Skip to content

500 days without touching my VPS, it still works

Reviews by kei_osa 16 replies 4.5K views
#1

I logged into my Contabo control panel for the first time in sixteen months. Uptime: 502 days. I have not updated the kernel since 2023. I have not checked logs. I have not even thought about this server. It hosts a static site and a forgotten gitea instance. The monthly invoice still processes. Everything is fine. Everything is always fine. This is the way.

#2

Bro bro bro. 500 days no update gan. Very very dangerous. My friend server also like dat cheap cheap vps from RackNerd. Never never touch. Last week hijacked already bro. Crypto mining all cpu 100%. If it ain't broke don't fix it but if it ain't broke maybe someone else broke it for you gan...

Honey badger don't care... about downtime
#3

lee_mcr said:
Crypto mining all cpu 100%
Classic hijack pattern no kernel patch in 500 days ancient CVE still open your server basically public pool now kei_osa probably mining monero for someone in Minsk check your load average if you can still log in

#4

Haha yeah I had a box at Hetzner https://www.hetzner.com I didnt touch for like 2 years it was fine then I got an abuse email 12 cores going brrr for some monero pool I thought it was broke but it was broke for me not for them the kernel was from 2021 I still have the image somewhere never restored anything though just reinstalled

#5

What kernel version was it running in 2023, 5.x or 4.x?

#6

Contabo's Nuremberg network is decent but their patching policy worries me.

#7

If it ain't broke someone else broke it for you

oops: 0000 [#1] SMP
#8
prague1983 said:
If it ain't broke someone else broke it for you

Haha this one good one bro. I stealing this for my email signature.

But serious serious. Kei_osa you still alive or not? 4 days already no reply. Your server also 504 days now maybe.

Honey badger don't care... about downtime
#9

Has anyone actually checked if their "hijacked" RackNerd or Contabo box had key-based auth with passphrase, or was it just password login on port 22? Feels like there's a big difference between "unpatched" and "unpatched with terrible access hygiene" that gets glossed over in these threads.

Also

prague1983 said:
If it ain't broke someone else broke it for you

conbini > datacenter snacks
#10
prague1983 said:
If it ain't broke someone else broke it for you

Yeah I finally logged in to check. Load average 0.02. No weird processes. Invoice history clean, no support tickets opened ever.

Still not updating the kernel though.

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft