Vicibox malicious or unwanted traffic

All installation and configuration problems and questions

Moderators: gerski, enjay, williamconley, Op3r, Staydog, gardo, mflorell, MJCoate, mcargile, Kumba, Michael_N

Vicibox malicious or unwanted traffic

Postby iboam » Sat Mar 28, 2020 7:54 pm

Hi i Got this message from my colocation service

Code: Select all
We have received information indicating that the following VPS is in violation of our Terms of Service/Acceptable Use Policies. Our reports indicate that this VPS is sending malicious or unwanted traffic as described below:

IP Address: 155.138.233.222

Event Description: The high ratio of SYN packets in the TCP traffic linked to your IP address indicates your instance is involved in a SYN flood DDoS type attack.

Event start: Sat, 28 Mar 2020 13:45:00 -0400
Event end: Sat, 28 Mar 2020 13:53:00 -0400
Targeted IPs: 104.31.83.188

If you are unable to correct the issue regarding this malicious traffic, the safest course of action is to destroy and re-deploy your VPS.

This instance has been stopped. Please correct the issue and notify us of the reason for this abuse and how it was corrected before restarting your instance.

Full text of our Terms of Service can be found at the following URLs:


Anyone with same issue on Vivibox 9.0.1 ??
ViciBox: 8.1.2 | VERSION: 2.14-711a BUILD: 190607-1525 | Clusters: 1 DB-WEB / 3 ASTX | SSL | WebRTC | Wallboard | DNC Nightly Scrubber
iboam
 
Posts: 233
Joined: Mon Feb 08, 2016 2:35 pm

Re: Vicibox malicious or unwanted traffic

Postby williamconley » Sat Mar 28, 2020 8:00 pm

Likely got infected by a bot. Did you whitelist lockdown the server?
Vicidial Installation and Repair, plus Hosting and Colocation
Newest Product: NonDisruptive Lead Loader for Enterprise Vicidial Clusters.
(IE: Keep on dialing even while loading large lists!)
http://www.PoundTeam.com # 352-269-0000 # +44(203) 769-2294
williamconley
 
Posts: 19403
Joined: Wed Oct 31, 2007 4:17 pm
Location: Davenport, FL (By Disney!)

Re: Vicibox malicious or unwanted traffic

Postby iboam » Sat Mar 28, 2020 8:04 pm

Do you have the steps to do it ???
ViciBox: 8.1.2 | VERSION: 2.14-711a BUILD: 190607-1525 | Clusters: 1 DB-WEB / 3 ASTX | SSL | WebRTC | Wallboard | DNC Nightly Scrubber
iboam
 
Posts: 233
Joined: Mon Feb 08, 2016 2:35 pm

Re: Vicibox malicious or unwanted traffic

Postby williamconley » Sat Mar 28, 2020 8:24 pm

Instructions for previous versions: http://viciwiki.com/index.php/DGG

Note that installing DGG is not required. The whitelist instructions precede installation. So you can just stop after the whitelist is done. DGG isn't tested on Vicibox 9 yet (At least I don't think it has been, I haven't checked with that department, lol).
Vicidial Installation and Repair, plus Hosting and Colocation
Newest Product: NonDisruptive Lead Loader for Enterprise Vicidial Clusters.
(IE: Keep on dialing even while loading large lists!)
http://www.PoundTeam.com # 352-269-0000 # +44(203) 769-2294
williamconley
 
Posts: 19403
Joined: Wed Oct 31, 2007 4:17 pm
Location: Davenport, FL (By Disney!)


Return to Support

Who is online

Users browsing this forum: Google [Bot] and 29 guests