Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

neoprotect down due to DDoS and CDN77 / Datapacket has deactivated all BGP sessions

124

Comments

  • MannDudeMannDude Patron Provider, Veteran
    edited November 2025

    So, what other providers are impacted by this? Seems all of iHosrArt is offline. Does @Calin still have an account here? From his Discord he's calling Neoprotect "scammers" for not instantly refunding him and he's opened PayPal disputes.

    I've not seen any complaints about others who used datapacket, did they really boot everyone using them for prefiltering? @SilverCreek ? There is another one here too, but I can't recall right now. Is Datapacket communicating this to you as well or is the focus only on neoprotect?

  • tentortentor Member, Host Rep
  • emghemgh Member, Megathread Squad

    Oh no not legal actions from Calin

    Anyway so yeah

  • olokeoloke Member, Host Rep
    edited November 2025

    @MannDude said:
    Seems all of iHosrArt is offline.

    It's very offline...

    Even though he puts all nodes on his HetrixTools instance as "maintenance" so overall uptime is still 99.7049% 😇🥰

    And tbh I doubt he'll do anything against neoprotect other than just telling nonsense about this situation.

  • NeoonNeoon Community Contributor, Veteran

    TLDR: NeoProtect gonna sue datapacket and a bunch of companies gonna sue NeoProtect? pure spice.

    Thanked by 2MennoGamed itzgeo
  • emghemgh Member, Megathread Squad

    @oloke said:

    @MannDude said:
    Seems all of iHosrArt is offline.

    And tbh I doubt he'll do anything against neoprotect other than just telling nonsense about this situation.

    Fake news big legal team forming up

    Do you remember that server lifting video with the proffesional men helping him load up the servers to the cars? Those are the lawyers

  • @Neoon said:
    TLDR: NeoProtect gonna sue datapacket and a bunch of companies gonna sue NeoProtect? pure spice.

    Sounds like i need to make some popcorn for this one. Now i need double, for Path and Neo/DataPacket

    Thanked by 1itzgeo
  • MannDudeMannDude Patron Provider, Veteran
    edited November 2025

    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms as far as I know. Could be wrong though.

    Shit situation. Guess everyone in the industry should think about what options exist if tomorrow your data center or a network upstream said, "We don't want you anymore".

    Thanked by 2emgh oloke
  • emghemgh Member, Megathread Squad

    @MannDude said:
    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms as far as I know. Could be wrong though.

    Shit situation. Guess everyone in the industry should think about what options exist if tomorrow your data center or a network upstream said, "We don't want you anymore".

    I guess that depends on their terms. Didn’t read them. Also they can have induvidual other terms with other clients that we don’t have access to.

    They didn’t do anything wrong leading to losing this upstream but if they promised their clients this wouldn’t occur and it did, they’d still breach their contractual obligations no matter who caused this.

  • @AS203446 said:

    @JohnnySac said:
    Can't believe DataPacket killed NeoProtect instantly like that. The Remote Shield thing was their main revenue stream. They must have had some sort of contract with DataPacket being their only upstream provider for that service. NeoProtect will probably sue for some serious damages.

    One VPS I bought was specifically for the NeoProtect features so pretty disappointed it disappeared overnight. Maybe I should sue also.

    Datapacket does not really like contracts, from their FAQ:

    Do I have to sign a contract with you?
    No. To give you the flexibility to scale as you need, we provide our services on a pay-
    as-you-go basis with no further commitment. If your organization does require a written contract, we’ll happily cooperate.

    With that being said, I highly doubt that Datapacket is going to offer contracts for a few Dedicated Servers.

    We also talked to DP Sales a few years ago and they were not happy when we mentioned the term "contract", especially "long term contract"

    So I'm quite sure they want to get rid of problematic customers as soon as possible.

    Quote from DP Sales:

    Hi Alex,

    This is something I can't responsibly promise you as it has already happened several times before that we had to end cooperation because of DDoS attacks. I'm being completely upfront to set the right expectations.

    Best,

    Hmm, that's interesting thanks. The way they word the FAQ makes it seem like it's a benefit to customers but really it's so they can drop you any second no questions asked :D

  • olokeoloke Member, Host Rep
    edited November 2025

    @emgh said:

    @oloke said:

    @MannDude said:
    Seems all of iHosrArt is offline.

    And tbh I doubt he'll do anything against neoprotect other than just telling nonsense about this situation.

    Fake news big legal team forming up

    Do you remember that server lifting video with the proffesional men helping him load up the servers to the cars? Those are the lawyers

    This one?

    version for emgay:

  • @JohnnySac said:

    @AS203446 said:

    @JohnnySac said:
    Can't believe DataPacket killed NeoProtect instantly like that. The Remote Shield thing was their main revenue stream. They must have had some sort of contract with DataPacket being their only upstream provider for that service. NeoProtect will probably sue for some serious damages.

    One VPS I bought was specifically for the NeoProtect features so pretty disappointed it disappeared overnight. Maybe I should sue also.

    Datapacket does not really like contracts, from their FAQ:

    Do I have to sign a contract with you?
    No. To give you the flexibility to scale as you need, we provide our services on a pay-
    as-you-go basis with no further commitment. If your organization does require a written contract, we’ll happily cooperate.

    With that being said, I highly doubt that Datapacket is going to offer contracts for a few Dedicated Servers.

    We also talked to DP Sales a few years ago and they were not happy when we mentioned the term "contract", especially "long term contract"

    So I'm quite sure they want to get rid of problematic customers as soon as possible.

    Quote from DP Sales:

    Hi Alex,

    This is something I can't responsibly promise you as it has already happened several times before that we had to end cooperation because of DDoS attacks. I'm being completely upfront to set the right expectations.

    Best,

    Hmm, that's interesting thanks. The way they word the FAQ makes it seem like it's a benefit to customers but really it's so they can drop you any second no questions asked :D

    Any semi-well written contract would allow them to drop a client at any time for any reason... And for "real" clients that they actually negotiated contracts with, I'm sure there would be a provision for a scenario like this where a client was impacting other clients...

  • tentortentor Member, Host Rep

    @MannDude said:
    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms.

    This is controversial topic, but personally I think they are responsible for not having "plan B" (second upstream) or for not building own scrubbing network (expensive, I know).

    Regarding "terms violation", in their case it was just a business decision. I can't blame Datapacket there.

    Thanked by 4oloke MikeA MannDude kait
  • emghemgh Member, Megathread Squad
    edited November 2025

    @oloke said:

    @emgh said:

    @oloke said:

    @MannDude said:
    Seems all of iHosrArt is offline.

    And tbh I doubt he'll do anything against neoprotect other than just telling nonsense about this situation.

    Fake news big legal team forming up

    Do you remember that server lifting video with the proffesional men helping him load up the servers to the cars? Those are the lawyers

    This one?

    Wtf Safari blocks this as well and it’s mp4

    Something else is going on here

    Thanked by 1nghialele
  • tentortentor Member, Host Rep

    @emgh said:

    @oloke said:

    @emgh said:

    @oloke said:

    @MannDude said:
    Seems all of iHosrArt is offline.

    And tbh I doubt he'll do anything against neoprotect other than just telling nonsense about this situation.

    Fake news big legal team forming up

    Do you remember that server lifting video with the proffesional men helping him load up the servers to the cars? Those are the lawyers

    This one?

    Wtf Safari blocks this as well and it’s mp4

    Something else is going on here

    Topless ihos tart lawyers

    Thanked by 2oloke emgh
  • emghemgh Member, Megathread Squad

    @tentor said:

    @emgh said:

    @oloke said:

    @emgh said:

    @oloke said:

    @MannDude said:
    Seems all of iHosrArt is offline.

    And tbh I doubt he'll do anything against neoprotect other than just telling nonsense about this situation.

    Fake news big legal team forming up

    Do you remember that server lifting video with the proffesional men helping him load up the servers to the cars? Those are the lawyers

    This one?

    Wtf Safari blocks this as well and it’s mp4

    Something else is going on here

    Topless ihos tart lawyers

    The scariest lawyers in all of Oradea

    Thanked by 2tentor oloke
  • @tentor said:

    @MannDude said:
    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms.

    This is controversial topic, but personally I think they are responsible for not having "plan B" (second upstream) or for not building own scrubbing network (expensive, I know).

    Regarding "terms violation", in their case it was just a business decision. I can't blame Datapacket there.

    I second this, using(/abusing) cheap shit for profit always ends bad. Don't like how cdn77 didn't give them 1 to 3 months notice though.

    Thanked by 1tentor
  • tentortentor Member, Host Rep
    edited November 2025

    @kait said:

    @tentor said:

    @MannDude said:
    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms.

    This is controversial topic, but personally I think they are responsible for not having "plan B" (second upstream) or for not building own scrubbing network (expensive, I know).

    Regarding "terms violation", in their case it was just a business decision. I can't blame Datapacket there.

    I second this, using(/abusing) cheap shit for profit always ends bad. Don't like how cdn77 didn't give them 1 to 3 months notice though.

    I don't think notice was possible this time due to the volume of the attack that finally attracted Datapacket's attention.

    However, it would be better for both parties if DP noticed smaller frequent attacks and did a few months notice as you suggested, but instead they decided to tolerate it until some too high threshold.

    Thanked by 1MannDude
  • NeoonNeoon Community Contributor, Veteran

    Thanked by 2tentor nghialele
  • JoshRJoshR Member, Patron Provider

    I've noticed since that my favorite game servers are now offline :(

  • @tentor said:

    @kait said:

    @tentor said:

    @MannDude said:
    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms.

    This is controversial topic, but personally I think they are responsible for not having "plan B" (second upstream) or for not building own scrubbing network (expensive, I know).

    Regarding "terms violation", in their case it was just a business decision. I can't blame Datapacket there.

    I second this, using(/abusing) cheap shit for profit always ends bad. Don't like how cdn77 didn't give them 1 to 3 months notice though.

    I don't think notice was possible this time due to the volume of the attack that finally attracted Datapacket's attention.

    However, it would be better for both parties if DP noticed smaller frequent attacks and did a few months notice as you suggested, but instead they decided to tolerate it until some too high threshold.

    Notice was possible, they could just have dropped BGP/Nullrouted to avoid affecting other customers and then send them a 1-3 month "search another provider" letter

    Thanked by 1JohnnySac
  • Looks like iHostArt came back online about an hr ago.

    Thanked by 1oloke
  • dataforestdataforest Member, Host Rep

    @Meganitrospeed said:

    @tentor said:

    @kait said:

    @tentor said:

    @MannDude said:
    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms.

    This is controversial topic, but personally I think they are responsible for not having "plan B" (second upstream) or for not building own scrubbing network (expensive, I know).

    Regarding "terms violation", in their case it was just a business decision. I can't blame Datapacket there.

    I second this, using(/abusing) cheap shit for profit always ends bad. Don't like how cdn77 didn't give them 1 to 3 months notice though.

    I don't think notice was possible this time due to the volume of the attack that finally attracted Datapacket's attention.

    However, it would be better for both parties if DP noticed smaller frequent attacks and did a few months notice as you suggested, but instead they decided to tolerate it until some too high threshold.

    Notice was possible, they could just have dropped BGP/Nullrouted to avoid affecting other customers and then send them a 1-3 month "search another provider" letter

    As a provider of this size, you have various options, but simply disconnecting a customer is certainly the easiest one. Is that understandable? I doubt it. We also considered using CDN77/DP, but thankfully they don't offer 400G links, which is why we decided against them.

    It is also interesting to note that other large CDN77/DP customers are now getting more and more carriers, this has been happening for several weeks. It seems as if CDN77/DP decided some time ago that it no longer wanted to play in the DDoS game, which I can understand from various points of view.

    Thanked by 2barbaros oloke
  • @kait said: I second this, using(/abusing) cheap shit for profit always ends bad.

    Datapacket is not cheap. their servers are many multiples more expensive than the dedicated servers being offered here. It isn't as expensive as buying transit directly, but it is by no means cheap.

    Datapacket is also the owner of cdn77. It is believed that they are using the same network to sell excess capacity in the form of dedicated servers. CDNs are often the target of ddos attacks and a cdn that is not able to mitigate a ddos is not a good sign for any customers they have.

    The fact that they are dropping a customer for getting attacked shows that every customer they have on their CDN plan is at risk. They also advertise ddos protection so it's not like someone trying to start a streaming service on cloudflare's free plan.

    Thanked by 1Cybr
  • @bobert said:

    @kait said: I second this, using(/abusing) cheap shit for profit always ends bad.

    Datapacket is not cheap. their servers are many multiples more expensive than the dedicated servers being offered here. It isn't as expensive as buying transit directly, but it is by no means cheap.

    Datapacket is also the owner of cdn77. It is believed that they are using the same network to sell excess capacity in the form of dedicated servers. CDNs are often the target of ddos attacks and a cdn that is not able to mitigate a ddos is not a good sign for any customers they have.

    The fact that they are dropping a customer for getting attacked shows that every customer they have on their CDN plan is at risk. They also advertise ddos protection so it's not like someone trying to start a streaming service on cloudflare's free plan.

    What you have to realize is that the average client getting attacked is slim-to-none. This is a single client that was receiving more than average DDoS attacks as they were reselling services to high-risk clients. This is going to put the client's 95th percentile much higher... I don't know what Neoprotect was paying Datapacket, but odds are they were pushing five+ figures of mitigation costs monthly because they were reselling.

    I'd assume their filtering also wasn't doing a great job on the attack, compounding issues.

    Thanked by 1tentor
  • Holy crap, Calin crying over the refund :D … Hilarious. Anyway, 22k bit in ass.

    Thanked by 1Protocol903
  • Not a fan of centralisation of cloudflare, but they're probably the only provider that could handle that magnitude of ddos, for free on top. Akamai, google, amazon probably could too but then gotta prepare substantial $$$. By 2030 cf probably will be the only viable chocked point protecting small mom and pop website selling handwoven socks against such magnitude of attack.

  • emghemgh Member, Megathread Squad

    @dataforest said:

    @Meganitrospeed said:

    @tentor said:

    @kait said:

    @tentor said:

    @MannDude said:
    I mean, it's not their (Neoprotect's) fault all of this happened. Doesn't seem like they did anything "wrong" or violated any terms.

    This is controversial topic, but personally I think they are responsible for not having "plan B" (second upstream) or for not building own scrubbing network (expensive, I know).

    Regarding "terms violation", in their case it was just a business decision. I can't blame Datapacket there.

    I second this, using(/abusing) cheap shit for profit always ends bad. Don't like how cdn77 didn't give them 1 to 3 months notice though.

    I don't think notice was possible this time due to the volume of the attack that finally attracted Datapacket's attention.

    However, it would be better for both parties if DP noticed smaller frequent attacks and did a few months notice as you suggested, but instead they decided to tolerate it until some too high threshold.

    Notice was possible, they could just have dropped BGP/Nullrouted to avoid affecting other customers and then send them a 1-3 month "search another provider" letter

    As a provider of this size, you have various options, but simply disconnecting a customer is certainly the easiest one. Is that understandable? I doubt it. We also considered using CDN77/DP, but thankfully they don't offer 400G links, which is why we decided against them.

    It is also interesting to note that other large CDN77/DP customers are now getting more and more carriers, this has been happening for several weeks. It seems as if CDN77/DP decided some time ago that it no longer wanted to play in the DDoS game, which I can understand from various points of view.

    Can you DM me an insane Avoro coupon code I’d be forever grateful thank you have a grape day and regards

  • emghemgh Member, Megathread Squad

    @dataforest the 90 % off must have gotten lost in transit would appreciate if you sent another one thanks

Sign In or Register to comment.