「求助」收到 DMIT 服务器安全警告 怎么处理

一周前购买DMIT Pro服务器当线路机,部署了Vless Reality代理,今天收到DMIT安全警告邮件,并强制停机了,请问该怎么处理,如果不能当代理用我买DMIT PRO做什么呢?这个代理只有我自己在用,每天消耗流量大概30G,主要请求的是一些美国和币的行情数据。
收到DMIT安全邮件如下:
Dear DMIT Customer,

DMIT Proactive Security detected that the following service was exposing a publicly accessible proxy or similar application with a serious security issue:

Service:

  • 179.xxx.xxx.xxx(service #204353)

OpenAI has identified activity originating from your service as unauthorized and prohibited use. The detected service impersonates OpenAI’s infrastructure to steal OpenAI and Cloudflare resources, including network bandwidth and edge computing services.

Public proxy services, forged authorization, and access to unauthorized third-party resources are strictly prohibited under DMIT’s Acceptable Use Policy.

To prevent further abuse, we have stopped the affected service.

You must immediately:

  • Remove the public proxy service and all related applications.
  • Stop all attempts to forge, bypass, or misuse authorization.
  • Remove any configuration, script, credential, or software used to access unauthorized resources.
  • Review the system for compromise and reinstall the operating system if its security cannot be confirmed.
  • Do not restart the affected application or expose any public proxy service again.

Any repeated offense, continued abusive activity, or failure to remove the prohibited application may result in immediate service suspension, an abuse penalty or fine, and possible termination of your services.

Best regards,
Technical Support Team
DMIT Inc.

3 个赞

哥,别发 AI 生成的内容

:yellow_circle: 第二条信息|处置进展更新

DMIT 已于 北京时间 8 月 28 日凌晨 3 时许,对受影响的 VM 执行了 关机操作,并向受影响客户发送了通知邮件,请所有受影响客户在收到邮件后 检查并完成相关修复工作。

:white_check_mark: 您的 VM 并未被暂停,DMIT 目前仅执行了关机操作,您可以 随时开机并恢复使用。

修复确认流程:

  1. 确认整改完成后,无需提交工单
  2. IP 更改限制将在 72 小时内自动解除
  3. DMIT 将持续观察问题是否仍然存在
  4. 若问题仍然存在,DMIT 将建议客户再次检查(您将再次收到新的邮件)

:warning: 另:目前工单系统压力激增,您的请求可能有所延迟,敬请谅解。

你的伪装域名套了 cf 的 cdn,被别人滥用了

DMIT检测到 sub2api 的流量,不准使用了,直接给我关机了 - #4,来自 _axis 论坛里有人说这个问题了。

但是这个只有我自己在用啊,不套cf的cdn就可以用了是吗?

sni换非套CF的域名即可

1 个赞

你的SNI偷的谁的?

1 个赞

用的cloude的,看来要换掉了

偷的域名不要选开了cf或者使用cdn的网站

你套了cf的证书,你的小鸡就是cf优选节点了啊 :rofl:

对啊。不要用使用了cf的sni