Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


UrDN is dead.
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

UrDN is dead.

Guys,

Yesterday I found that my VM is inaccessible, then I found that their whole range (91.220.163.x) is null routed everywhere...

When I tried to search the IP on bgp.he.net, no results, it no longer shows their own ASN.

So, I think UrDN is no longer alive...

This may be more serious than a simply de-peer.

«1

Comments

  • ZeastZeast Member
    edited October 2015

    http://www.urdn.com.ua/

    29 October
    
    The security service of Ukraine (SBU) has orchestrated a raid and stole all local servers and network equipments including machines which do not belong to us.
    
    During the intervention the SBU prohibited us from calling lawyers and other legal assistance.
    
    The SBU used falsified pseudo evidences of malware hosting to justify their operation. The purpose was to link us with the creating and the spreading ofmalwares.
    
    Their actions are motivated by the search for money but UrDN has insignificants revenues and mostly sponsor nonprofit projects.
    
    Those actions have became frequent over the previous months as the government developed new corruption schemes.
    
    The SBU tried to sequestrate the team but we have been able to reach out for help. At the moment we have only limited ways to communicate but we will inform you on the situation. UrDN will never pay any bribe even if it could.
    
    We will do our best to get the machines back.
    
    It's with a lot of emotions that we would like to apology to all our friends and customers.
    
  • Now their site has revived, with some......

  • NyrNyr Community Contributor, Veteran

    Well, it's Ukraine after all...

  • WilliamWilliam Member
    edited October 2015

    "stole" lol - He should have known how much power UA police has (read: absolute), his own problem in the end - You can't have both sides of the cake, promising "secure" hosting but not bribing your local police. Anyone who believes the legal system in UA/RU works without either major influence or bribing someone (or both) is just plain stupid, even if you don't do it now you still need to plan for the case.

    They will get their servers back.... in 5-10 years, same time when hosting.ua gets them back (if they don't burn down a 3rd time meanwhile) :>

    Thanked by 1Rolter
  • Seems like an interesting company. But they probably won't have their servers back.. Dunno how much machines they had though, maybe they can get new ones and get back running? Doesn't seems like a good context to host a website though...

    William said: They will get their servers back.... in 5-10 years, same time when hosting.ua gets them back (if they don't burn down a 3rd time meanwhile) :>

    Oh, so they had to start again from scratch with new hardware?

  • WilliamWilliam Member
    edited October 2015

    No, hosting.ua only had a few servers confiscated (i think it was one rack or shelf) but never saw them again (2003? something like that) - Which actually is not unusual, 3-5y return terms are also normal in western Europe (US depends i heard, but unlike in EU they seem to have easier options there to simply never return your HW at all, like say it was paid with illegal money). This note was more of a joke on UA DC quality :)

    Here are pictures of Hosting.ua fire #2 btw:

    Server confiscations are not that unusual, any DC will have to deal with one at one point, large companies even more so. Usually once it gets to that point you already had court orders for other, unrelated, things and some connection to your police/gov due to that and they are lenient as they know you are only ISP yourself - They come confiscate either single server (happened to me in AT at EDIS), the HDDs (happened to me in CZ/BG) or the customers entire rented/colo infra (UK, but i actually got that back after !!3!! weeks when they cloned the HDDs and verified the servers are off the shelf HW and not modified, so they can use their own).

    To get your entire DC confiscated - if we just assume UrDN had more than a rack or a few racks, we don't know in the end - You need, even in RU/UA, do some serious shit or have (medium level or better, in this case high level as SBU is not just random police but "elite police") connected enemies. In general it seems no one in RU/UA cares much about crimes that don't affect them local but it is very easy to get into crossfire for political reasons or when EU/US assert pressure by Interpol/Europol (which obviously works in UA much better than in RU) or they get a public outcry about it (like NYT blaming Rostelecom for not shutting down botnets - never happened, just an example - is very bad PR, so they likely act).

    In the end the gov decides based on political factors as well as damage control for itself: Does it affect locals [if we don't do it] - Does it affect our relationship with this country/org that wants it [if we don't do it] - Does it affect us [gov] if we close it down (aka loss of tax or owned by someone connected, extremely popular and lot of media influence and similar stuff).

    Law does not work "black and white" the more eastwards you go in Europe, hell, it does not even here in western Europe sometimes, just the money you need for your favoured outcome is higher.

    If police came for ALL UrDN servers i would not be surprised if they now also closed their bank accounts and i doubt any local upstream is willing to deal with a company that has major problems with the gov (and DCs probabyl even less if they have to assume SBU comes and rapes their entire infra as well).

    Thanked by 22bb3 IceCream
  • Ukraine isn't safe anymore for a human being nor for hosting anything with them. The corrupt government of the part that is calling themselves "Ukraine" are U.S puppets like the German government. They will do everything to please their master Obama just not to fuck up their military support that they use to kill their own people in Donbass. Their own folks is even fedup with this scum but the government is ignoring it. Nazi infested bunch that has somehow woken up a little and now starts fighting their volunteer nazi bats like Aidar and et cetera to get rid of the nazi infestation. Poropig owns huge parts of the Ukraine banks and has a shit load of money and gets more and more. So he does not need anyone breaking into this business and trying to reduce his earnings.

    I hightly doubt that it was SBUs own will to take down the servers. Most likely the U.S has had its fingers in the game or something Russian was on the server. I mean there are so many hosts in Ukraine that host shitload of malware, botnets and et cetera. Does someone care for them? No, only really a few get taken down.

    @William please don't compare Ukraine with Russia in this terms.

  • WilliamWilliam Member
    edited October 2015

    Hidden_Refuge said: @William please don't compare Ukraine with Russia in this terms.

    Why not? The law works the same essentially (and not even 26 years ago the law WAS the same entirely), both governments are corrupt to the core since Soviet times, difference is solely that Russia has money to back the shit up they try to stir while Ukraine is a bankrupt country that tries hard to be important internationally and fails because it simply is not. Same shit under different name.

    Hidden_Refuge said: that they use to kill their own people in Donbass

    ....? You know the other side is the Russian army (the infamous "soldiers on vacation", lulz, RU does not even try to hide anything) and their supporters? Alone by definition you loose your citizenship once you join a foreign force - These people are not Ukrainians anymore. These are enemy combatants armed by a foreign government. Both sides kill civilians either accidentally or intentionally (obviously no one will admit that, they just say it was an accident), this happens in any war and is far less present in UA/RU conflict than in SY+IQ/IS (or anything in Africa: Boko Haram, Congo, Republique Centrafricaine, Somalia) which basically slaughter them at all sides.

    Hidden_Refuge said: are U.S puppets like the German government.

    heh, typical bullshit from uninformed people, you should be ashamed for simply stating that when you live within DE-AT - It is simply not true, the US does not have more influence here than in any other country that is not an official US puppet, it is actually far less as can be seen on the DE/AT gov routinely complaining about issues and by now locking the US out of many things, which a puppet state would never do.

    This is also clearly the wrong thread for that; you can continue in the Cest Pit.

    Thanked by 2IceCream Inglar
  • Is Hidden_Refuge the new ftpit?

    Thanked by 2IceCream William
  • Thanks for the precisions, @William

    Running a DC in Ukraine seems quite challenging..

  • A long tine ago when I worked in an IT office in Ukraine we had similar issues. Its impossible to do honest work there. Thankfully I managed to move to Europe now.

  • joepie91joepie91 Member, Patron Provider

    William said: if we just assume UrDN had more than a rack or a few racks, we don't know in the end

    They only had a /24.

  • There was a complaint thread about them a while ago.

    The OP saw urdn rebranding to:
    urDN, where your mail is urProblem

    Thanked by 1theroyalstudent
  • I used them a few months ago. The service was reliable. Doing everything manually and your VM going down then presumably terminated for non-payment due to manual Paypal invoicing is what turned me off from re-ordering the service.

  • SetsuraSetsura Member
    edited November 2015

    Any recommendation on a replacement host in Ukraine @william ?
    Besides hosting.ua that is.

  • Do anyone used services from hvosting.ua?

    I saw "eMule Security" hosted 3 eMule servers on them....

  • Setsura said: Any recommendation on a replacement host in Ukraine @william ? Besides hosting.ua that is.

    Colocall (nice DC), NetAssist (but mainly enduser ISP), Ukrtelecom (for larger colo/dedi)

  • Scary stuff, I wish them good luck and I hope things will be back to normal at some point!

  • ru_tldru_tld Member, Host Rep

    William said: Why not? The law works the same essentially (and not even 26 years ago the law WAS the same entirely), both governments are corrupt to the core since Soviet times, difference is solely that Russia has money to back the shit up they try to stir while Ukraine is a bankrupt country that tries hard to be important internationally and fails because it simply is not. Same shit under different name.

    I will be glad if you can provide to us any links to news about seizure of hardware from entire provider/datacenter in Russia.
    As for Ukraine such activity from SBU/police is more common thing. But I don't think affected providers are so "clean" as they want you to think they are.

    Thanked by 1rm_
  • As joepie91 said - UrDN had only a /24 (or maybe a bit more, like a /22) - So i doubt they had much more than 2 racks. 2 rack seizures are common in RU as well, even Yandex and VKontakte had that happen before (both for child porn). Hardly "entire datacenter".

  • ru_tldru_tld Member, Host Rep

    Are you about seizure of 250 vkontakte servers colocated at Kiev, UA?

    http://www.ntv.ru/novosti/627141/

    I can't find any information in media about Yandex that you've mentioned. Can you provide link to media coverage of this incident?

    Thanked by 2rm_ vRozenSch00n
  • urdn.com.ua and ns3.urdn.com.ua host an IRC server for http://www.lucidchat.net O.o

  • Anything new? Anyone got more information? @UrDN ?

  • Hi,

    I confirm that all our servers were stolen as well as these of our customers. Additional network which we operated including servers which all belonged to one customer have also been stolen.

    We are not alone, within the week at least 15 other organizations have been robbed with always the same process.

    We have understood the loophole and we are now working on getting back all the machines.

    UrDN will return but due to finance the future is uncertain.

    Thanked by 2linuxthefish Nyr
  • alexnjhalexnjh Member
    edited November 2015

    @UrDNbkp said:
    Hi,

    I confirm that all our servers were stolen as well as these of our customers. Additional network which we operated including servers which all belonged to one customer have also been stolen.

    We are not alone, within the week at least 15 other organizations have been robbed with always the same process.

    We have understood the loophole and we are now working on getting back all the machines.

    UrDN will return but due to finance the future is uncertain.

    Stolen as you mean the datacenter got broken in or got confiscated but authorities?

  • masterqqq said: Stolen as you mean the datacenter got broken in or got confiscated but authorities?

    Stolen is the correct word. The action was done by the Security Service of Ukraine which exploited a loophole in order to take all the hardware, originally they would ask for money then oblige us to cooperate and then sell the hardware.

    The complete procedure was illegal and we are reversing it.

  • @UrDNbkp said:
    Hi,

    I confirm that all our servers were stolen as well as these of our customers. Additional network which we operated including servers which all belonged to one customer have also been stolen.

    We are not alone, within the week at least 15 other organizations have been robbed with always the same process.

    We have understood the loophole and we are now working on getting back all the machines.

    UrDN will return but due to finance the future is uncertain.

    What happened to http://www.lowendtalk.com/profile/UrDN O.o

  • It's still here but won't be accessed before we have recovered the machines.

  • @UrDNbkp said:
    It's still here but won't be accessed before we have recovered the machines.

    good luck guys

Sign In or Register to comment.