ORACLE CONFIDENTIAL
Oracle has received notice of or detected unusual and potentially harmful activity originating from the indicated resource in your tenancy.
Traffic Details: Excessive or Scripted "Launch Instance" Requests
Under your agreement with Oracle you are responsible for the maintenance and security of this resource. You may wish to have your security team inspect the resource(s) for compromise or misconfiguration, and mitigate the indicated issues.
If the activity continues or Oracle determines that there is a significant threat to the functionality, security, integrity, or availability of our services, your resource(s) may be disabled without further notice.
If you have any questions regarding this notification, please submit a Service Request to Oracle support or contact your Customer Service Manager for assistance.
Please note: When inspecting your resources or creating new resources, consider reviewing and implementing the following security controls:
• Implement appropriate security controls (https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_guide.htm) and review your security list (https://docs.cloud.oracle.com/en-us/iaas/Content/Network/Concepts/securitylists.htm)
• Ensure the OS and all software running on the resource(s) are fully patched, and new patches are applied when available. For oracle products please reference: https://www.oracle.com/security-alerts/
• Change all weak/default credentials and configure with a complex password
• When possible, use key-based authentication and disable password-based authentication
• Disable any unused accounts or services
Cloud Service Agreement:
https://www.oracle.com/corporate/contracts/cloud-services/
Oracle Cloud Infrastructure Security whitepaper:
https://docs.cloud.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/oci-security.pdf
Thank you,
Oracle Trust and Safety
ORACLE CONFIDENTIAL
甲骨文机密
Oracle 已收到通知或检测到源自您租赁中指定资源的异常和潜在有害活动。
流量详情：过多或脚本化的“启动实例”请求
根据您与 Oracle 的协议，您负责此资源的维护和安全。您可能希望让您的安全团队检查资源是否受到损害或配置错误，并缓解指示的问题。
如果活动继续进行，或者 Oracle 确定我们的服务的功能、安全性、完整性或可用性存在重大威胁，您的资源可能会被禁用，恕不另行通知。
如果您对此通知有任何疑问，请向 Oracle 支持部门提交服务请求或联系您的客户服务经理寻求帮助。
请注意：在检查您的资源或创建新资源时，请考虑检查和实施以下安全控制措施：
• 实施适当的安全控制 (https://docs.cloud.oracle.com/en-us/iaas/Content/Security/Concepts/security_guide.htm) 并查看您的安全列表 (https://docs.cloud.oracle。 com/en-us/iaas/Content/Network/Concepts/securitylists.htm)
• 确保操作系统和资源上运行的所有软件都打上了完整的补丁，并在可用时应用新补丁。甲骨文产品请参考：https://www.oracle.com/security-alerts/
• 更改所有弱/默认凭据并使用复杂密码进行配置
• 如果可能，使用基于密钥的身份验证并禁用基于密码的身份验证
• 禁用任何未使用的帐户或服务
云服务协议：
https://www.oracle.com/corporate/contracts/cloud-services/
Oracle 云基础设施安全**：
https://docs.cloud.oracle.com/en-us/iaas/Content/Resources/Assets/whitepapers/oci-security.pdf
谢谢，
Oracle 信任和安全
甲骨文机密
暂时还没封，前两天刷ARM挂脚本挂了两三天 |
楼主
发表于 2021-6-4 09:04:49
发表于 2021-6-4 09:05:48
