--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/6798fab2-5974-4673-89e1-63bb6a4249ce%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/2e0af7e5-1438-4a96-80c7-8db422e68512%40googlegroups.com.
--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/2e0af7e5-1438-4a96-80c7-8db422e68512%40googlegroups.com.
Hi all, just for the record in this public forum, several Googlers spoke with Guillaume this morning, and we successfully discovered that his VMs had been taken over by a hacker, who then started mining cryptocurrency (as they often will do, it makes them "money" for free). The details of what happened are his private information, so I'll let him choose whether to share more about what occurred.In cases like these, the shutdown is a protective measure. If a VM is exploited, "stealing" usage to mine cryptocurrency is merely the *least* dangerous thing a hacker could do. They could instead steal or destroy your data, install ransomware, or other more malicious activities. We often can't know exactly what's going on because we don't look inside VMs as a rule, so we act fast to prevent the legit customer from losing money or their data, but we understand it's disruptive, and are working on better ways to notify and address the situation if possible.In these cases, we are caught in the middle, and have to balance between disruption of the legitimate customer on the one hand, and allowing their systems to be at risk by not shutting them down on the other (while we wait for a response, for example). It's a tough tradeoff, complicated by the fact that many customers do not respond to our abuse notice mails. We appreciate your continued feedback on how you think this can best be handled.We've been seeing an increasing number of customers whose VMs have been compromised without their knowledge. This seems to be an odd consequence of the strong customer growth and awareness of Google Cloud that we're seeing in the market, but it's unfortunate all the same. It's very important to be sure to follow best security practices in the Cloud, including carefully controlling what software you install and make available via internet-facing IPs, and being sure to keep that software up to date. Hackers are well aware of the IP ranges used by Google, and scan these ranges constantly, looking for people's accounts that can be taken over. This problem is not unique to Google's cloud, however we will continue working on providing more and better detection and prevention tools to help customers as much as we can.I hope this helps explain a little more about what's going on and our approach to protecting customers against these issues.Thanks,-Paul
On Thu, Jan 5, 2017 at 2:27 AM, Guillaume Demonet <demonet....@gmail.com> wrote:
I've received the exact same email while working on a school project involving numerous simulations (Monte Carlo methods).This project is due for tomorrow and I don't have any way to access data backups... Is there any way you could send me an image of the VM's drive ?Also, unlike what Paul said, the suspension action was immediate after the email notice. I wish you guys can fix this behavior and hope no one endures the same trouble.Thanks a lot for your help,Guillaume
On Thursday, 1 December 2016 00:44:23 UTC+1, Ed Fleisc wrote:I've received an email from Google saying they were suspending my project due a violation of Terms of Service by mining cryptocurrency. First time I hear about cryptocurrency! Right after that the access to my project was blocked. I has been over 24 hours and we have been desperately trying to contact Google but don't get any replies at all. We sent an Appeal explaining the details of our test project, emails and nothing.
We are doing some testing with IoT devices and we don't have that data backup anywhere else, everyone is freaking out as we need this information for an important upcoming meeting on Monday. We can't even access the snaptshots/images to least try downloading an image of the server.
Can google completely shutdown the access to the account? Wouldn't it make more sense for them to just disable the account to start the servers until the issue is resolved? which clearly is a mistake, unless our server has been hacked.
Is there any other way to contact Google? (that we can actually get a response)... Everyone is blaming me, because Google Cloud was my choice for these tests. I never thought something like this could happen.
Thank you!
Ed
--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/2e0af7e5-1438-4a96-80c7-8db422e68512%40googlegroups.com.
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/c594a0f1-8f78-45ad-99d7-50052fbf5483%40googlegroups.com.
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/585d7f0a-7e3a-496c-a8b8-1e908cd7c0d1%40googlegroups.com.
Hi Michael!
We just got the same email regarding the mining of cryptocurrency. We are simply just hosting a WordPress site and do not know what to do. It appears Google suspended the project immediately after sending the email. Can you please assist us?
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/d94ea922-4a0a-4bd6-be86-c090be0c5596%40googlegroups.com.
Thanks! We are trying to file the appeal but the link keeps saying "failed to load" please see screenshot attached. Any help?
Thanks,
Raakin
P.s project info attached as well
Hi,I forwarded your email to the right folks but please make sure that you've filed an appeal for fastest turn around.Thanks,On Sat, Nov 11, 2017 at 1:30 AM, Raakin ROll <raa...@gmail.com> wrote:Hi Michael!
We just got the same email regarding the mining of cryptocurrency. We are simply just hosting a WordPress site and do not know what to do. It appears Google suspended the project immediately after sending the email. Can you please assist us?
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
Hi,I forwarded your email to the right folks but please make sure that you've filed an appeal for fastest turn around.Thanks,
On Sat, Nov 11, 2017 at 1:30 AM, Raakin ROll <raa...@gmail.com> wrote:
Hi Michael!
We just got the same email regarding the mining of cryptocurrency. We are simply just hosting a WordPress site and do not know what to do. It appears Google suspended the project immediately after sending the email. Can you please assist us?
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
Hi,I forwarded your email to the right folks but please make sure that you've filed an appeal for fastest turn around.Thanks,
On Sat, Nov 11, 2017 at 1:30 AM, Raakin ROll <raa...@gmail.com> wrote:
Hi Michael!
We just got the same email regarding the mining of cryptocurrency. We are simply just hosting a WordPress site and do not know what to do. It appears Google suspended the project immediately after sending the email. Can you please assist us?
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
Hi,I forwarded your email to the right folks but please make sure that you've filed an appeal for fastest turn around.Thanks,
On Sat, Nov 11, 2017 at 1:30 AM, Raakin ROll <raa...@gmail.com> wrote:
Hi Michael!
We just got the same email regarding the mining of cryptocurrency. We are simply just hosting a WordPress site and do not know what to do. It appears Google suspended the project immediately after sending the email. Can you please assist us?
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/1603e82a-6369-41ca-9643-bcdfcc633390%40googlegroups.com.To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/1603e82a-6369-41ca-9643-bcdfcc633390%40googlegroups.com.
--
© 2018 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-discussion@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to a topic in the Google Groups "gce-discussion" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/gce-discussion/SW6Z0CQ21nk/unsubscribe.
To unsubscribe from this group and all its topics, send an email to gce-discussion+unsubscribe@googlegroups.com.
To post to this group, send email to gce-discussion@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/19e69c97-2f0f-44b1-953e-7b1ad262bb98%40googlegroups.com.
Hello Google Cloud Platform / APIs Developer,
Our systems have flagged your Google Cloud Account for violation of our Terms of Service (ToS) (https://cloud.google.com/terms). Your account could be violating the ToS due to any of the following activities:
Delinquent payments (2.5)
Customer compliance (3.1)
Use the Services for High Risk Activities (3.3.b)
Circumventing quota/free trial restrictions through multiple accounts/projects (3.3.d)
Copyright policy (3.6)
Intellectual property rights (5.1)
Any other activity that could potentially violate ToS (https://cloud.google.com/terms) or Acceptable Use Policy (https://cloud.google.com/terms/aup)
If so, let us know why. Also, include any relevant information that you believe may have resulted in your suspension.
Sincerely,
Google Cloud Platform / API Trust & Safety Team
But I do not see anything I could violate that list provided in your last responce. Please let me know what exactly I violate if this is not mistake from Google's side.
This Sunday my trial resumed but yesterday received email saying "Our systems have flagged your Google Cloud Account for activity associated with increased fraud risk. To help us ensure that this is a legitimate project behavior, please do ONE of the following: Make a payment of $100". Interesting approach for trials ;)
2018-02-09 13:36 GMT+02:00 Amma In UA <ammad...@gmail.com>:
Hi,My GCE trial suspended today without any notice before and without specifying any exact reason, with only option to appeal and allow Google 3 (three) business days to reply. My project 'amma-divina'. I had live public website www.amma.in.ua running in VM on this project to evaluate and consider GCE as hosting provider for this website but now have huge doubt it is good idea since no other hosting/vps/cloud provider allowed itself to completely prevent me even access to my data so instancly without even any notice before. Even when this website was hacked on another hosting provider - website has been just stopped but not preventing from accessing/taking my data from it.I also used appeal mechanism and not looking for support on this forum but just letting know folk here, world and Google, that I am one more unhappy disappointed Google's customer with whom this happened so may be Google would futher leave possibility to access VMs/disks/snapshots in such or similar cases (don't understand why it is difficult to do technically).Best regards,Serhiy
вторник, 30 января 2018 г., 12:56:43 UTC+2 пользователь Paul Nash написал:Hi Min,It's our understanding that you have used the appeal mechanisms provided by the notification - thank you.As a reminder to all, this forum and this thread are not the best way to obtain support, but rather via the appeal mechanism, billing support, or general customer support (as appropriate). While Google employees do monitor this forum, it is not an official channel for suspension issues.We understand that the (rare) situation of an account access problem or suspension can be stressful, and we continue to work hard to make these difficult situations go as smoothly as possible, given the many difficult circumstances involved.Thanks,-Paul NashGroup Product Manager, GCE
--
© 2018 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to a topic in the Google Groups "gce-discussion" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/gce-discussion/SW6Z0CQ21nk/unsubscribe.
To unsubscribe from this group and all its topics, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
Hi,Similar thing happened to me. Did you save the Google key account details in GitHub or anywhere else publically.Yeah that's what I did and miner started multiple GCE machines in multiple regions due to which the project was suspended.Have a check on how you are storing your keys ?Thanks
--
© 2018 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/b0383b7f-4854-404e-b05a-b23218b5926d%40googlegroups.com.
--
Can you send me your project id offline (drop gce-discussion)?Thanks,MikeOn Wed, Oct 18, 2017 at 10:03 AM, Den Ski <denis.s...@gmail.com> wrote:Hi, not sure if it relates to this issue or not but our account was suspended today due to some "abusive practices". When we started investigating on our end, we saw that it specifically pertains to the Google Maps API key that we use, it looks like we found an app that was able to extract our key and generate requests to google under our umbrella, thus potentially flooding them. Now our users don't get any map visibility and its a crucial component of the app (with millions of users). We filled out an appeal, but I'm not too ecstatic about it as it says it will take few business days for someone to even look at it. What does it take to resolve something like this. Are there any account managers that we can get assigned to our apps? Thanks
On Monday, August 21, 2017 at 12:23:28 PM UTC-4, Michael Basilyan wrote:Hi Tappy, Sorry to hear that. We'll investigate. I'm going to contact for your project ID and instance information offline.Thanks,MikeOn Mon, Aug 21, 2017 at 9:09 AM, tappy cash <tappy.cas...@gmail.com> wrote:Hi all,
We faced the same issue few minutes ago, and the VM instance is no more accessible immediately, even we are not able to submit an appeal.
We are running a Tomcat server and a Postregsql instance, we have nothing to do with cryptocurrency and mining.
Any help pleae!
Regards
On Friday, January 6, 2017 at 3:00:14 AM UTC+1, Paul Nash wrote:Hi all, just for the record in this public forum, several Googlers spoke with Guillaume this morning, and we successfully discovered that his VMs had been taken over by a hacker, who then started mining cryptocurrency (as they often will do, it makes them "money" for free). The details of what happened are his private information, so I'll let him choose whether to share more about what occurred.In cases like these, the shutdown is a protective measure. If a VM is exploited, "stealing" usage to mine cryptocurrency is merely the *least* dangerous thing a hacker could do. They could instead steal or destroy your data, install ransomware, or other more malicious activities. We often can't know exactly what's going on because we don't look inside VMs as a rule, so we act fast to prevent the legit customer from losing money or their data, but we understand it's disruptive, and are working on better ways to notify and address the situation if possible.In these cases, we are caught in the middle, and have to balance between disruption of the legitimate customer on the one hand, and allowing their systems to be at risk by not shutting them down on the other (while we wait for a response, for example). It's a tough tradeoff, complicated by the fact that many customers do not respond to our abuse notice mails. We appreciate your continued feedback on how you think this can best be handled.We've been seeing an increasing number of customers whose VMs have been compromised without their knowledge. This seems to be an odd consequence of the strong customer growth and awareness of Google Cloud that we're seeing in the market, but it's unfortunate all the same. It's very important to be sure to follow best security practices in the Cloud, including carefully controlling what software you install and make available via internet-facing IPs, and being sure to keep that software up to date. Hackers are well aware of the IP ranges used by Google, and scan these ranges constantly, looking for people's accounts that can be taken over. This problem is not unique to Google's cloud, however we will continue working on providing more and better detection and prevention tools to help customers as much as we can.I hope this helps explain a little more about what's going on and our approach to protecting customers against these issues.Thanks,-PaulOn Thu, Jan 5, 2017 at 2:27 AM, Guillaume Demonet <demonet....@gmail.com> wrote:I've received the exact same email while working on a school project involving numerous simulations (Monte Carlo methods).This project is due for tomorrow and I don't have any way to access data backups... Is there any way you could send me an image of the VM's drive ?Also, unlike what Paul said, the suspension action was immediate after the email notice. I wish you guys can fix this behavior and hope no one endures the same trouble.Thanks a lot for your help,Guillaume
On Thursday, 1 December 2016 00:44:23 UTC+1, Ed Fleisc wrote:I've received an email from Google saying they were suspending my project due a violation of Terms of Service by mining cryptocurrency. First time I hear about cryptocurrency! Right after that the access to my project was blocked. I has been over 24 hours and we have been desperately trying to contact Google but don't get any replies at all. We sent an Appeal explaining the details of our test project, emails and nothing.
We are doing some testing with IoT devices and we don't have that data backup anywhere else, everyone is freaking out as we need this information for an important upcoming meeting on Monday. We can't even access the snaptshots/images to least try downloading an image of the server.
Can google completely shutdown the access to the account? Wouldn't it make more sense for them to just disable the account to start the servers until the issue is resolved? which clearly is a mistake, unless our server has been hacked.
Is there any other way to contact Google? (that we can actually get a response)... Everyone is blaming me, because Google Cloud was my choice for these tests. I never thought something like this could happen.
Thank you!
Ed
--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/2e0af7e5-1438-4a96-80c7-8db422e68512%40googlegroups.com.
--
Paul R. Nash |
Product Manager, Compute Engine | paul...@google.com | 206-876-1620
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/c594a0f1-8f78-45ad-99d7-50052fbf5483%40googlegroups.com.
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/585d7f0a-7e3a-496c-a8b8-1e908cd7c0d1%40googlegroups.com.
Hi Guillaume,Please send me your project id offline (by dropping the gce-discussion) group and I will forward it to the right folks to get your project reinstated.My sincerest apologies about the situation. We're actively working on improving our detection mechanisms and policies.Mike
On Thu, Jan 5, 2017 at 2:27 AM, Guillaume Demonet <demonet....@gmail.com> wrote:
I've received the exact same email while working on a school project involving numerous simulations (Monte Carlo methods).This project is due for tomorrow and I don't have any way to access data backups... Is there any way you could send me an image of the VM's drive ?Also, unlike what Paul said, the suspension action was immediate after the email notice. I wish you guys can fix this behavior and hope no one endures the same trouble.Thanks a lot for your help,Guillaume
On Thursday, 1 December 2016 00:44:23 UTC+1, Ed Fleisc wrote:I've received an email from Google saying they were suspending my project due a violation of Terms of Service by mining cryptocurrency. First time I hear about cryptocurrency! Right after that the access to my project was blocked. I has been over 24 hours and we have been desperately trying to contact Google but don't get any replies at all. We sent an Appeal explaining the details of our test project, emails and nothing.
We are doing some testing with IoT devices and we don't have that data backup anywhere else, everyone is freaking out as we need this information for an important upcoming meeting on Monday. We can't even access the snaptshots/images to least try downloading an image of the server.
Can google completely shutdown the access to the account? Wouldn't it make more sense for them to just disable the account to start the servers until the issue is resolved? which clearly is a mistake, unless our server has been hacked.
Is there any other way to contact Google? (that we can actually get a response)... Everyone is blaming me, because Google Cloud was my choice for these tests. I never thought something like this could happen.
Thank you!
Ed
--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-dis...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
Can you send me your project id offline (drop gce-discussion)?Thanks,Mike
On Wed, Oct 18, 2017 at 10:03 AM, Den Ski <denis....@gmail.com> wrote:
Hi, not sure if it relates to this issue or not but our account was suspended today due to some "abusive practices". When we started investigating on our end, we saw that it specifically pertains to the Google Maps API key that we use, it looks like we found an app that was able to extract our key and generate requests to google under our umbrella, thus potentially flooding them. Now our users don't get any map visibility and its a crucial component of the app (with millions of users). We filled out an appeal, but I'm not too ecstatic about it as it says it will take few business days for someone to even look at it. What does it take to resolve something like this. Are there any account managers that we can get assigned to our apps? Thanks
On Monday, August 21, 2017 at 12:23:28 PM UTC-4, Michael Basilyan wrote:
Hi Tappy, Sorry to hear that. We'll investigate. I'm going to contact for your project ID and instance information offline.Thanks,Mike
On Mon, Aug 21, 2017 at 9:09 AM, tappy cash <tappy.cas...@gmail.com> wrote:
Hi all,
We faced the same issue few minutes ago, and the VM instance is no more accessible immediately, even we are not able to submit an appeal.
We are running a Tomcat server and a Postregsql instance, we have nothing to do with cryptocurrency and mining.
Any help pleae!
Regards
On Friday, January 6, 2017 at 3:00:14 AM UTC+1, Paul Nash wrote:
Hi all, just for the record in this public forum, several Googlers spoke with Guillaume this morning, and we successfully discovered that his VMs had been taken over by a hacker, who then started mining cryptocurrency (as they often will do, it makes them "money" for free). The details of what happened are his private information, so I'll let him choose whether to share more about what occurred.In cases like these, the shutdown is a protective measure. If a VM is exploited, "stealing" usage to mine cryptocurrency is merely the *least* dangerous thing a hacker could do. They could instead steal or destroy your data, install ransomware, or other more malicious activities. We often can't know exactly what's going on because we don't look inside VMs as a rule, so we act fast to prevent the legit customer from losing money or their data, but we understand it's disruptive, and are working on better ways to notify and address the situation if possible.In these cases, we are caught in the middle, and have to balance between disruption of the legitimate customer on the one hand, and allowing their systems to be at risk by not shutting them down on the other (while we wait for a response, for example). It's a tough tradeoff, complicated by the fact that many customers do not respond to our abuse notice mails. We appreciate your continued feedback on how you think this can best be handled.We've been seeing an increasing number of customers whose VMs have been compromised without their knowledge. This seems to be an odd consequence of the strong customer growth and awareness of Google Cloud that we're seeing in the market, but it's unfortunate all the same. It's very important to be sure to follow best security practices in the Cloud, including carefully controlling what software you install and make available via internet-facing IPs, and being sure to keep that software up to date. Hackers are well aware of the IP ranges used by Google, and scan these ranges constantly, looking for people's accounts that can be taken over. This problem is not unique to Google's cloud, however we will continue working on providing more and better detection and prevention tools to help customers as much as we can.I hope this helps explain a little more about what's going on and our approach to protecting customers against these issues.Thanks,-Paul
On Thu, Jan 5, 2017 at 2:27 AM, Guillaume Demonet <demonet....@gmail.com> wrote:
I've received the exact same email while working on a school project involving numerous simulations (Monte Carlo methods).This project is due for tomorrow and I don't have any way to access data backups... Is there any way you could send me an image of the VM's drive ?Also, unlike what Paul said, the suspension action was immediate after the email notice. I wish you guys can fix this behavior and hope no one endures the same trouble.Thanks a lot for your help,Guillaume
On Thursday, 1 December 2016 00:44:23 UTC+1, Ed Fleisc wrote:I've received an email from Google saying they were suspending my project due a violation of Terms of Service by mining cryptocurrency. First time I hear about cryptocurrency! Right after that the access to my project was blocked. I has been over 24 hours and we have been desperately trying to contact Google but don't get any replies at all. We sent an Appeal explaining the details of our test project, emails and nothing.
We are doing some testing with IoT devices and we don't have that data backup anywhere else, everyone is freaking out as we need this information for an important upcoming meeting on Monday. We can't even access the snaptshots/images to least try downloading an image of the server.
Can google completely shutdown the access to the account? Wouldn't it make more sense for them to just disable the account to start the servers until the issue is resolved? which clearly is a mistake, unless our server has been hacked.
Is there any other way to contact Google? (that we can actually get a response)... Everyone is blaming me, because Google Cloud was my choice for these tests. I never thought something like this could happen.
Thank you!
Ed
--
© 2016 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/2e0af7e5-1438-4a96-80c7-8db422e68512%40googlegroups.com.
--
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-discussio...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/c594a0f1-8f78-45ad-99d7-50052fbf5483%40googlegroups.com.
--
© 2017 Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043
Email preferences: You received this email because you signed up for the Google Compute Engine Discussion Google Group (gce-dis...@googlegroups.com) to participate in discussions with other members of the Google Compute Engine community and the Google Compute Engine Team.
---
You received this message because you are subscribed to the Google Groups "gce-discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to gce-dis...@googlegroups.com.
To post to this group, send email to gce-dis...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/gce-discussion/585d7f0a-7e3a-496c-a8b8-1e908cd7c0d1%40googlegroups.com.