IwhiC.Com experienced down tome today@ approx time of 1:20 in the after noon our server was taken off line for a ABUSE COMPLAINT. Mr basscleff is the reason for server2.iwhic.info BEING taken off line and PISSING SO MANY account holders off. His ABUSE from his 36 accounts lead to a server wide investigation! Posted below are the facts the facts only and IwhiC.Com had to follow the Terms and Service set forth by Caro.Net. Mr basscleff ACCOUNTS are suspended pending TERMINATION from our network. Your action as you say are our fault are actually yours and you need to tell every one the truth,,, Better yet DON'T PROVIDE this user Hosting on any server on this forum. He not only hurt me as a person but Hundreds more as they watched a server not found for 4 hours while this event took place. MR basscleff Your accounts are blocked and banned and will never be set up on another one our servers and I pray NO ONE other host on this forum or any other. Good bye, good luck no refund, as you owe all the fellow hoster's here at DP there lost time and wages for your discriminating and unlawfully acts. That caused every one down time today! Stated above is written by the owner of IwhiC.Com Stated below is the ABUSE! Dear Sirs: At Carohosting RSA , an anti-fraud and security company, is under contract to assist HBOS plc and its related companies including Halifax plc and The Governor and Company of the Bank of Scotland, together referred to below as "HBOS", in preventing or terminating online activity that targets HBOS’s customers as potential fraud victims. HBOS comprises a number of major financial institutions and in total has over 22 million customers. RSA has been made aware that you appear to be providing Internet Services to a fraudulent website, which is part of a “phishing scamâ€*. This activity violates HBOS’s copyright, trade mark and other intellectual property rights and may violate the criminal laws of the United Kingdom, United States or other nations. E-mail messages have been broadly distributed to individuals by a person or entity pretending to be HBOS. These e-mails use one of the HBOS names or identities listed below: Halifax and Bank of Scotland (including trade marks) without authorisation. The e-mails request recipients to verify and submit sensitive details related to their HBOS accounts. Within the fraudulent e-mail message, there is a link that leads the recipients to a fraudulent website displaying HBOS’s copyrighted materials and trade marks. The fraudulent website is located at the following URL address (MR basscleff PERSONAL SITE) http://www.psprepair.net/halifax/index.php ) to which you provide services and which is under your control. The fraudulent website not only represents a misuse of HBOS’s intellectual property; its purpose is to improperly obtain personal information of HBOS's customers in order to fraudulently access their bank accounts. The owners of those websites typically perpetrate identity-theft related activities, such as using customer’s credit cards or bank accounts without authorization. In addition, since the vast majority of all of the e-mails are not being sent to actual HBOS customers, the actions may serve to damage the reputation and image of HBOS. Please take all necessary steps to immediately shut down the fraudulent website, terminate its availability to the Internet and discontinue the transmission of any e-mails associated with this website. We understand that you may not be aware of this improper use of your services and we appreciate your cooperation. We specifically would ask that you also take the following actions: Please provide us with a tar/zip file of the source code for this site, so that we may analyze it to help prevent further attacks. If any customer data has been captured that is stored on your systems or equipment, please send us that data so that the customers to whom that data relates can be notified and take steps to protect their credit. Please provide a copy of any records you maintain that indicate the name, contact information, method of payment or similar information that may be useful in helping learn about the identity and location of the customer for whom the website has been operated. Thank you for your cooperation to prevent and terminate this fraudulent activity. Sincerely, RSA Anti Fraud Command Center Tel: +44(0)800-032-7751 (UK) Tel: +1-866-408-7525 (US) Fax: +972-9-9566658 (EU) Fax: +1-212-208-4644 (US) E-mail: http://www.rsa.com For more information about RSA's AFCC http://www.rsa.com/node.aspx?id=3348 lifax plc Legal Services me: Scott Greenwood dress: 6th Floor Collinsons, Trinity Road, Halifax, West Yorkshire, England, HX1 2RG l: 00 44 1422 333472 x 00 44 1422 333453 mail: *â€Phishing" is an e-mail scam that attempts to trick consumers into revealing personal information, such as their credit or debit account numbers, checking account information, Social Security Numbers, or banking account passwords, through an imposter’s Web site or in a reply email. 37
Getting a dedicated IP will not guarantee you uptime! No matter how many IPs you have then it will still go down if the server goes down
Yeah. So I don't want a dedicated IP then... I don't understand your concept of the dedicated IP Jason.
Sorry the server was not hacked.. nice try though.. I can not return anything to you until the investigation is over with. That is why the accounts have not been fully terminated yet as they may need more information for the investigation.. This is not the first offense of sending spam from your accounts and you know this.. Once the investigation is over the accounts will be terminated. Do you think that I made this letter up.. I don't think so.. You would still have your accounts if I never got this email.. In our terms of service we have a no tolerance for spam. Any account found sending spam will be suspended/terminated with out notice. Any account found sending these phishing emails will be investigated and then terminated..and we will cooperate with all parties involved, including the law enforcements.
Kber---your issue as been fixed and I have sent you a pm with details.. if you ever need to submit a support ticket and you cna not log in for some reason , you can email and that will create you a ticket instantly. Thank you
I've just visited my site and I'm getting the suspended page. What have I done wrong??? Edit: This is their answer: Hi, your sites have been using alot of cpu and memory usage.. we have been monitering this for a few days and it has not gotten any better. Here is one set of stats so that you can see. Whitout a warning or something. They just take my hosting offline. Probably it's because of my proxies. But that's their problem that they allow proxies. I've said that I'll set the maximum file size to 0,5mb on my proxies.
You could not even wait 2 minutes for me to reply to your support ticket.. Here is why your account is suspended.. nothing to do with this thread. Hi, your sites have been using a lot of cpu and memory usage.. we have been monitoring this for a few days and it has not gotten any better. Here is one set of stats so that you can see. freecove freecovert.info 27.61 16.51 10.0 Top Process %CPU 23.8 httpd [unseen4you.freecovert.info] [/index.php?qaHR0cDovL3d3dy5oaWRlZmdhbHMuY29tL3NvbG9naXJscy] Top Process %CPU 85.3 httpd [unseen4you.freecovert.info] [/index.php?qaHR0cDovL2ZwZnJlZWdhbHMuY29tL21vdmllcy92Zi9vbm] Top Process %CPU 13.2 httpd [unknown4u.freecovert.info] [/index.php?qaHR0cDovL2kyNi50aW55cGljLmNvbS8yNWFt
All the more reason that Proxies should be on Dedicated Servers, not in a shared hosting environment.. I think even the proxy owners realize this.. Also, most providers, if you look at their TOS closely enough... have safe guards like this which allow us, (without warning) to suspend sites that cause issues for other customers.. Welcome to the world of shared hosting... This might be the first clue that you need a dedicated solution..
He's even not giving a warning. I could remove my proxies to an other host or I could change the maximum file size. This will decrease the CPU usage a lot. But he's not giving his customers a chance. I have a lot of other websites on that account. It's a master reseller dude. I can't control the usage of my cliets. It's my account, but does it matter? Edit: Ok he has unsuspended my account. I'm going to move my proxies to an other host.
I guess what I am saying is read the TOS. Many web hosts specifically state that they can suspend a site WITHOUT warning. Again, it protect both the host and the client. We had a dedicated server customer a while back that had to be suspended due to some strange behavior. Turns out he was hacked. Our quick action and suspension insured 1) that our network and customers were protected and 2) that his server was easily recoverable and restored in a short period of time. My suggestion? Read the TOS. You have to realize that running Proxy sites is going to get you in trouble in a shared environment.
Sorry for the topic bump, but I have to say this! I've received this in my PM: I have NEVER sent any mail so this is just a lie. I've asked them to show me proof that it's one of my sites, but they are not answering. They just don't want to do business with me anymore because I have complaint about the dedicated IP. This is really noob. STAY AWAY FROM IWHIC!
I got those phishing notices and phone calls all the time with my perosnal server its because: 1. server wide: php and softwares are not up to date 2. client side script uploaded is vulnerable for injection. Also you/owner with telnet or ssh access can trail or track where the message is sent and by which ip. Block that ip and all done.
This has nothing to do with a Dedicated IP address! We told you why! And we have answered you! Check YOUR MAIL... there is nothing I can do if your site is busted as it was and I had to take it down. We have removed the files and sent them to the company that brought this action, They request these files to better research the cause of these phishing scam sites. This forum is not a support for IwhiC and will not be used as one ,, You can email us at 4 different email address and or open a support ticket.. I do not hang on here on a hourly basis and some times I dont come here for days! You want support from us in issues about your account. Then use one of the options stated. And it is pretty childish that people coming running to this forum over something that twisted there panties.. This matter has been dealt with and if it has not OPEN a support ticket. Oh and yes he was running proxies.. So Im assuming one of them was out dated and got to as a way for this to happen. Jason
I don't have a mail. And yes, I WAS running proxies, but I wasn't allowed to host it anymore because there servers are crap. They have suspended my accounts when my proxies were already moved. I'm posting this because PEOPLE HAS TO STAY AWAY FROM IWHIC!
Why stay away from iWhic? IwhiC are great, their servers are not crap, have you cared to even look at the server information in WHM? there's 8 cores, I run multiple proxies with them, they will only suspend you if you truly are running the server load up. & I have never had this problem. You have to realise that if you run the server load up, you are slowing the experience for everyone else on the server, do you just expect IwhiC to just leave your site? Slowing the server? Just my 2 cents.
So ok, they had a couple downtimes? But it was heavily hardware related therefore it was not IwhiC's fault. They have put in place measures to stop such a thing happening again. No host is perfect.