甲骨文莫名其妙发封邮件说我在ddos 然后就把我的帐号封了

redneck

       
Action Recommended

Oracle Cloud Infrastructure - Abusive Activity Identified

Oracle Cloud Infrastructure Customer,

Oracle has received notice of or detected unusual and potentially harmful activity originating from your tenancy.

Traffic Details: Outbound Port Scanning, Brute-forcing, Web Exploitation, and/or DDoS

Under your agreement with Oracle, you are responsible for the maintenance and security of this resource. We have determined that there is a significant threat to the functionality, security, integrity, or availability of our services, including violations of the Oracle Cloud Acceptable Use Policy, and your resource(s) has been disabled.

Reference Number
XXXXX


Service(s)
Oracle Cloud Infrastructure


Tenant ID
ocid1.tenancy.oc1..xxxxxxxx

Compartment: myoracle

Region        Reason
US West (Phoenix)        Open DNS Resolver
When inspecting your resources or creating new resources, please consider reviewing and implementing the following security controls:
• Implement appropriate security controls and review your security lists
• Ensure the OS and all software running on the resource(s) are fully patched, and new patches are applied when available
• Change all default credentials and configure with a complex password
• When possible, use key-based authentication and disable password-based authentication
• Disable any unused accounts or services

Cloud Service Agreement: Click here
Oracle Cloud Infrastructure Security Guide: Click here
Oracle Cloud Infrastructure Security Best Practices: Click here
Oracle Cloud Infrastructure Security whitepaper: Click here
Oracle Critical Patch Updates, Security Alerts, and Bulletins: Click here
Oracle Cloud Security Practices: Click here

Questions?

Please contact Oracle Account Representative or Oracle Support using the Customer Support Identifier (CSI) & Organization name provided above. Refer Service Administrator guide for help with MOS setup.

To receive only announcements that you consider relevant, you can now create an Announcement Subscription. This will let you configure filters that define the criteria you want announcements to meet before they are sent to subscribers.

You can also visit the OCI Service Health Dashboard for current status information.
有没有人有经验怎么解封？
好几年的老号了
啥也没干
就放了几个网站

叶晗云

别用hy tuic暴力发包 不然就很容易认定你在ddos

woputby

免费的真以为永久给你用吗

redneck

榆木 发表于 2023-11-10 14:27
没恢复。我的是自己开了一个dnsmasq在弄东西。其他的 例如 adguardhome 之类的 应该也会被检测到 以这个 ...

我有可能是以前开了dnsmasq
但这已经是八百年前的事情了
难道现在被别人扫到拿来当公共dns？

xiaoguaishou

因为你开了DNS，你仔细看看这个邮件。我也是，账号没有了

主菜单

redneck 发表于 2023-11-9 23:17
仔细想才想起来
几百年前跑过dnsmasq
不知道关了没有

DNS可以试试开DOH走443应该不管

xiaoguaishou

nike1999 发表于 2023-11-10 14:01
什么叫用完DNS,是把甲骨文机器当DNS服务器的意思吗?

只是做一个coredns的实验。验证完忘记关了。而且我设置了网络策略，不在我得网络根本不能扫到

xiaoguaishou

redneck 发表于 2023-11-10 14:07
我应该最多使用了谷歌的公共dns 8.8.8.8
应该没有自己把机器设置成公共dns服务器
你的是什么情况？ ...

我是装了个coredns验证了下DNS，结果忘记关了。

aru

+1 我的也被封了
没开dns，hy 基本没在用

里面有一个服务还比较重要的，幸好代码备份了，虽然不是最新的。
换了一台机器装上，又是一个好汉
感谢乌龟壳让我免费用了几年

Unit2411

redneck 发表于 2023-11-10 15:29
如果硬要给这个免费加上一个期限
我希望是
一万年

这是不可能了，能免费用四五年都已经很不错了

redneck

Unit2411 发表于 2023-11-10 15:26
毕竟是免费的，被封了也没什么办法

如果硬要给这个免费加上一个期限
我希望是
一万年

Unit2411

毕竟是免费的，被封了也没什么办法

onemjj

榆木 发表于 2023-11-10 12:59
这是因为你开了公共dns 我的也是这个原因。

老哥这是啥意思

0.0

redneck 发表于 2023-11-10 15:14
看了确实完全一样
只是地区不同
看了一圈甲骨文的网站也没搞清楚怎么上诉

看来是通用封号模板估计封号撕逼的太多了，根本没人会给认真处理