A
A
Acvoloe2017-03-17 07:40:48
System administration
Acvoloe, 2017-03-17 07:40:48

Does Hetzner send emails complaining about the server?

Good afternoon!
I bought myself a virtual server on Hetzner and after a couple of months letters of "Happiness" began to arrive with a frequency of once a week.
Please advise how this problem can be solved.


> Dear Sir or Madam,
>
> NetBIOS defines a software interface and a naming convention.
> NetBIOS over TCP/IP provides the NetBIOS programming interface
> over the TCP/IP protocol.
>
> Over the past months, systems responding to NetBIOS nameservice
> requests from anywhere on the Internet have been increasingly
> abused for DDoS reflection attacks against third parties.
> The NetBIOS nameservice uses port 137/udp.
>
> Please find below a list of affected systems hosted on your network.
> The timestamp (timezone UTC) indicates when the openly accessible
> NetBIOS nameservice was identified.
>
> We would like to ask you to check this issue and take appropriate
> steps to secure the NetBIOS nameservices services on the affected
> systems or notify your customers accordingly.
>
> If you have recently solved the issue but received this notification
> again, please note the timestamp included below. You should not
> receive any further notifications with timestamps after the issue
> has been solved.
>
> Additional information on this notification, advice on how to fix
> reported issues and answers to frequently asked questions:
>
>
> This message is digitally signed using PGP. Information on the
> signature key is available at the aforementioned URL.
>
> Please note:
> This is an automatically generated message. Replies to the
> sender address will NOT be read
> but silently be discarded. In case of questions, please contact
> and keep the ticket number [CB-Report#...]
> of this message in the subject line.
>
>!! Please make sure to consult our HOWTOs and FAQ available at
> !! first.
>
> =============================================== =======================
>
> Betroffene Systeme in Ihrem Netzbereich:
> Affected systems on your network:
>
> Format: ASN | IP address | Timestamp (UTC) | Workgroup name | Machine name
> 24940 | 78.47.94.172 | 2017-03-10 02:00:25 | WORKGROUP | BADMAN

Answer the question

In order to leave comments, you need to log in

2 answer(s)
A
Axian Ltd., 2017-03-17
@AxianLTD

They write correctly. Close the NetBIOS ports from the outside, you probably don't use them anyway. And they will bomb you through them. And if they bomb or it turns out that your server is participating in a "reflection attack", then according to the rules, your server will simply be turned off.

F
First Name Last Name, 2017-05-26
@Rockbass

I agree with the previous commentator, but I’ll add on my own - Hetzner is generally a solution of dubious quality) With the same success, you can connect the old system unit at home to the optics and throw it on the uninterruptible power supply, in my opinion.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question