Hello
We are under a DDoS attack on our sites.

We moved to a hosting company (I will not say the name yet) that offered us Premium Proxy Shield protection.

Seems that the protection we payed for a month (+ 10 extra days) worked for abuot 2-3 days.

Also .. some negative effects. Instead of our pages, other page appear first time :

--------------------------
Security Authorization
This is a one-time security verification process. Click Here To Enter.
--------------------------


I want to know if anyone has used Proxy Shield Premium, is this normal ?
The short time effect was that Google indexed the "Security Authorisation" page instead of our normal pages. So .. traffic went down at least 50%

Now, after 2-3 days that the "proxy-shield" has been working, we got a message from the "so called" engeneer in which he said, that if I am not content (with what ??) I could as well go some place else.

I have been paying 1800 usd in servers and protection. I didn't expected to be trated like this.

Anyone can share some experience working with proxy shield ?


Thank you
Costi.

I want to know if anyone has used Proxy Shield Premium, is this normal ?

At a glance it would seem like a good strategy, if that page is displayed only on "suspect" IPs, would save a lot load on your own servers.

But ..

The short time effect was that Google indexed the "Security Authorisation" page instead of our normal pages. So .. traffic went down at least 50%

I don't understand this part. GoogleBOT ips are so known they should've whitelisted them. Seems a ridiculous oversight for such an expensive system.

I don't know them anyway: Good Luck

Yes .. that's what I told to the engeneer that has been working on this. He replyied that he whitelisted the IPs from Google.

But I still get indexed in google with the "Security Authorisation". It is really weird. As far as heard, this protection should be "invisbile" and don't affect the sites in any way.

I beg, if someone from Gigenet reads this forum, I ask him very kindlly to explain a little more in details if possible.


Thank you very much.
Costi.

Unfortunately I can't really comment on Proxy Shield perticularly. However, it sounds to me like you should consider moving. Any company that takes 1.8k from you a month and leaves you in a situation like this is worth avoiding. If a providers setup causes such problems with your website and doesn't even do its job then you are pretty much throwing money away. I would imagine you have some case for a refund even. I don't know your host's ToS of course, but most do say that the provider has broken your agreement if they fail to provide you with what you pay for. If your proxy-shield isn't working then they are not living up to their end of your agreement.

So, reread the ToS and seriously consider moving. You shouldn't get this sort of trouble, especially when you spend that sort of money monthly.

Any company that takes 1.8k from you a month and leaves you in a situation like this

Well, while I agree that there are some gross oversights (google should never be indexing one of their security pages, as nowadays 30 to 90% web traffic of most websites comes from google, so this would be utterly harmful), we should know the whole story.

1800$ could be utterly expensive, or even too little depending how much gbps are involved and how big the ddos is, and the like.

Too little information.

As I am curious about this service i hope that maybe someone from the company explains how it works and addresses costi questions.

Well.. what it is the most annoying is that these guys had the attack on their servers at least 5 days. They recommended to me to upgrade to proxyshield premium. In their page they say that proxy shield premium will protecte me against all types of DDoS (well.. )
So .. each time they say this guy is increasing the attack and I have to order the upgrade (more and more money)
So I am getting the feeling that I might be ripped off, and actually there is no proxy shield beeing installed for me. I mailed Gigenet today, and asked them kindlly to tell me if my server Ip is beeing protected by their proxy shield. I really hope to get an answer from them soon.

What scares me the most is the fact that I am dependend on the information that the hosting company is telling me. So .. if I would belive in the conspiracy teories .. I think it could be easy for a hosting company to ripp you off when they see you are in trouble , and just willing to pay to have your sites working.

Anyway .. I consider now moving to other hosting company this day.

Costi.

You're right that a hosting company could easily rip you off like that. I loathe to think it, but in reality you can't really ever know that they are doing what they are saying.

As for upgrading, don't do it. You'd be better off switching than dumping money on a problem that doesn't seem to be even close to a resolution. Even if you don't switch, it seems like the only end for you will be if the DDoS ends. Like johnny said, depending on the specifics of your situation, you may be underpaying. But that's really just another reason to move. If the company is so cheap that they don't actually provide you the protection you pay for, you may as well dish out a little more for a better host.

Anyway, as you can probably guess my suggestion is to move hosts. So, if you are still a little hesitant, start shopping now and get some prospective hosts lined up. Then, when you hear back from Gigenet make a decision. But I think you need to get started on your contingency plan, even if it is a little late.

What scares me the most is the fact that I am dependend on the information that the hosting company is telling me. So .. if I would belive in the conspiracy teories .. I think it could be easy for a hosting company to ripp you off when they see you are in trouble , and just willing to pay to have your sites working.

Anyway .. I consider now moving to other hosting company this day.

Costi.
I don't believe gigenet would ever do such a thing, and somehow i feel it might have something to do with the tickets you submitted beforehand. Could that be the case"?

p/s WHT is using the same service, would you believe they work with people who even remotely would throw such an attitude?

Costiweb - Please contact me (PM or derek.raines@gigenet.com) with your name, customer ID, and domain. We do not have any protection plans that are $1800/mo. Also, I am not able to find any support tickets that relate to a situation like this.

Well.. it seems I got an reply from Gigenet by e-mail They say they don't route the server Ip into their network.

So it seems that my "hosting" company sold to me the Proxy Shield service and they put some other kind of protection instead of proxy shield.

Then you now know where you should move too :)

DRGIGENET :
This is the e-mail, id , tiket number i got :

[#LMK-116204]: Gigeservers Tech Support Request

Costiweb - I have checked your ticket ID and the IP you provided is not on our network. We are not protecting your website.

Then you now know where you should move too :)

Where ? Be more speciffic.

Costiweb - I have checked your ticket ID and the IP you provided is not on our network. We are not protecting your website.



Then it seems that there is a hosting company that is selling a service in your name and don't deliver it :(((((

That is quite possible. I will research it further. In the meantime I suggest trying to get a refund from the company that you purchased this from.

Yes .. we have asked for a refund.

At least for the Proxy Shield service .. if not for the servers and the time and money we lost due to our sites not working.

I am amazed. I can't belive right now that a company will like it's own customers, just to ripp them off. These guys should be behind bars ! This is actually a scam !

Where ? Be more speciffic.

I think he meant move to be directly hosted by gigenet.

May we know who you're currently with?

http://www.globotech.net/

http://www.globotech.net/
http://www.globotech.net/?page=ddoslitevpremium
http://gigeservers.com/ProxyShield/

look almost the same.

I'd assume Premium is the one that does the page verification(?) for the anti-application attack.

Where ? Be more speciffic.
As others pointed out, to gigenet directly of course, i was a bit amazed to find out that you mentioned gigenet in an earlier post, but didnt buy their services directly. I guess you where under the impression you bought their services.

Somehow .. my problem is that I have many sites ..I can't affort to pay 1.000 / each site protection. I want to pay for one server . .and put there all the site.

After doing more research, Globotech is a customer on our IRC network. They have servers with basic ddos protection (not for websites - for IRC). I believe they have tried to provide protection on that network for your website, and added their own additional "filtering" to try and stop the attacks toward your site (however I have not verified that because the IP you provided is not even on our network). What they sold you is NOT Gigenet's Proxyshield Premium service. We do authorize resellers to use our trademark & marketing materials to resell our Proxyshield Premium service, but in this case it appears that Globotech did not do that.

Again, to clarify, what you purchased from Globotech was not Gigenet's Proxyshield Premium website protection service.

Hello,

This was NOT hosted with gigenet/proxyshield, we tried staminus for protection and staminus claims it was over 1gb/s attack and customer only paid for 750mbits attack. I refunded the customer, again this was not on Proxyshield premium.

<<Signature to be set up in your profile>>

Hello,

This was NOT hosted with gigenet/proxyshield, we tried staminus for protection and staminus claims it was over 1gb/s attack and customer only paid for 750mbits attack. I refunded the customer, again this was not on Proxyshield premium.

Pierre-Luc Quimper
GloboTech Communications

The attack was actually over 3 million packets per second, while GloboTech only purchased 150,000 packets per second of protection from us. We informed GloboTech about the situation. They simply told us that they would rather have their customer leave than deal with the situation.

Unfortunately, we are unable to handle customers of customers or else we would gladly have rectified the situation in a manner acceptable to the end customer. It's a risk you deal with when working with resellers :)

First of all, please keep in mind that we want to keep a good relationship with our customer and provider. In this case, we took with staminus a 750 mbits ddos protection, which work well for a few days. After the attack increase over 1gbit/sec, stamimus offert us a solution that was not in our customer budget(which is normal since the attack was way much bigger). When the customer inform us that he could not afford this, we decide to refund him. Also, staminus kindly offer us a refund. I want to point out that no body is at fault here.

<<Signature to be set up in your profile>>

I should add that Staminus' product does not cause any problems with Googlebots so the suggestion that the OP lost traffic, PR, or whatever is pretty much false.

What I have noticed is that on google, when i search for one of my sites, instead of the title and description of the site , I see this :

Security Authorization (as title / link)
This is a one-time security verification process. Click Here To Enter. (as description of the link)

90% of my visitors are romanian language speakers. I also have scripts that counts the vistors reffered by google. I looked in the logs and the percent of the visitors coming from google is FAR LESS than before. Also, I looked into the site counters (we are using www.statcounter.com) and the number of visitors diminished acordinglly.

Maybe I am wrong.. but there is some logic in what I say.


Best regards,
Costi.

Isn't that suppose to happen when you are not under DDOS anymore, its quite possible that some of your visitors can't reach your site anymore as their IP is now filtered. i.e. because their system was infected with a virus/worm which did cause the DDOS to your server. Or am i missing something here?

Our sites was not inffected by NO virus.
The ddos is caried out from a peer to peer network of DC++ clients.
I don't know much about these types of prottection, but what good is a prottection that kills half of the traffic ? Helps the hacker to achieve his goal faster ? :))

Costi, You can directly try gigenet and get there proxyshield premium. Or try one of the reseller may be....

Costi, You can directly try gigenet and get there proxyshield premium. Or try one of the reseller may be....

So what reseller would you suggest?

maybe you could try prolexic. They are almost as expensive as gigenet (or maybe more i am not sure) but they offer good protection too.