Question

Disabled the networking interface on the server

Posted October 3, 2014 4.9k views

I got the following message from digitalocean but i don’t know how to fix it. How can i find the droplet id and how can i sort it out.
i have access nowhere and i don’t know how to investigate what happens.

*Hi there,

We are sorry to report that we have detected what appears to be a large flood of traffic from one or more of your servers that is disrupting the normal traffic flow for other users.

To prevent this traffic from causing further disruption, we have disabled the networking interface on the server or servers involved. In order to correct the issue, here is the direct link to the console of the affected droplet https://cloud.digitalocean.com/droplets/xxxxxxx/console

Please take action at your earliest convenience in order to investigate and resolve the situation. Once this is done, if you determine the program was malicious, please also determine how this software came to be installed on your droplet and prevent it from being installed again in the future. As soon as this is done let us know and we will investigate re-enabling your networking.

If you need any guidance on how to protect your servers we suggest following these steps: https://www.digitalocean.com/community/questions/my-droplet-is-locked-by-support-staff-because-because-of-an-outgoing-flood-or-ddos-what-do-i-do

Please understand that this is a very serious issue as it negatively impacts our platform and your server. If you have any questions just let us know.

Thank you,
DigitalOcean Support*

7 comments

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
1 answer

Did you attempt to go to the URL in the email? The one starting in https://.....?
That will take you directly to the console for your droplet, where you will then log in as root (or any other user) using your password.

Submit an Answer