I just want everyone to know,,, I host my site with eqservers.com.

They where hacked tonight..so far down time is at 4 hours +. I am so upset it is unbelievable. When there site status was up,, it claimed there was a minor problem with a hacker replacing all the index pages...some minor problem...you go to the site,, black screen and a message ...

PD: lazy sysadmins! Keep up the good work...
..with a broken link for the graphic to a geocity web site. Come on,, there is NO excuse for this...it was a stupid little script that ripped through there redaht box.....

Obviously I will have to switch my site,,, but I RELY on constant uptime,,, just started an advertisement campaign.... Totally ripped.

I'm sorry to hear that.!

When a server is compromised and replaces index.html files, they cant do that with a normal user account and usally the hacker (kidde) has root access to the server (super user). The hacker usally installs some type of backdoor to trick the system admins and hide there processes while on the machine using a hidden ssh backdoor or system demon for a tunnel into the system.

I dont know if this is true, but usally if a kiddie see's admins are catching him he will just remove the whole machine and erase all content usally leaving the hosting company in a deep hole.

As for the downtime maybe there running system recoverys for the data lost (if any). Or there smart and unplug the machine from the internet untill the issues are resolved and completed.

Remember if a hosting sites index.html was changed (altered) there usally going to have some following downtime to resolve issue.

Good Luck finding a new host, I hope you find one that has backup web servers and admins on top of there machines.!


:eek: I went to there web site and it says its for sale! I wonder if thats the altered site or there real one.

Yeah, I saw the same page as Crucual did. I wonder if they are giving up and selling the domain/host or something due to the hacking. OR, if this is just a bluff page.

If thats a legit post, then they prolly give up. I never been hacked before but if I was a small hosting company just breaking even (not saying they are). I would give up! or be frusterated and post something similar.

Sorry folks......
http://www.eqserver.com

Hopefully you won't see the hack page and my site on there host is back up.

Hey guys, that company is fake. That company is also running <<Link removed>> an illegal warez site. The company is ran by a little kid who pays no taxes for it, the company is not registered and the eqserver name came from EverQuest Server because they used to run an illegal everquest emulation off that domain. They changed it to web hosting because they needed a host for gamingtown.net and decided to do it themselves. I would not trust these guys as a host...EVER

Thanks for the heads up, RaineTech.

I feel like an idiot,,,I had these jerks for 6 months now.... everything seemed great..no issues,,tickets replied witin an hour,,with a solution. NO DISASTER RECOVER PLAN AT ALL. It's not so bad about the data,,I am a admin....I have backups...but they are worthless if the server is trashed... Stay away from www.eqserver.com eqserver.com eqserver ((want to make sure they show up in future searches)). I checked them on this site before I went with them,,there was no bad input or any warnings. This is the only warning you need folks.... stay away. By the way on a posative note,,,very special thanks to Crucial , he is helping me get back on track asap..... Take this as a lesson. What a bummer people,,, on a side note....the type of website I have is critical of being up....I just started getting many unique hits,,,,now this.....I have only been live since the 1st of the year ((in developement for 2 months))...the only thing that could have made this worse-----happening to me 6 months later. Beware people,,,beware...

Damm kids.

I think we deserved the benefit of the doubt on this one, please at least email us before you post these untrue statements.

We did underestimate the problem originaly, however we did get everything running. All you had to do was login to FTP and replace the index.html/.php file and your site would be working fine.

We decided instead to format and restore from recent backups since it would be a pain for everyone to have to delete and replace their index files. (the backups were only a few hours old). We have completed this restore hours ago and almost all sites are working properly. Anyone affected by this will be given proper compensation.

The problem was related to an insecure kernal, we have our hired tech working to fix and repair that hole. Only one server was compromised, and only one has/had the security hole.

This still does not explain the illegal warez site of http://www.gamingtown.net that not only do you host, but you own and run it yourself? Sounds like a fly-by-night host and a kid. Any chance you can clear that up?

If your a host you should update the kernel. I am guessing you expected Cpanel to do that for you?

We have a hired tech who is paid to handle such issues, I haven't spoken to him personally since this issue - but we will most likely go somewhere else for our server management.

I haven't been a part of EQServers that long, but according to someone who has - back when we were a reseller used to host with RaineTech and we left due to their service being terrible. I am not sure why he chooses to spread false statements of us, however one of the main reasons we left was that the support was always incredibly rude to us. We do not run that site, a client does and after checking through it we have decided to suspend the account.

Heh, you're not giving all the details buddy. I offered to give you guys free reseller hosting so you guys could get your company rolling(what a nice guy I am eh?). You left me and blocked every form of contact with me and ran your own warez site. It is not owned by a client because the whois info says it all!
Domain name: eqserver.com

Registrant Contact:
eqserver
Kane Hart (domains@eqserver.net)
705-722-4491
Fax:
7 McCutcheon Court
Barrie, Ontario L4N7C6
CA

Now gamingtown.net had the same exact info but then you guys suddenly changed it all to John Doe and N/A. What a great company you guys are running.

Hi, I would just like say eqserver.com great hosting company and they explained to me everything that happened. Was actual exploit or something with cpanel software using a demo account. They said everyone’s home page or index.php was replaced. They formatted server and restored to again it did suck that’s this did happened and this could happened other people also. Now they fixed the exploit and I hope works fine future.. This mater of warez stuff I am against warez my self. But I checked your post when first saw it and signed up see what’s all about they host no files all links with is no illegal and many hosting company’s will accept this. Also when was working it has term service talking about if software company has problems will remove there links from site. And was huge list of stuff and information. I know many hosting companies will accept forums and other use as long not hosting files. You say rainetech you would never do this how you make living? Says yes no to people?

Also I don’t know but not nice put peoples phone numbers on internet U’m not going get into just saying.

Thanks,

Jen

Well first of all that is just Whois information and is publically viewed to begin with...As for the warez site they are posting that they want donations so that they can host the files themselves. But going out and finding them and having home ran ftp servers to host warez is illegal. Now i'd prefer not to get into a big arguement, I just would like to hear an honest answer from EQServers themselves. So far they have not been so honest.

:rolleyes: I repeat "Damm Kids"

Already banned good work admins.

Originally posted by MN-Robert
:rolleyes: I repeat "Damm Kids"

Already banned good work admins.

What happened? Who got banned lol. I wasn't talking about banning I just wanted an honest answer.

EDIT: Oops, now i see, jen2004 or whatever was the same exact person as EQ-Protoge trying to stick up for himself. That is one lame company but I guess i'm done here...Good job mods.

:rolleyes: :rolleyes: :rolleyes:
The problem was related to an insecure kernal, we have our hired tech working to fix and repair that hole. Only one server was compromised, and only one has/had the security hole.

We have a hired tech who is paid to handle such issues, I haven't spoken to him personally since this issue - but we will most likely go somewhere else for our server management.

Don't you mean your resellers tech?!?!

----------------------------------------------------------------------------
I haven't been a part of EQServers that long, but according to someone who has - back when we were a reseller used to host with RaineTech and we left due to their service being terrible. I am not sure why he chooses to spread false statements of us, however one of the main reasons we left was that the support was always incredibly rude to us. We do not run that site, a client does and after checking through it we have decided to suspend the account.

you still a reseller

-----------------------------------

You are still ignoring the warez.
You still apologyzing but with alot of lies
If you are going to be running a business please be honest this is why I am leaving your "company".
Lost full respect and trust.

This is rediculous. Too many hosts are just an excuse for their admins to have warez websites where they can collect on donations! Then they pay for the servers with donations and sell the extra space, then whatever else they have left, they use to host some more warez.

UGGG....how many times is this going to happen? What we need to start doin is a google search with the provivded whois for one domain, then find the other domains they own and that could be a semi-background check.

Like I said becoming a host is a "thing" at the moment. It's so cheap to break into 9 year olds are running hosting companies.

Is /tmp on the server executable? There was a Linux vulnerability recently that would allow you to upload a script to /tmp via a demo account on a server and run it because /tmp allowed execution of files.

EDIT: Ok, so now that I've read a bit further through this, it seems that's what happened and the host has a tech fixing it.

I just wanted to add, since the incident with the hacking, my website has probably been down just as much as it has been up. Then for some reason, as I was in the middle of making some pretty big changes to the site two days ago, they overwrote my entire site from a backup from the 18th. :confused: All the work I had done was gone, but they said they might have it on another backup, but it's been taking a while for them to respond. Not sure if I should wait, or just start on redoing everything again.

I am all done with them. Since the incident they have been up and down at least 4 times for 5 hours +. They are terrible. My only contact I dealt with was Kane Hart . Since the inicitial incident I have heard NOTHING from them. I have sent many,,many emails and trouble tickets. Not to sound blunt,,they suck. I have since switched my host and no longer doing business with them. BEWARE OF EQSERVER . EQSERVER = BAD . I just want to make sure anyone who does the search sees that EQSERVER.COM with the website WWW.EQSERVER.COM knows to stay away. Everytime this has effected my website,,, their website was down as well. I would say it is safe to assume that ALL their hosts accounts where down as well.