I Had a VPS on Cloudzy, the Iranian Hosting Outfit. What Now?
securityweek.com
securityweek.com
I feel really duped. Let's just go directly into the politics of it: Iran is embargoed because it heavily funds terror groups. Hezbollah, when it's not busy trying to meddle in Israel, has ruined Lebanon for the last 43 years.
For the little money I spent to run a rprox there, even if was just a few cents of that, funneled though abrNOC, to the Tehranian government in taxes or transfer fees--it makes me absolutely ill.
And Cloudzy is still out there, duping people that it is a legitimate ISP.
Two weeks ago I noticed my now-terminated VPS with them had its internet access slowed down considerably. When I ran speedtest-cli to see what was going on, I noticed packet drops. To Amazon. Cloud-to-cloud packet drops?
Then after the publication of Cloudzy as a rat's nest of state-sponsored CNC bots, suddenly none of my DNS resolves to the VPS worked anymore.
It took me a few hours to realize that Cloudzy switched my VPS over to a completely different netblock. I went through my email. Cloudzy did not send any warning that the static IP the VPS I had was a "just kidding; it's not static" IP. It was this sudden relo of the IP that caused me to look and 20 minutes later, to my horror, I discover that my cash is going to a rando dude in Tehran.
I ran speedtest-cli after the network change, and then the closest responding server showed up to be QuadraNET (where I already rent physical). Cloudzy also claimed my VPS was in Dallas, but going from the ping time it was way more likely relocated to Los Angeles in the unannounced net change.
At this point, I didn't care to dig any further.
I just finished moving my bits off Cloudzy and shut it off. The US State Department and FBI will eventually come for their DNS. I feel bad for any of the legits who are on there who still don't know how much risk their bits are in.