Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
25% Recurring Discount on NVMe VPS
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Do better Linode/Akamai

SplitIceSplitIce Member, Host Rep
edited 2:03AM in Reviews

"We have detected an Outbound Denial of Service attack originating from your Linode. This is most likely the result of a system compromise. Because of the serious nature of this activity, we have applied network restrictions to your Linode to prevent further abuse."

Strange, we nearly exclusively use them for running Kubernetes clusters, and that server they have shutdown is running latest* LKE image (minor release was announced wednesday for a Distro update, I havent validated this yet). Cluster has extensive auditable security logging etc all of which shows clear. Did see a warning about SYN cookies on the BGP port a while ago, was it that? no, that appears to have been noise.

Dig a bit deeper and get the abuse report given to us.

The reporter? Linode (self report)
target_ip: 172.232.31.233
traffic_stats_byte_count: 13558735

Err, we ddos'ed their S3 service with our system backups by uploading 13MB. Looks like we were uploading at around 100mbit at the time (same speed as usual).

I dont doubt this was 100% automated from report, response to action given that Linode doesnt usually much in the way of weekend staff (remains to be seen when this node will be returned to operation, its been 8 hours now).

Do better Linode / Akamai. You are supposed to be production grade. I had better things to be doing with my Sunday than dealing with entirely preventable issues. Fortunately we have redundancy...

Comments

  • forestforest Member

    Still better than Hetzner. :D

  • rpqurpqu Member

    production env
    can't withstand 13MB at 100mbps

  • MikeAMikeA Member, Patron Provider

    They were always overhyped anyway. Big money marketing.

  • trewqtrewq Administrator, Patron Provider

    @forest said:
    Still better than Hetzner. :D

    They don’t think abuse happens on the weekend.

  • SplitIceSplitIce Member, Host Rep

    @forest said:
    Still better than Hetzner. :D

    Extra funny considering that the DRP for if we need to leave Linode is Hetzner Cloud.

  • VTCuongVTCuong Member

    @MikeA said:
    They were always overhyped anyway. Big money marketing.

    My rule of thumb is always avoid these big YouTuber sponsorship businesses, because they prioritize marketing over user experience.

    Thanked by 1lothos
Sign In or Register to comment.