My droplet Down ! Still it's not resolved

March 28, 2018 1.9k views
Security DigitalOcean Firewall DigitalOcean Cloud Firewalls Ubuntu 16.04 FAQ
sirushtij
By:
sirushtij

I received the following mail from digital ocean and i removed the directory and domain causing the problem.
But still my droplet is down .They are not also responding to my tickets.

Because of poor support we are losing our site revenue from ads

Please somebody help us

Thanks in advance

**Hello,

Please review the following abuse complaint we received regarding a Droplet you control.

Regards,

Trust & Safety
DigitalOcean

Evidence of Abuse: http://techiggs.com/eNAbc/

Comments: [PL-734091] Malware infrastructure hosted on your server: techiggs.com

Hello,

During an investigation, we have identified malicious content hosted on techiggs.com that is part of a malware (computer virus) attack.

The following item(s) are components of this malware campaign:

http://techiggs.com/eNAbc/

Based on your role in this matter, please see our specific request below:

=== HOSTING PROVIDER AND/OR WEBSITE OWNER ===

If you agree that this is malicious, we kindly request that you take steps to have the content removed as soon as possible. It is highly likely that the intruder who set up this phishing content has also left additional fraudulent material on this server such as illegitimate access points.

=== REGISTRAR / REGISTRY ===

We kindly request that this domain is placed on hold as soon as possible and all client related information sink holed. It is also very likely the registrant in question has registered various other domains through your service and it is suggested you investigate as you see fit.

=== NAMESERVER, SOA ===

If it is within your power, please consider disabling the routing to this domain to prevent further abuse to the public.

=== CERT/CIRT, ETC. ===

If you’re able to assist in any means possible to see to the termination of this content, please do so. Your local expertise and influence on this matter is critical to this effort.

If we have contacted you in error, or if there is a better way for us to report this incident, please let us know so that we may continue our investigation.

ref:00Do0IjOV.5001NZT6T0:ref**

Log In to Comment
1 Answer
fishy March 28, 2018

Because of the public nature of this community, staff may not be able to publicly assist you with your concern. You are encouraged to open a ticket at https://cloud.digitalocean.com/ or request that the current matter be escalated. Please understand that due to circumstances beyond your control, staff may not be able to immediately respond.

That said, simply removing the directory from the server is not sufficient means of resolving the concern. You need to investigate how it got there in the first place, as well as how it might get there again in the future.

Reply
Have another answer? Share your knowledge.

Related