(Quote)

@Neoon, We've taken every corrective step possible, changed many servers to ensure there is no threat to their IPMI and are going a step further and pulling any IPMI to be placed behind a private VPN.

And this is why I refuse all kinds of remote management access (SSH AND ILO4) being public at my home lab. VPN or get stuffed.

IPMI while we place the IPMI connection behind a VPN access portal. We are sending these notices out now. We do feel confident that the Asrock Rack B650D4U boards we have in use have all been secured

We'll be implementing a VPN/DCIM based IPMI access network for any custom based dedicated servers as standard practice moving forward. This is our current setup on instant deploy dedicated servers.

Coupon: LIFE30 (30% off LIFETIME)

(Quote)

(Quote)

Typically its a VPN login that has private network access to the internal network with IPMI access.

Ask your provider if a private IP and access only through a VPN is possible.

(Quote)

I am playing lineage 2 on a Luxembourg server. Since this shit happened, there are tons of DCs in the clan as the routing changes to cope with the issue. So far CZ is the only VPN which did not DC yet

2) If it is private ip then hosting provider should give you some login/password from his VPN server? And it's common thing?

(Quote)

Correct it would be any IP you can publicly access from the internet without needing to be on a VPN.

(Quote)

(Quote)

If you have a public IP, then you should ask your provider to secure it by either firewall or by giving you private IPs you can reach via VPN.

Ideally all providers should never give out a public ipmi address. Even for our single server and plenty of full rack colo customers we offer to have their systems on our private vpn.

Give customers Vlan and VPN segregated, this is your mess and shows lost face, and disrespectful to customers whom you've outed.