Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Hetzner is cancelling all of our servers without reason

12346»

Comments

  • @tra10000 said:
    Off topic:
    Isn't there a Hetzner "abuse center"?

    I received an abuse report email from Hetzner.

    1. Is it enough to just reply to this email?
    2. There is a link in the email and a form in the url. Should I fill it out?
    3. Where can I follow up on the abuse situation?

    My first abuse report in 10+ years :)

    @labze @Advin

    You must fill in the form, it is mandatory. You get a reminder within something like 48 hours if you do not fill it.

    Thanked by 1tra10000
  • tentortentor Member, Host Rep

    @techdragon said:

    @Advin said:

    @stefeman said:

    @MannDude said:

    @stefeman said:
    I haven't trusted hetzner after they were caught with the XMPP stuff.

    What was this?


    For what it's worth, this thread has prompted me to finally cancel our only Hetzner box (Big storage dedi in Finland) that we were using for offsite backups.

    It's been on my to-do list for like, probably 18 months or more. Just wasn't a huge priority. Original reason was because it's a 1Gbps server and it's geographically very far from most of the things we want to backup. New reason is because of this thread.

    Yeah it was a scandal that never really got attention as the victims were russians during the ukraine war.

    “The wiretapping may have lasted for up to 6 months overall (90 days confirmed). We believe this is lawful interception Hetzner and Linode were forced to setup.”

    If law enforcement was involved, there’s not much that could be done. They have to comply with any legal orders, and that goes for any dedicated server or VPS provider.

    They could have used a warrant canary but at the end of the day their primary interest is making money.

    I have seen only privacy-minded hosts (like in "No-KYC") do this (warrant canary).

    But logically, any business is for-profit first of all.

  • @tentor said:

    @techdragon said:

    @Advin said:

    @stefeman said:

    @MannDude said:

    @stefeman said:
    I haven't trusted hetzner after they were caught with the XMPP stuff.

    What was this?


    For what it's worth, this thread has prompted me to finally cancel our only Hetzner box (Big storage dedi in Finland) that we were using for offsite backups.

    It's been on my to-do list for like, probably 18 months or more. Just wasn't a huge priority. Original reason was because it's a 1Gbps server and it's geographically very far from most of the things we want to backup. New reason is because of this thread.

    Yeah it was a scandal that never really got attention as the victims were russians during the ukraine war.

    “The wiretapping may have lasted for up to 6 months overall (90 days confirmed). We believe this is lawful interception Hetzner and Linode were forced to setup.”

    If law enforcement was involved, there’s not much that could be done. They have to comply with any legal orders, and that goes for any dedicated server or VPS provider.

    They could have used a warrant canary but at the end of the day their primary interest is making money.

    I have seen only privacy-minded hosts (like in "No-KYC") do this (warrant canary).

    What would the practical value here be anyway? I would expect for a business the size of Hetzner to actually be in contact with law enforcement agencies all the time anyway. Also, what does German law say about these warrant canaries?

    Thanked by 1tentor
  • emghemgh Member, Megathread Squad

    @techdragon said:

    @Advin said:

    @stefeman said:

    @MannDude said:

    @stefeman said:
    I haven't trusted hetzner after they were caught with the XMPP stuff.

    What was this?


    For what it's worth, this thread has prompted me to finally cancel our only Hetzner box (Big storage dedi in Finland) that we were using for offsite backups.

    It's been on my to-do list for like, probably 18 months or more. Just wasn't a huge priority. Original reason was because it's a 1Gbps server and it's geographically very far from most of the things we want to backup. New reason is because of this thread.

    Yeah it was a scandal that never really got attention as the victims were russians during the ukraine war.

    “The wiretapping may have lasted for up to 6 months overall (90 days confirmed). We believe this is lawful interception Hetzner and Linode were forced to setup.”

    If law enforcement was involved, there’s not much that could be done. They have to comply with any legal orders, and that goes for any dedicated server or VPS provider.

    They could have used a warrant canary but at the end of the day their primary interest is making money.

    Yes, they could also focus on privacy and put resources into that and give up being the 1st provider on price/performance, but they won't because they found their angle.

    Don't get me wrong, privacy is important in some cases, but expecting the same provider to be the cheapest and the best at privacy at once isn't resonable. I like Hetzner for what they are/what they do.

  • AdvinAdvin Member, Host Rep
    edited October 2024

    @techdragon said:

    @Advin said:

    @stefeman said:

    @MannDude said:

    @stefeman said:
    I haven't trusted hetzner after they were caught with the XMPP stuff.

    What was this?


    For what it's worth, this thread has prompted me to finally cancel our only Hetzner box (Big storage dedi in Finland) that we were using for offsite backups.

    It's been on my to-do list for like, probably 18 months or more. Just wasn't a huge priority. Original reason was because it's a 1Gbps server and it's geographically very far from most of the things we want to backup. New reason is because of this thread.

    Yeah it was a scandal that never really got attention as the victims were russians during the ukraine war.

    “The wiretapping may have lasted for up to 6 months overall (90 days confirmed). We believe this is lawful interception Hetzner and Linode were forced to setup.”

    If law enforcement was involved, there’s not much that could be done. They have to comply with any legal orders, and that goes for any dedicated server or VPS provider.

    They could have used a warrant canary but at the end of the day their primary interest is making money.

    I'm not sure how it would help at all. Hetzner most likely deals with law enforcement requests and court orders on a daily basis. Almost no hosting provider runs a warrant canary unless they are super privacy focused. It's not in their best interest to encourage behavior that would attract law enforcement attention anyway.

  • @Advin said:

    @techdragon said:

    @Advin said:

    @stefeman said:

    @MannDude said:

    @stefeman said:
    I haven't trusted hetzner after they were caught with the XMPP stuff.

    What was this?


    For what it's worth, this thread has prompted me to finally cancel our only Hetzner box (Big storage dedi in Finland) that we were using for offsite backups.

    It's been on my to-do list for like, probably 18 months or more. Just wasn't a huge priority. Original reason was because it's a 1Gbps server and it's geographically very far from most of the things we want to backup. New reason is because of this thread.

    Yeah it was a scandal that never really got attention as the victims were russians during the ukraine war.

    “The wiretapping may have lasted for up to 6 months overall (90 days confirmed). We believe this is lawful interception Hetzner and Linode were forced to setup.”

    If law enforcement was involved, there’s not much that could be done. They have to comply with any legal orders, and that goes for any dedicated server or VPS provider.

    They could have used a warrant canary but at the end of the day their primary interest is making money.

    I'm not sure how it would help at all. Hetzner most likely deals with law enforcement requests and court orders on a daily basis. Almost no hosting provider runs a warrant canary unless they are super privacy focused. It's not in their best interest to encourage behavior that would attract law enforcement attention anyway.

    Exactly. Hetzner is not catering to privacy focused solutions and are known to have a next to zero tolerance abuse policy (overzealous at times)

  • @stefeman said:

    @MannDude said:

    @stefeman said:
    I haven't trusted hetzner after they were caught with the XMPP stuff.

    What was this?


    For what it's worth, this thread has prompted me to finally cancel our only Hetzner box (Big storage dedi in Finland) that we were using for offsite backups.

    It's been on my to-do list for like, probably 18 months or more. Just wasn't a huge priority. Original reason was because it's a 1Gbps server and it's geographically very far from most of the things we want to backup. New reason is because of this thread.

    Yeah it was a scandal that never really got attention as the victims were russians during the ukraine war.

    Or maybe because most people haven't even heard of XMPP, let alone used it? There has been a huge outpouring of sympathy for Durov during the recent Telegram fiasco. All signs point to name recognition of the platform, not nationality or political affiliation of the victims.

    Hetzner is OK for some of my projects. I never used them for anything as important as hosting XMPP, of course.

    Thanked by 1tentor
  • stefemanstefeman Member
    edited October 2024

    Using a German provider to host a secure chat server for Russians is a joke by itself already.

    Same as if NSA/CIA head offices were using a Chinese antivirus program on all of their PC's and Servers.

    While its morally wrong to take an advantage of the user and break the trust, in the current world order it would be a crime to not do it if there was a chance to do so.

  • @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

  • @zmeu said:
    shall I do to encrypt all data of my servers - just in case if some wants to clone my HDDs?

    A little late, but I wanted to share my scenario.

    I basically only have minio configured in the storage server. then stored as a storage bucket after being sliced by an external program, or encrypted.

    In a simplified example, you could use Rclone and then do some encryption. Or with Juciefs, just slice it separately and store the metadata separately.

  • @pauljames said:

    @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

    Such a brilliant writeup. Thank you for sharing this!

  • SwiftnodeSwiftnode Member, Patron Provider, LIR

    I covered Hetzner's shitty automated abuse system essentially being used as a DoS vector years ago here.

    Their "senior network engineer" at the time spoke with me, and did not even understand how UDP spoofing worked.

    Anyone can get Hetzner to generate bogus abuse emails for any IP on the planet. And if you have a shitty provider (eg. Stefan Prager) they may act on those bogus abuse complaints. There were even posts on hacking forums where people were offering it as a service, to generate abuse emails and get your IPs nullrouted.

    One of the most inept companies I've ever had the misfortune of dealing with. I even reached out to @Hetzner_OL via DMs here, they said they would forward the information I provided to their colleagues and get back to me. Haven't heard back since July 2022.

  • @Swiftnode said:
    I covered Hetzner's shitty automated abuse system essentially being used as a DoS vector years ago here.

    Their "senior network engineer" at the time spoke with me, and did not even understand how UDP spoofing worked.

    Anyone can get Hetzner to generate bogus abuse emails for any IP on the planet. And if you have a shitty provider (eg. Stefan Prager) they may act on those bogus abuse complaints. There were even posts on hacking forums where people were offering it as a service, to generate abuse emails and get your IPs nullrouted.

    One of the most inept companies I've ever had the misfortune of dealing with. I even reached out to @Hetzner_OL via DMs here, they said they would forward the information I provided to their colleagues and get back to me. Haven't heard back since July 2022.

    That's fucked up

    Thanked by 1Swiftnode
  • @pauljames said:

    @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

    It's hard to say for sure. Sadly Hetzner refused to give us any details on why they were closing our account. There were no abuse emails besides the very vague email we received which is on the original post.

    We are still waiting to hear from Hetzner via our GDPR request for data.

    In addition to this entire fiasco, when we fully migrated away from Hetzner, they wouldn't let us cancel the servers early (even despite contacting them) - so we have to pay for the full month despite our request to cancel early.

  • @Lunar said:

    @pauljames said:

    @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

    It's hard to say for sure. Sadly Hetzner refused to give us any details on why they were closing our account. There were no abuse emails besides the very vague email we received which is on the original post.

    We are still waiting to hear from Hetzner via our GDPR request for data.

    In addition to this entire fiasco, when we fully migrated away from Hetzner, they wouldn't let us cancel the servers early (even despite contacting them) - so we have to pay for the full month despite our request to cancel early.

    Any update?

  • @alectrocute said:

    @Lunar said:

    @pauljames said:

    @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

    It's hard to say for sure. Sadly Hetzner refused to give us any details on why they were closing our account. There were no abuse emails besides the very vague email we received which is on the original post.

    We are still waiting to hear from Hetzner via our GDPR request for data.

    In addition to this entire fiasco, when we fully migrated away from Hetzner, they wouldn't let us cancel the servers early (even despite contacting them) - so we have to pay for the full month despite our request to cancel early.

    Any update?

    We haven't heard anything more from them regarding the sudden ban.

    However, we did receive a bill, and hilariously can't pay it because we can't login to the account anymore. Now they're saying the only way to pay is via wire transfer after contacting them :D

  • @Lunar said:

    @alectrocute said:

    @Lunar said:

    @pauljames said:

    @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

    It's hard to say for sure. Sadly Hetzner refused to give us any details on why they were closing our account. There were no abuse emails besides the very vague email we received which is on the original post.

    We are still waiting to hear from Hetzner via our GDPR request for data.

    In addition to this entire fiasco, when we fully migrated away from Hetzner, they wouldn't let us cancel the servers early (even despite contacting them) - so we have to pay for the full month despite our request to cancel early.

    Any update?

    We haven't heard anything more from them regarding the sudden ban.

    However, we did receive a bill, and hilariously can't pay it because we can't login to the account anymore. Now they're saying the only way to pay is via wire transfer after contacting them :D

    F*cking Germans.

  • @alectrocute said:

    @Lunar said:

    @alectrocute said:

    @Lunar said:

    @pauljames said:

    @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

    It's hard to say for sure. Sadly Hetzner refused to give us any details on why they were closing our account. There were no abuse emails besides the very vague email we received which is on the original post.

    We are still waiting to hear from Hetzner via our GDPR request for data.

    In addition to this entire fiasco, when we fully migrated away from Hetzner, they wouldn't let us cancel the servers early (even despite contacting them) - so we have to pay for the full month despite our request to cancel early.

    Any update?

    We haven't heard anything more from them regarding the sudden ban.

    However, we did receive a bill, and hilariously can't pay it because we can't login to the account anymore. Now they're saying the only way to pay is via wire transfer after contacting them :D

    F*cking Germans.

    I apologize for this offensive remark.

    Thanked by 1egoror
  • @Lunar said:

    @alectrocute said:

    @Lunar said:

    @pauljames said:

    @Lunar said:
    I founded a 501(c)(3) non-profit called Unredacted, which operates services and infrastructure that help people evade censorship and protect their right to privacy.

    Today we received a notice that Hetzner is cancelling all of our servers, and without any prior warning. They do not give a reason, and their decision is final. We've always paid our bills on time and have never received an abuse report.

    Edit: To be clear, we are not operating any open proxies or censorship circumvention services on Hetzner IPs.

    Most of our critical infrastructure runs on top of Hetzner, and this will disrupt our important work while migrating everything to another provider.

    In the spirit of transparency, it's important to know why critical infrastructure is being pulled out from underneath us. We'd like an explanation from @Hetzner_OL at the very least.

    We understand that they can terminate an account for any reason, but this is not typical of most providers to do for an account in good standing. If this can happen to us, it could happen to you as well.

    Do think this might be the cause? https://delroth.net/posts/spoofed-mass-scan-abuse/

    It reports attacks against tor node operators by IP spoofing. I found it on hackernews

    It's hard to say for sure. Sadly Hetzner refused to give us any details on why they were closing our account. There were no abuse emails besides the very vague email we received which is on the original post.

    We are still waiting to hear from Hetzner via our GDPR request for data.

    In addition to this entire fiasco, when we fully migrated away from Hetzner, they wouldn't let us cancel the servers early (even despite contacting them) - so we have to pay for the full month despite our request to cancel early.

    Any update?

    We haven't heard anything more from them regarding the sudden ban.

    However, we did receive a bill, and hilariously can't pay it because we can't login to the account anymore. Now they're saying the only way to pay is via wire transfer after contacting them :D

    That is a bit tragic you gotta jump through all these hoops to pay them money. I know its easier said than done, but if you're in the US, I'd sue their US subsidiary for whatever you can fit in the suit. After all these years being in the cloud business I absolutely hate dealing with big companies like Hetzner and prefer smaller companies or resellers much more because you actually get treated like a human and not just another number.

    Thanked by 1Lunar
  • kevindskevinds Member, LIR

    @Lunar said:
    However, we did receive a bill, and hilariously can't pay it because we can't login to the account anymore. Now they're saying the only way to pay is via wire transfer after contacting them :D

    How much is the bill?

  • @kevinds said:

    @Lunar said:
    However, we did receive a bill, and hilariously can't pay it because we can't login to the account anymore. Now they're saying the only way to pay is via wire transfer after contacting them :D

    How much is the bill?

    € 138.41

Sign In or Register to comment.