I guess they sent it to everyone but it somehow didn't email, its just a ticket in Support panel.
Good thing its not a hack or something, but it should've been communicated better(but I guess its a 1 eur vps).
At least it's well spent 1 euro
Even though this thing happened, I'm still happy with my 1 eur purchase. Its a steal, performance is amazing for the money.
@treesmokah said:
I guess they sent it to everyone but it somehow didn't email, its just a ticket in Support panel.
I did receive email up front about this change:
Stupid question from my side; I never thought about it this way, but providers (in this case Aeza) can always login as root to my VPS if they wanted to, right? Because apparently they can do an adhoc password reset and then use it to login via console.
@treesmokah said:
Even though this thing happened, I'm still happy with my 1 eur purchase. Its a steal, performance is amazing for the money.
Thanks again for sharing this deal. Best 1 euro I've spent in my life.
LinuxFreek.com — Thank you for your attention to this matter
@Freek said:
Stupid question from my side; I never thought about it this way, but providers (in this case Aeza) can always login as root to my VPS if they wanted to, right? Because apparently they can do an adhoc password reset and then use it to login via console.
Most providers can actually just get into your server quite easily, most of the time due to having qemu-guest-agent installed and running as root in your VM.
VMManager (what they use) somehow installs that shit even if you manually install an ISO IIRC.
So I guess if you want to be in the safest side (which is still not 100%, as you don't have the disk drive in your hand) then encrypting the drives is the best bet.
@zgato said: VMManager (what they use) somehow installs that shit even if you manually install an ISO IIRC.
VMManager is too intrusive (unlike VirtFusion) and to configure network for example they alter disk content before booting VM. On the other hand, VirtFusion uses external cloud-init disk and is able to cooperate with encrypted disks.
However I would like to note that LUKS (or any other disk encryption) makes unauthorized access to the virtual machine only harder but not impossible.
Check our KVM VPS plans in 🇵🇱 Warsaw, Poland and 🇸🇪 Stockholm, Sweden
@Mumbly said:
It looks like my VPS root password has just been automatically (?) reset via the control panel, and I received a notification via email (I did not request a change).
I don't believe my Aeza billing account was compromised, considering I use two-factor authentication. Is this normal with Aeza?
Virtual machine password has been changed
The password of your virtual machine “....” has been changed successfully. Use the following credentials to manage your service:
Login: root
Password: ...
Hello, on April 30, passwords were reset on all services, this was done in order to increase the security of customer services.
There was also a post about it in our Telegram channel.
@alamdarzia said:
Statistics are not working, and is the ddos protection effective?
Hello, our attack protection works perfectly, our clients when attacked don't feel it on their servers.
Even with a 30gbps attack, your server will still work properly.
We care a lot about our customers and will not let evil people hack/break/disrupt your service.
Greetings to all users of this forum and our customers.
Saw a dispute about adding a bank or credit card to Stripe and here is what we want to tell you.
Adding a card to Stripe is absolutely safe, because Stripe will not steal your card or commit fraud with it, as it is a large superior payment aggregator.
I recommend you pay your bills via PayPal, we have it now and it is actively used by our customers.
@AezaHost when are you going to fix your shitty support? Used to be good (I even have a cool aeza emoji pack from your support guy) but now they're arrogant and just overall useless, it's always client's fault.
your antiddos is not great. I can almost boot off my VPS with a simple free stresser.
@zgato said: @AezaHost when are you going to fix your shitty support? Used to be good (I even have a cool aeza emoji pack from your support guy) but now they're arrogant and just overall useless, it's always client's fault.
your antiddos is not great. I can almost boot off my VPS with a simple free stresser.
Hello, let's communicate without insults and bad words.
Please clarify about our support, what exactly did you dislike or displease you?
If we talk about DDOS attacks, try to "put" your server down.
@zgato said: @AezaHost when are you going to fix your shitty support? Used to be good (I even have a cool aeza emoji pack from your support guy) but now they're arrogant and just overall useless, it's always client's fault.
your antiddos is not great. I can almost boot off my VPS with a simple free stresser.
Hello, let's communicate without insults and bad words.
Please clarify about our support, what exactly did you dislike or displease you?
If we talk about DDOS attacks, try to "put" your server down.
Can DM you screenshots before posting those here if you want, but if you're going to ignore them like in the OGF then I'll pass.
You should at least train your support. Answers like "i think" shouldn't be an answer to a client asking a question, they don't even bother to ask for a superior supp that can answer that.
@vercubynal said:
Is their website down right now?
It works just fine for me.
Back to VPS, I have bought it before I even started this thread, and experienced no downtime or cpu steal. Network and disk isn't bad too. Performance and quality is insane for this price.
Anyone know how Aeza handles DMCA complaints in this location? Quick google on the company itself shows they've got worse things happening on their networks so DMCA related content shouldn't be an issue just wondered if anyone here had any experience with them
@beanman109 said:
Anyone know how Aeza handles DMCA complaints in this location? Quick google on the company itself shows they've got worse things happening on their networks so DMCA related content shouldn't be an issue just wondered if anyone here had any experience with them
they don't give a fuck in their other bulletproof companies, but you should contact their support to make sure. They don't even allow TOR exit nodes.
@beanman109 said:
Anyone know how Aeza handles DMCA complaints in this location? Quick google on the company itself shows they've got worse things happening on their networks so DMCA related content shouldn't be an issue just wondered if anyone here had any experience with them
Hello, the DMCA is only not ignored at the USA location, the rest of the locations are ignored.
Every abuse letter is checked by experts, if your letter is not answered, it does not mean that we ignore.
Networks used for that are dead. It could be an exit scam or legit authorities action, too early to tell now, no media reports or justice.gov post yet.
If you have never seen their offering and prices (archive)
They ignored pretty much all abuse, only rules are no terrorism and CP. Was a real BPH.
A day prior they posted on their Telegram informing of some service issues (translated from Russian).
We will see, if its legit, it could affect Aeza as a whole.
Yup, was used by other brands. I was literally just looking at it and about to post lol
It is also used by lethost
At this point I hope their main Aéza brand doesn't get involved in any of this, but seeing all of those ASNs are using their main ASN as an upstream, ...
Yup, was used by other brands. I was literally just looking at it and about to post lol
It is also used by lethost
They share/d that asn's with hosts like Yeezyhost and a few other. They have a billion different brands and rotate ASN's often. One thing doesn't change, upstream is either Aeza, Storm, Datapacket or Combahton(Aurologic). Everything but Russian location is tunneled to Hetzner.
So far looks like it has been orchestrated, and these weren't real seizure banners. More of an exit scam than anything. https://x.com/Qur1um/status/1816719436826435877 (archive)
"Suspended Cyberhub ASN that is part of the Doppelganger ecosystem has been just renamed to HellaAS (Hellenic Digital Services Ltd / Luxhost). "
This article is better than the last one, it gets many things right (not all).
And provides a fancy graphic (you can easily get this information from bgp.tools)
It comes shortly after their attack at pq.hosting/STARK INDUSTRIES SOLUTIONS over political reasons, but this time they hit a more "dirty" provider.
All of their accounts (responsible for BPH) got banned on Lolz/Zelenka for scamming. Main Aeza account remains, but its no secret they have ties to owners of Lolz and probably bought "special rules".
It's actually wild the amount of hosting companies I've been unaware to be involved in all of this LOL
I have been aware of them all before qurium started researching it, I was just wondering when will shit hit the fan. Lolz/Zelenka communities, from which Aeza and all of these hosts originate, are pretty much a Russian equivalent to skid communities. Its all retarded teenagers, but it makes it easy to get lots of ASN's registered on these clueless kids.
Aeza started being relevant when "drainer" and fraud gangs started using them. This is how it all started, I would not be surprised if heads of Aeza were also involved in crypto draining. Shelter LLC was exclusively for that usage at first, it was a collaboration with 4vps(ex-MoreneHost, connected to PQ) which offered bulletproof hosting at the time. Their services were integrated to a "panel" used for "crypto streams"(elon musk 2x bitcoin livestream type shit) that automatically broadcasted from compromised accounts, offered domain registration and landing page hosting for it.
I forgot the name of that service, but will post once I find it. I'm pretty sure its dead by now, but I made archives. "crypto streams" seem dumb and harmless, but trust me when I say, it generated absolutely fucking insane money (If you did it right, you'd be a millionaire within a week). You cannot underestimate how dumb people are, it worked extremely well for a while, then crypto "attention" died. Since we are in a bull run again, expect the same shit to happen all over again.
They are not the only ones doing it, and its not the end of their shenanigans.
@Rero said:
What you could expect from the Russian-based company? RIP Aeza!
My experience with Ukranian-based & US-based hosts is way worse.
Been years with multiple Russian-based hosts. None of them have scammed me, like the ones mentioned above.
Hello, I am an official agent.
Recently, the well-known German government-funded publication correctiv released an investigation accusing us of working and serving Kremlin propaganda.
This is an absolute fabrication that has nothing to do with reality. We do not work with governments and are completely independent.
And now we will explain why. All our European VPS are hosted on servers from Hetzner.
They are very cheap and we can order them by the hundreds and thousands. You don't need any funding for this, especially from any country.
You just have to make a few clicks, pay $200, wait a little while and then our automatic system will add the server to our European cluster.
It's very easy, fast, cheap, and allows us to grow very quickly without any investment, and provide the highest quality servers possible. This is exactly what we are guilty of.
We reliably know that at least one major European hoster appealed to the German government, labelling us as a threat to the national security of Germany, his words - we can quietly order 1000 new nodes spending little money and minimum effort, arrange huge discounts and actually destroy the hosting market in Germany.
For this reason the information campaign against us started. More than half of the mentioned AS in the article have nothing to do with us at all.
We have not received any complaints about ‘twin sites’. And those AS that were served through us we have switched off, but even during their work we received almost no complaints. Except for complaints from anonymous trolls, which in our opinion were competitors of these AS.
However, the campaign against us has not stopped, and continues. Although we don't have anything illegal located on our site, and we always respond to all complaints.
So what is happening now is not just pressure on business, but on freedom of speech.
More than 80% of our clients use the servers for VPN, to bypass blocking and get access to independent information. (screenshot with AS traffic statistics)
And the beginning of the information campaign against us surprisingly coincided with the beginning of the YouTube slowdown in Russia.
The date of publication of this article is 11. Juli 2024.
The beginning of YouTube slowdown - 12 July, exactly one day after the article was published. https://ntc.party/t/обсуждение-замедление-youtube-в-россии/8074
The current actions of the ‘fighters for honesty’ are purely a crackdown on honest business, freedom of speech and working for Russia.
After all, why spend huge amounts of money on complex DPIs when you can restrict access at the expense of the German government?
One of their wishes was to force us to choose sides in the conflict.
They achieved that and we had to write the words above, so now the possibility of our AS being blocked in Russia has grown tremendously. As a result of which hundreds of thousands of people may lose access to free internet.
We try to avoid unnecessary noise and do not want to continue this discussion.
Comments
Even though this thing happened, I'm still happy with my 1 eur purchase. Its a steal, performance is amazing for the money.
I did receive email up front about this change:
Stupid question from my side; I never thought about it this way, but providers (in this case Aeza) can always login as root to my VPS if they wanted to, right? Because apparently they can do an adhoc password reset and then use it to login via console.
Thanks again for sharing this deal. Best 1 euro I've spent in my life.
LinuxFreek.com — Thank you for your attention to this matter
Received the same email, thought mine was hacked.
https://microlxc.net/
Most providers can actually just get into your server quite easily, most of the time due to having qemu-guest-agent installed and running as root in your VM.
VMManager (what they use) somehow installs that shit even if you manually install an ISO IIRC.
So I guess if you want to be in the safest side (which is still not 100%, as you don't have the disk drive in your hand) then encrypting the drives is the best bet.
VMManager is too intrusive (unlike VirtFusion) and to configure network for example they alter disk content before booting VM. On the other hand, VirtFusion uses external cloud-init disk and is able to cooperate with encrypted disks.
However I would like to note that LUKS (or any other disk encryption) makes unauthorized access to the virtual machine only harder but not impossible.
Check our KVM VPS plans in 🇵🇱 Warsaw, Poland and 🇸🇪 Stockholm, Sweden
Back in stock, grab one before its too late
Billing system is buggered rip
Hello, on April 30, passwords were reset on all services, this was done in order to increase the security of customer services.
There was also a post about it in our Telegram channel.
Hello, it is as safe to use our website aeza.ru as aeza.net.
Aeza.ru is under the jurisdiction of the Russian Federation and aeza.net is under the jurisdiction of the United Kingdom.
Site aeza.ru differs only in the fact that some updates are not released there, but the services work in normal mode.
Hello, our attack protection works perfectly, our clients when attacked don't feel it on their servers.
Even with a 30gbps attack, your server will still work properly.
We care a lot about our customers and will not let evil people hack/break/disrupt your service.
Greetings to all users of this forum and our customers.
Saw a dispute about adding a bank or credit card to Stripe and here is what we want to tell you.
Adding a card to Stripe is absolutely safe, because Stripe will not steal your card or commit fraud with it, as it is a large superior payment aggregator.
I recommend you pay your bills via PayPal, we have it now and it is actively used by our customers.
@AezaHost when are you going to fix your shitty support? Used to be good (I even have a cool aeza emoji pack from your support guy) but now they're arrogant and just overall useless, it's always client's fault.
your antiddos is not great. I can almost boot off my VPS with a simple free stresser.
Hello, let's communicate without insults and bad words.
Please clarify about our support, what exactly did you dislike or displease you?
If we talk about DDOS attacks, try to "put" your server down.
Can DM you screenshots before posting those here if you want, but if you're going to ignore them like in the OGF then I'll pass.
You should at least train your support. Answers like "i think" shouldn't be an answer to a client asking a question, they don't even bother to ask for a superior supp that can answer that.
ayo just copped one
anyone know how their WAF works after pointing NS records?
the knowledge base is in russian(?) and free WAF tier doesn't get support. i can't find the panel it mentions
Where is it, i cant find it in payments options
Found it.
ServerStatus , slackvpn , linux mirrors
Recommended Providers: Servarica(aff) | HostBRR(aff) | SolidVPS(aff) | RackNerd(aff) | KuroIT(aff) | AlphaVPS(aff) | HostDare(aff)
Is their website down right now?
It works just fine for me.
Back to VPS, I have bought it before I even started this thread, and experienced no downtime or cpu steal. Network and disk isn't bad too. Performance and quality is insane for this price.
Aeza promo has IPv6?
Cloudcone | Crunchbits | Dartnode | Dedirock | Georgedatacenter | Gigahost | Hostbilby | Host-c | Hostdzire | Hostsailor | Namecrane | Nuyek | Realtoxmedia | Servarica | Terabit | Tnahosting | Virmach
Anyone know how Aeza handles DMCA complaints in this location? Quick google on the company itself shows they've got worse things happening on their networks so DMCA related content shouldn't be an issue just wondered if anyone here had any experience with them
cum laude bongineering
they don't give a fuck in their other bulletproof companies, but you should contact their support to make sure. They don't even allow TOR exit nodes.
They very promptly let me know that they "Ignore DMCA for all virtual servers, all locations except USA. In Stockholm also ignore accordingly."
cum laude bongineering
1 IPv4 address + /48 IPv6 subnet
Hello, the DMCA is only not ignored at the USA location, the rest of the locations are ignored.
Every abuse letter is checked by experts, if your letter is not answered, it does not mean that we ignore.
Fun fact, Aeza's bulletproof brand "lethost" has apparently just been seized by glowies.
https://lethost.co/ (archive)
https://bgp.tools/as/216319
https://bgp.tools/as/210352
Networks used for that are dead. It could be an exit scam or legit authorities action, too early to tell now, no media reports or justice.gov post yet.
If you have never seen their offering and prices (archive)
They ignored pretty much all abuse, only rules are no terrorism and CP. Was a real BPH.
A day prior they posted on their Telegram informing of some service issues (translated from Russian).
We will see, if its legit, it could affect Aeza as a whole.
neato!!!
The Yeti has left the building.
Also https://bgp.he.net/AS216309 (I assume it was used for the same stuff)
Yup, was used by other brands. I was literally just looking at it and about to post lol
It is also used by lethost
At this point I hope their main Aéza brand doesn't get involved in any of this, but seeing all of those ASNs are using their main ASN as an upstream, ...
They share/d that asn's with hosts like Yeezyhost and a few other. They have a billion different brands and rotate ASN's often. One thing doesn't change, upstream is either Aeza, Storm, Datapacket or Combahton(Aurologic). Everything but Russian location is tunneled to Hetzner.
Sunhost was also one of their bulletproof brands, also used CHROMIS IT ASN.
https://sunhost.io/ (archive)
Slightly different banner.
They even posted it on their Telegram:
People on XSS aren't happy
From BHF, a forum which endorsed Sunhost and was even hosted there.
"They were banned on another board. Word is the FBI got their hands on them."
Damn! So Aeza is going down?
Not sure, but they for sure have feds on their ass.
Wait, FBR is Russian FSB (?). Muricas FBI has 0 power in Russia. So, Aeza has chance to buy out.
So far looks like it has been orchestrated, and these weren't real seizure banners. More of an exit scam than anything.
https://x.com/Qur1um/status/1816719436826435877 (archive)
"Suspended Cyberhub ASN that is part of the Doppelganger ecosystem has been just renamed to HellaAS (Hellenic Digital Services Ltd / Luxhost). "
Doppelganger refers to an article from "qurium"
https://www.qurium.org/alerts/russia/exposing-the-evil-empire-of-doppelganger-disinformation/ (archive)
A very well researched article written by people who appear to know what they are doing.
and "correctiv", a biased political outlet funded by German Govt
https://correctiv.org/en/fact-checking-en/2024/07/22/inside-doppelganger-how-russia-uses-eu-companies-for-its-propaganda/ (archive)
This article is better than the last one, it gets many things right (not all).
And provides a fancy graphic (you can easily get this information from bgp.tools)
It comes shortly after their attack at pq.hosting/STARK INDUSTRIES SOLUTIONS over political reasons, but this time they hit a more "dirty" provider.
Aeza website works. Are their services down?
I don't know if I should start preparing popcorn or not.
Cloudcone | Crunchbits | Dartnode | Dedirock | Georgedatacenter | Gigahost | Hostbilby | Host-c | Hostdzire | Hostsailor | Namecrane | Nuyek | Realtoxmedia | Servarica | Terabit | Tnahosting | Virmach
It probably only affects their bulletproof brands, but who knows what will come out of it.
Looks like they are in deep shit.
Evil Empire
Meanwhile on their Telegram, they celebrate "sysadmin holidays", so apparently they have no sysadmins around today.
All of their accounts (responsible for BPH) got banned on Lolz/Zelenka for scamming. Main Aeza account remains, but its no secret they have ties to owners of Lolz and probably bought "special rules".
LetHost (archive)
SunHost (archive)
BenderHost (archive)
Marshall Hosting (archive)
ZeroHost (archive)
Its possible I missed some, they have shit ton of accounts, shell companies and brands.
Interesting message to Spamhaus was left at CHROMIS IT ASN (archive)
Cloudcone | Crunchbits | Dartnode | Dedirock | Georgedatacenter | Gigahost | Hostbilby | Host-c | Hostdzire | Hostsailor | Namecrane | Nuyek | Realtoxmedia | Servarica | Terabit | Tnahosting | Virmach
They got kicked from some Russian DC for many Spamhaus complaints xD
correctiv should be treated with caution. they are not independent journalists but rather politicians or secret service agents.
A more in depth article covering the same.
https://www.qurium.org/alerts/exposing-the-evil-empire-of-doppelganger-disinformation/
It's actually wild the amount of hosting companies I've been unaware to be involved in all of this LOL
I have been aware of them all before qurium started researching it, I was just wondering when will shit hit the fan. Lolz/Zelenka communities, from which Aeza and all of these hosts originate, are pretty much a Russian equivalent to skid communities. Its all retarded teenagers, but it makes it easy to get lots of ASN's registered on these clueless kids.
Aeza started being relevant when "drainer" and fraud gangs started using them. This is how it all started, I would not be surprised if heads of Aeza were also involved in crypto draining. Shelter LLC was exclusively for that usage at first, it was a collaboration with 4vps(ex-MoreneHost, connected to PQ) which offered bulletproof hosting at the time. Their services were integrated to a "panel" used for "crypto streams"(elon musk 2x bitcoin livestream type shit) that automatically broadcasted from compromised accounts, offered domain registration and landing page hosting for it.
I forgot the name of that service, but will post once I find it. I'm pretty sure its dead by now, but I made archives. "crypto streams" seem dumb and harmless, but trust me when I say, it generated absolutely fucking insane money (If you did it right, you'd be a millionaire within a week). You cannot underestimate how dumb people are, it worked extremely well for a while, then crypto "attention" died. Since we are in a bull run again, expect the same shit to happen all over again.
They are not the only ones doing it, and its not the end of their shenanigans.
What you could expect from the Russian-based company? RIP Aeza!
My experience with Ukranian-based & US-based hosts is way worse.
Been years with multiple Russian-based hosts. None of them have scammed me, like the ones mentioned above.
Hello, I am an official agent.
Recently, the well-known German government-funded publication correctiv released an investigation accusing us of working and serving Kremlin propaganda.
This is an absolute fabrication that has nothing to do with reality. We do not work with governments and are completely independent.
And now we will explain why. All our European VPS are hosted on servers from Hetzner.
They are very cheap and we can order them by the hundreds and thousands. You don't need any funding for this, especially from any country.
You just have to make a few clicks, pay $200, wait a little while and then our automatic system will add the server to our European cluster.
It's very easy, fast, cheap, and allows us to grow very quickly without any investment, and provide the highest quality servers possible. This is exactly what we are guilty of.
We reliably know that at least one major European hoster appealed to the German government, labelling us as a threat to the national security of Germany, his words - we can quietly order 1000 new nodes spending little money and minimum effort, arrange huge discounts and actually destroy the hosting market in Germany.
For this reason the information campaign against us started. More than half of the mentioned AS in the article have nothing to do with us at all.
We have not received any complaints about ‘twin sites’. And those AS that were served through us we have switched off, but even during their work we received almost no complaints. Except for complaints from anonymous trolls, which in our opinion were competitors of these AS.
However, the campaign against us has not stopped, and continues. Although we don't have anything illegal located on our site, and we always respond to all complaints.
So what is happening now is not just pressure on business, but on freedom of speech.
More than 80% of our clients use the servers for VPN, to bypass blocking and get access to independent information. (screenshot with AS traffic statistics)
And the beginning of the information campaign against us surprisingly coincided with the beginning of the YouTube slowdown in Russia.
The date of publication of this article is 11. Juli 2024.
The beginning of YouTube slowdown - 12 July, exactly one day after the article was published.
https://ntc.party/t/обсуждение-замедление-youtube-в-россии/8074
The current actions of the ‘fighters for honesty’ are purely a crackdown on honest business, freedom of speech and working for Russia.
After all, why spend huge amounts of money on complex DPIs when you can restrict access at the expense of the German government?
One of their wishes was to force us to choose sides in the conflict.
They achieved that and we had to write the words above, so now the possibility of our AS being blocked in Russia has grown tremendously. As a result of which hundreds of thousands of people may lose access to free internet.
We try to avoid unnecessary noise and do not want to continue this discussion.
Even graph was added in the wall of text
. A ton of bs and no addressing lethost seizure.