networking disabled for shinyproxy.io

August 4, 2017 788 views
DigitalOcean Networking Security
ckluss
By:
ckluss

Hi

every time I try to run https://www.shinyproxy.io on my droplet I get a DOS message from DO and my droplet goes offline ... has someone the same experience and can tell me how I can handle this? I do not think that it is realy is a security problem...

thx
Christof

"We've detected an outgoing Denial of Service attack (....) originating from your Droplet. Specifically, we have detected inbound traffic exceeding 0.0 Mb/s and outbound traffic exceeding 0.0 Mb/s. Due to the traffic’s harmful nature, your Droplet was taken offline; this means it is not connected to the internet and all hosted sites and services are unreachable. We know that this action is disruptive, but it’s necessary to protect you, our network, and the target of your Droplet’s attack."

Log In to Comment
2 Answers
hansen August 4, 2017

Hi @ckluss

Are you running an open relay, meaning other people are accessing your proxy? If yes, then one of those people might be using your proxy as an attack vector.

Reply
ckluss August 5, 2017

Hi @hansen

I think it is rather unlikely, because I have not published the IP ... and it is only when I run shinyproxy. Other droplets are not blocked. Maybe someone has time to try shinyproxy with his droplet? ;)

I tried to read log files in /var/log ... but it is very irritating with a german key layout in the OP console ...

thx Christof

Reply
  • hansen August 5, 2017

    @ckluss

    Just because you don't publish an IP, doesn't mean it doesn't get scanned. And if you don't have any authentication, then anyone could start using the proxy.
    I think I'll pass on trying it on a droplet :-)

    Maybe you should ask in ShinyProxy forum/maillist - they should know what could cause something like this.

Have another answer? Share your knowledge.

Related Questions