By:

wsang

Has anyone had any of their account suspended by digital ocean?

April 25, 2014 2.3k

I have 4 droplets in digitalocean. one has been hacked in and abused by some hacker somewhere. been coordinating with them for the past few days regarding this. first they suspended my account without any warning. then asked for a verification. i sent answer to the verification so they brought my account back (they suspended all 4 droplets instead of just one btw). today, they suspended my account again (all 4 droplets, not just 1). because when they asked for verification i replied them with an answer that 'i've already given these information please search the support history' - i don't want to answer everything over again. i am on bed on my iphone at 12mn and didn't want to type all those info again. after posting that, they replied saying they will suspend my account unfortunately because i wasn't responding. - this is after i responded to each of the support tickets they opened about the abuse complaint.

Log In to Comment

2 Answers

asb MOD April 25, 2014

Hi,

I know how frustrating it can be to have one of your servers compromised, and I understand that having your account suspended only adds to that frustration. Unfortunately, the compromised droplet was actively attempting to access other servers and was likely a part of a botnet. Our support team has followed up with you privately, and your account should now be unlocked.

There are some steps that you can follow to secure and protect your droplets in the future:

- Use SHH keys to access your droplets: https://digitalocean.com/community/articles/how-to-set-up-ssh-keys--2

- Set up an iptables firewall https://www.digitalocean.com/community/articles/how-to-set-up-a-firewall-using-ip-tables-on-ubuntu-12-04

- Configure fail2ban to protect your ssh server and/or change the port ssh is running on https://www.digitalocean.com/community/articles/how-to-protect-ssh-with-fail2ban-on-ubuntu-12-04 https://www.digitalocean.com/community/articles/initial-server-setup-with-ubuntu-12-04

Initial Server Setup with Ubuntu 12.04

by Etel Sverdlov

This tutorial covers how to login with root, how to change the root password, how to create a new user, how to give the new user root privileges, how to change the port, and how to disable root login in. This tutorial is written for Ubuntu. When you first create your server, this tutorial explains the first steps you need to take. This tutorial is written for Ubuntu 12.04.

zzzsleep2017 April 16, 2018

I'm having the same problem, Long story short. Someone got into my droplet used it for phishing and now my account is suspended. :(

Have another answer? Share your knowledge.