
you look (or you are just doing "ping IP-ADDRESS" to verify, I
would assume some clever miscreant has simply decided to start
doing short-lived IP aliasing, firewalling, or something else
designed to make verification of piracy harder.  You may have
to start logging traffic across your border to verify the claim.

Dave Dittrich                          Information Assurance Researcher,
dittrich at u.washington.edu              The iSchool
http://staff.washington.edu/dittrich   University of Washington

PGP key      http://staff.washington.edu/dittrich/pgpkey.txt
Fingerprint  FE97 0C57 0843 F3EB 49A1  0CD0 8E0C D0BE C838 CCB5
unisog mailing list
unisog at lists.dshield.org

More information about the unisog mailing list