HAZI.ro | 25% LIFETIME VPS/VDS Servers | Extra IPs 0.75€/mo

Comments

• yoursunny Member, IPv6 Advocate

  July 2022

  A single YABS triggers "permanent mitigation" that your network speed would decrease to less than 20 Mbps.
  A single "abuse", including zero day attack that is not your fault, causes service deletion with 30-minute notice and no second chances.

  Also, IPv6 and push-up payment method are missing.

  Thanked by 32FlorinMarian SinV cybertech Erisa jcolideles bulbasaur nick_ Hitori0221 Hishiro adly kasodk kheng86 marian Zyra niceboy Liso Void Xrmaddness spiritlhl dosai topper sots szymonp doghouch Blazingfast_IO tomcb Xiaoming fan szarka Hotmarer james50a anubhavhirani
• jcolideles Member

  July 2022

  @yoursunny said:
  A single YABS triggers "permanent mitigation" that your network speed would decrease to less than 20 Mbps.
  A single "abuse", including zero day attack that is not your fault, causes service deletion with 30-minute notice and no second chances.

  Also, IPv6 and push-up payment method are missing.

  Thanks for the heads-up.
• bulbasaur Member

  July 2022 edited July 2022

  @yoursunny said: A single YABS triggers "permanent mitigation" that your network speed would decrease to less than 20 Mbps.

  The original complaint thread seems to have had a negative effect on your "brotherhood."

  Thanked by @FlorinMarian

  I don't think you know what thanking a post really means.

  Thanked by 3yoursunny Xrmaddness spiritlhl
• FlorinMarian Member, Host Rep

  July 2022

  @stevewatson301 said:

  @yoursunny said: A single YABS triggers "permanent mitigation" that your network speed would decrease to less than 20 Mbps.

  The original complaint thread seems to have had a negative effect on your "brotherhood."

  Thanked by @FlorinMarian

  I don't think you know what thanking a post really means.

  Being frustrated isn't a good choice when doing business.
• yoursunny Member, IPv6 Advocate

  July 2022

  @stevewatson301 said:

  @yoursunny said: A single YABS triggers "permanent mitigation" that your network speed would decrease to less than 20 Mbps.

  The original complaint thread seems to have had a negative effect on your "brotherhood."

  Nigh Sect, destroying brotherhood since 2021.
• spiritysdx Barred

  July 2022 edited July 2022

  @yoursunny said:
  A single YABS triggers "permanent mitigation" that your network speed would decrease to less than 20 Mbps.
  A single "abuse", including zero day attack that is not your fault, causes service deletion with 30-minute notice and no second chances.

  Also, IPv6 and push-up payment method are missing.

  You are right, He said that I abnormally requested the IP 221.179.155.161
• riofredinand Member

  July 2022

  @spiritysdx said:

  @yoursunny said:
  A single YABS triggers "permanent mitigation" that your network speed would decrease to less than 20 Mbps.
  A single "abuse", including zero day attack that is not your fault, causes service deletion with 30-minute notice and no second chances.

  Also, IPv6 and push-up payment method are missing.

  You are right, this also includes using speedtest's CLI for speed testing, which is also not allowed. At present, my server has been permanently suspended and my account cannot be used.

  Great you successfully stop me. I assume it's pay to close.

  Thanked by 1spiritlhl
• spiritysdx Barred

  July 2022

  @riofredinand said:
  Great you successfully stop me. I assume it's pay to close.

  He said I was wrong, that IP address is not the IP address of speedtest. My confirmation was wrong. I queried the detailed data of the IP. It was generated by mobile phone traffic. I have not requested this address in my memory, and I have no way of knowing the reason for the request.
• FlorinMarian Member, Host Rep

  July 2022 edited July 2022

  Let me know which SpeedTest CLI sends via NMAP 72 ping requests per second.
  https://pastebin.com/ewWcpRJz
• spiritysdx Barred

  July 2022

  @riofredinand said:
  Great you successfully stop me. I assume it's pay to close.

  I'm talking to customer service on a ticket and waiting for the final result.
• NoComment Member

  July 2022

  @spiritysdx said:

  @riofredinand said:
  Great you successfully stop me. I assume it's pay to close.

  He said I was wrong, that IP address is not the IP address of speedtest. My confirmation was wrong. I queried the detailed data of the IP. It was generated by mobile phone traffic. I have not requested this address in my memory, and I have no way of knowing the reason for the request.

  From your previous thread:

  Then I use lxd to virtualize 6 small lxc containers on the server for my friends to use, and they will use python or golang to write scripts on them for testing.

  Maybe your friends got your server compromised. Maybe your friends did the requesting. Who knows?
• spiritysdx Barred

  July 2022

  @FlorinMarian said:
  Let me know which SpeedTest CLI sends via NMAP 72 ping requests per second.
  https://pastebin.com/ewWcpRJz

  I was asking for the specific time of the request for investigation. I ran the speedtest program in the first hour of getting the server to measure the speed, and the follow-up information was followed up in the work order.
• spiritysdx Barred

  July 2022

  @NoComment said:

  @spiritysdx said:

  @riofredinand said:
  Great you successfully stop me. I assume it's pay to close.

  He said I was wrong, that IP address is not the IP address of speedtest. My confirmation was wrong. I queried the detailed data of the IP. It was generated by mobile phone traffic. I have not requested this address in my memory, and I have no way of knowing the reason for the request.

  From your previous thread:

  Then I use lxd to virtualize 6 small lxc containers on the server for my friends to use, and they will use python or golang to write scripts on them for testing.

  Maybe your friends got your server compromised. Maybe your friends did the requesting. Who knows?

  I didn't use lxc to virtualize anything this time.
• FlorinMarian Member, Host Rep

  July 2022

  @spiritysdx said:

  @FlorinMarian said:
  Let me know which SpeedTest CLI sends via NMAP 72 ping requests per second.
  https://pastebin.com/ewWcpRJz

  I was asking for the specific time of the request for investigation. I ran the speedtest program in the first hour of getting the server to measure the speed, and the follow-up information was followed up in the work order.

  Time is on first column on that pastebin 19:17:32.microseconds
• spiritysdx Barred

  July 2022

  @FlorinMarian said:
  Time is on first column on that pastebin 19:17:32.microseconds

  UTC?
• FlorinMarian Member, Host Rep

  July 2022

  @spiritysdx said:

  @FlorinMarian said:
  Time is on first column on that pastebin 19:17:32.microseconds

  UTC?

  UTC+2 [RO local time]
• corbpie Member

  July 2022

  25% off isn’t the 40% off you are specifying
• FlorinMarian Member, Host Rep

  July 2022

  @corbpie said:
  25% off isn’t the 40% off you are specifying

  Oh..God!
  I forgot to replace percent (replaced only URLs + Product price from old thread).
  I'll be happy if someone from Moderation Team can edit that percent for me.
  Thank you!
• NoComment Member

  July 2022 edited July 2022

  @spiritysdx said:

  @NoComment said:

  @spiritysdx said:

  @riofredinand said:
  Great you successfully stop me. I assume it's pay to close.

  He said I was wrong, that IP address is not the IP address of speedtest. My confirmation was wrong. I queried the detailed data of the IP. It was generated by mobile phone traffic. I have not requested this address in my memory, and I have no way of knowing the reason for the request.

  From your previous thread:

  Then I use lxd to virtualize 6 small lxc containers on the server for my friends to use, and they will use python or golang to write scripts on them for testing.

  Maybe your friends got your server compromised. Maybe your friends did the requesting. Who knows?

  I didn't use lxc to virtualize anything this time.

  If you are sure you didn't do this and @FlorinMarian didn't mistake you for someone else, then congrats. You got yourself compromised in less than a day. Most likely, you are running some script you shouldn't be running.
• DP Administrator, The Domain Guy

  July 2022

  @FlorinMarian said:

  @corbpie said:
  25% off isn’t the 40% off you are specifying

  Oh..God!
  I forgot to replace percent (replaced only URLs + Product price from old thread).
  I'll be happy if someone from Moderation Team can edit that percent for me.
  Thank you!

  

  Thanked by 3FlorinMarian Ympker adly
• spiritysdx Barred

  July 2022 edited July 2022

  Here's a link to what I did in the first few hours I got the server, I'll list it here
  https://hub.docker.com/r/peer2profit/peer2profit_x86_64
  https://hub.docker.com/r/traffmonetizer/cli
  https://github.com/zq/superspeed
  If you say I did something before that time period that caused the abnormal request, it could only be caused by one of the above links.

  EDIT: Should also add https://github.com/zhanghanyun/backtrace, that's why that IP is being requested.
• spiritysdx Barred

  July 2022

  At the time you mentioned, I only got the machine for about an hour and a half. I actually only performed the operation in the first hour of getting the server, and the subsequent operation was 6~7 hours later.
• NoComment Member

  July 2022

  @spiritysdx said:
  Here's a link to what I did in the first few hours I got the server, I'll list it here
  https://hub.docker.com/r/peer2profit/peer2profit_x86_64
  https://hub.docker.com/r/traffmonetizer/cli
  https://github.com/zq/superspeed
  If you say I did something before that time period that caused the abnormal request, it could only be caused by one of the above links.

  Dude, I'm not even gonna bother. That looks like traffic exchange and I am not surprised your previous provider kicked you out.

  This guy's previous thread should be updated to mention that he was probably running traffic exchange so it's fair to the provider.

  Thanked by 1bulbasaur
• spiritysdx Barred

  July 2022

  Well, it looks like the cause of everything is me.
• bulbasaur Member

  July 2022

  @spiritysdx said:
  Well, it looks like the cause of everything is me.

  It certainly is. A lesson to learn.
• spiritysdx Barred

  July 2022

  @NoComment said:

  @spiritysdx said:
  Here's a link to what I did in the first few hours I got the server, I'll list it here
  https://hub.docker.com/r/peer2profit/peer2profit_x86_64
  https://hub.docker.com/r/traffmonetizer/cli
  https://github.com/zq/superspeed
  If you say I did something before that time period that caused the abnormal request, it could only be caused by one of the above links.

  Dude, I'm not even gonna bother. That looks like traffic exchange and I am not surprised your previous provider kicked you out.

  This guy's previous thread should be updated to mention that he was probably running traffic exchange so it's fair to the provider.

  I checked it again, He said that I abnormally requested the IP 221.179.155.161 , I checked that this address is indeed the speed measurement address of speedtest, so it is not caused by traffic exchange, it is caused by the speed measurement I performed speedtest, related The IP information will be pasted later.
• spiritysdx Barred

  July 2022

  https://github.com/zhanghanyun/backtrace
  The collection script I used, the script used for backhaul routing, and the address you mentioned in the screenshot.
• spiritysdx Barred

  July 2022 edited July 2022

  https://github.com/zhanghanyun/backtrace/blob/main/asn.go
  221.179.155.161

  rIp   = []string{"219.141.136.12", "202.106.50.1", "221.179.155.161", "202.96.209.133", "210.22.97.1", "211.136.112.200", "58.60.188.222", "210.21.196.6", "120.196.165.24"}
   rName = []string{"北京电信", "北京联通", "北京移动", "上海电信", "上海联通", "上海移动", "广州电信", "广州联通", "广州移动"}
   ca    = []color.Attribute{color.FgHiBlue, color.FgHiMagenta, color.FgHiYellow, color.FgHiGreen, color.FgHiCyan, color.FgHiRed, color.FgHiMagenta, color.FgHiYellow, color.FgHiBlue}
   m     = map[string]string{"AS4134": "电信163 [普通线路]", "AS4809": "电信CN2 [优质线路]", "AS4837": "联通4837[普通线路]", "AS9929": "联通9929[优质线路]", "AS9808": "移动CMI [普通线路]", "AS58453": "移动CMI [普通线路]"}
  
• NoComment Member

  July 2022

  @spiritysdx said:
  https://github.com/zhanghanyun/backtrace
  The collection script I used, the script used for backhaul routing, and the address you mentioned in the screenshot.

  You are indeed right but at this point it is questionable if @FlorinMarian is happy with traffic exchange customers. It probably isn't a problem with "dedicated cpu" and "unmetered bandwidth" but some providers don't like traffic exchange.
• spiritysdx Barred

  July 2022 edited July 2022

  @NoComment said:

  @spiritysdx said:
  https://github.com/zhanghanyun/backtrace
  The collection script I used, the script used for backhaul routing, and the address you mentioned in the screenshot.

  You are indeed right but at this point it is questionable if @FlorinMarian is happy with traffic exchange customers. It probably isn't a problem with "dedicated cpu" and "unmetered bandwidth" but some providers don't like traffic exchange.

  The reason for blocking my server is wrong, and I accept what you say, but I should state the facts. The merchant did not block my server for the reason you said.