hosted by liquidweb


Go Back   Web Hosting Talk : Web Hosting Main Forums : VPS Hosting : How my domain was screwed by Jaguar PC
Closed Thread

Forum Jump

How my domain was screwed by Jaguar PC

Closed Thread Post New Thread In VPS Hosting Subscription
 
Send news tip View All Posts Thread Tools Search this Thread Display Modes
  #1  
Old 10-18-2011, 03:44 PM
Acapuclo Kevin Acapuclo Kevin is offline
Junior Guru Wannabe
 
Join Date: Sep 2011
Posts: 41
*

How my domain was screwed by Jaguar PC


I recently purchased Managed VPS hosting from Jaguar PC (Landis Holdings Inc) http://jaguarpc.com

I realized that my reverse DNS for the IP addresses they gave me was resolving to another domain name. I asked them to fix the addresses pointing to my site. They did not.

I asked them again - the level 1 tech made it sound like it was my mistake. It was not.

4 Domain names were pointing at my address and when I tried contacting the owners - they would not respond. But actually contacting them was not my responsibility - it was the responsibility of Jaguar PC - they gave me a dirty ip address.

So yesterday I checked Google and now all of my site content is indexed for one of the 4 domains that was parked on my IP address.

After threatening planetdomain.com with redirects to gay.com I got some quick responses. When first they denied ownership - they came to their senses.

This stuff really messes up your site rank and I have no idea if I will ever get back the Google Site Link indexing that I have had for several months. Google does not create the new style of site links for every site (like starbucks has)the categorical links under the site name.

All of my links point to some asinine domain that does not even have a website.

On another note:

Even though this has happened their Tier 3 support has been superb. The Tier 1 support is useless, I don't want them on my site or in the server.

Don't make the same mistake I made and just assume that everyone knows what they are doing. Don't trust your assigned IP address until you find out who else is pointing at you or your Google site links will be hijacked by some jerk in Australia.

I am highly disappointed and so angry that I can not put it in words.



Sponsored Links
  #2  
Old 10-18-2011, 03:53 PM
Zachary McClung Zachary McClung is offline
Web Hosting Master
 
Join Date: Feb 2005
Location: Kalamazoo, MI
Posts: 1,117
Quote:
Originally Posted by Acapuclo Kevin View Post
I recently purchased Managed VPS hosting from Jaguar PC (Landis Holdings Inc) http://jaguarpc.com

I realized that my reverse DNS for the IP addresses they gave me was resolving to another domain name. I asked them to fix the addresses pointing to my site. They did not.

I asked them again - the level 1 tech made it sound like it was my mistake. It was not.

4 Domain names were pointing at my address and when I tried contacting the owners - they would not respond. But actually contacting them was not my responsibility - it was the responsibility of Jaguar PC - they gave me a dirty ip address.

So yesterday I checked Google and now all of my site content is indexed for one of the 4 domains that was parked on my IP address.

After threatening planetdomain.com with redirects to gay.com I got some quick responses. When first they denied ownership - they came to their senses.

This stuff really messes up your site rank and I have no idea if I will ever get back the Google Site Link indexing that I have had for several months. Google does not create the new style of site links for every site (like starbucks has)the categorical links under the site name.

All of my links point to some asinine domain that does not even have a website.

On another note:

Even though this has happened their Tier 3 support has been superb. The Tier 1 support is useless, I don't want them on my site or in the server.

Don't make the same mistake I made and just assume that everyone knows what they are doing. Don't trust your assigned IP address until you find out who else is pointing at you or your Google site links will be hijacked by some jerk in Australia.

I am highly disappointed and so angry that I can not put it in words.
Hello Kevin,

Would you please PM or e-mail me a ticket #. I would love to look into this issue for you.

__________________
Zachary McClung, Chief Customer Officer - Need a Quote? Contact Me Today! E: zach(@)jaguarpc(.)com
JaguarPC.com - Managed Hybrid Servers | Managed VPS Hosting | Idera R1Soft Backup | Dedicated Servers
Get Social: Twitter @zacharymcclung

  #3  
Old 10-18-2011, 03:58 PM
Hsunami Hsunami is offline
Web Hosting Master
 
Join Date: Jan 2010
Location: NJ
Posts: 1,768
How your IPs were used previously or what your rDNS is set to, doesn't describe what you're experiencing. Yes, it's important to know how your IPs were used previously, such as spamming which leads to the IPs being blacklisted. But what you're describing sounds like your system was compromised or seriously set up incorrectly. I can point domains to IPs all day long. It doesn't mean a site hosted on the server will magically resolve, as in your case where the domain resolved to your website content and was picked up by Google.


Last edited by Hsunami; 10-18-2011 at 04:03 PM. Reason: grammar
Sponsored Links
  #4  
Old 10-18-2011, 04:09 PM
Acapuclo Kevin Acapuclo Kevin is offline
Junior Guru Wannabe
 
Join Date: Sep 2011
Posts: 41
Quote:
Originally Posted by WickedFactor View Post
How your IPs were used previously or what your rDNS is set to, doesn't describe what your experiencing. Yes, it's important to know how your IPs were used previously, such as spamming which leads to the IPs being blacklisted. But what you're describing sounds like your system was compromised or seriously set up incorrectly. I can point domains to IPs all day long. It doesn't mean a site hosted on the server will magically resolve, as in your case where the domain resolved to your website content and was picked up by Google.
My site was a wicked disaster to setup on this server. I have log files that go back to January of last year. I have found log files that were 250 MB in size sucking up Hard Drive space and hundreds of truncated backup files that had nothing to do with my usage. I wasn't even setup until a month ago. I had more than 200,000 Inodes being sucked up before I ever put a file on the server.

I asked that the container be wiped clean and the tech acted like he was doing me a huge favor and said, I won't charge you $15 this time. He did absolutely nothing. I had all of the same files in the container.

I am not technically inept - New to VPS yes. An idiot - no. Managed VPS is not supposed to be a month long nightmare.

I am very unhappy - BUT some of the Tier 3 support people are really amazing, helpful and polite beyond words.. There is one in particular that I like a lot - his name is Anook. He should get a medal of valor.

  #5  
Old 10-18-2011, 04:36 PM
portalgod portalgod is offline
Web Hosting Evangelist
 
Join Date: Dec 2007
Posts: 471
AFAIK, rDNS can only resolve an IP to a single domain.

  #6  
Old 10-18-2011, 04:39 PM
kpmedia kpmedia is online now
Web Host Reviewer
 
Join Date: Feb 2006
Location: Kepler 62F
Posts: 11,961
Quote:
Originally Posted by Acapuclo Kevin View Post
I have log files that go back to January of last year. I have found log files that were 250 MB in size sucking up Hard Drive space and hundreds of truncated backup files.
These build up over time, and do not come well-setup by default.
One of the first things I do on a new server is tweak all the log file settings.

###

Quote:
doesn't describe what you're experiencing. Yes, it's important to know how your IPs were used previously, such as spamming which leads to the IPs being blacklisted. But what you're describing sounds like your system was compromised
Yeah, I agree. These proposed problem doesn't match the observed outcome.

###

JaguarPC is a Virtuozzo host and SolusVM host, and they create new VPS from preset images. If the problem was in the image, a LOT more customers would have these issues. It sounds like your specific VPS was compromised.

I hate to shift blame, but did you ever secure the VPS?
Or request that JaguarPC secure it?
Or hire a skilled outside admin to secure it?

###

Quote:
Originally Posted by portalgod View Post
AFAIK, rDNS can only resolve an IP to a single domain.
Nope. I have an rDNS IP resolving to four domains.
And it was by accident, not on purpose. (Need to fix it, when I get some time. Oops.)

###

__________________
|| Need a good host?
|| See my Suggested Hosts List || New Editorial: HostGator Alternatives & Who is EIG?
||


Last edited by kpmedia; 10-18-2011 at 04:45 PM.
  #7  
Old 10-18-2011, 04:42 PM
kpmedia kpmedia is online now
Web Host Reviewer
 
Join Date: Feb 2006
Location: Kepler 62F
Posts: 11,961
Dupe post removed.

  #8  
Old 10-18-2011, 04:45 PM
Acapuclo Kevin Acapuclo Kevin is offline
Junior Guru Wannabe
 
Join Date: Sep 2011
Posts: 41
Quote:
Originally Posted by portalgod View Post
AFAIK, rDNS can only resolve an IP to a single domain.
I asked JAG to fix this issue two weeks ago.. Managed VPS means - I am not the one that should be the expert. I reported that I was getting Root messages of people trying to login to SSH from Taiwan, Russia, China and other places.

I reported that several domains were pointed at my IP addresses.
I reported the very large, very old log files on the server.

I have had issues with the MySql server, FTP server, server file permissions and just about every process that should not be an issue.

This is stuff that is supposed to be taken care of before they dump you in some hacked container.

I am getting angrier by the minute.

  #9  
Old 10-18-2011, 04:48 PM
kpmedia kpmedia is online now
Web Host Reviewer
 
Join Date: Feb 2006
Location: Kepler 62F
Posts: 11,961
Quote:
Originally Posted by Acapuclo Kevin View Post
I reported that I was getting Root messages of people trying to login to SSH from Taiwan, Russia, China and other places.
This is just standard attacks, unrelated to anything else described so far. You need to manage the firewalls in WHM. Or hire an admin to proactively managed this for you.

Quote:
This is stuff that is supposed to be taken care of before they dump you in some hacked container.
Again, given how JaguarPC is an image-based VPS host -- as is everybody else these days -- such a hack would be widespread. We've not seen that so far.

Are you on Virtuozzo or SolusVM?

__________________
|| Need a good host?
|| See my Suggested Hosts List || New Editorial: HostGator Alternatives & Who is EIG?
||

  #10  
Old 10-18-2011, 04:52 PM
Acapuclo Kevin Acapuclo Kevin is offline
Junior Guru Wannabe
 
Join Date: Sep 2011
Posts: 41
Quote:
Originally Posted by kpmedia View Post
These build up over time, and do not come well-setup by default.
One of the first things I do on a new server is tweak all the log file settings.

###


Yeah, I agree. These proposed problem doesn't match the observed outcome.

###

JaguarPC is a Virtuozzo host and SolusVM host, and they create new VPS from preset images. If the problem was in the image, a LOT more customers would have these issues. It sounds like your specific VPS was compromised.

I hate to shift blame, but did you ever secure the VPS?
Or request that JaguarPC secure it?
Or hire a skilled outside admin to secure it?

###


Nope. I have an rDNS IP resolving to four domains.
And it was by accident, not on purpose. (Need to fix it, when I get some time. Oops.)

###
30 support tickets later - Yes - I have asked that they have a Tier 3 tech secure and go through the server - That is what managed is. They manage it - that includes security.

I have not changed ANYTHING - I have continuously asked for their assistance for server side issues.

Thy have been fixing stuff that was broken when I got it -

  #11  
Old 10-18-2011, 04:59 PM
Acapuclo Kevin Acapuclo Kevin is offline
Junior Guru Wannabe
 
Join Date: Sep 2011
Posts: 41
Quote:
Originally Posted by kpmedia View Post
This is just standard attacks, unrelated to anything else described so far. You need to manage the firewalls in WHM. Or hire an admin to proactively managed this for you.


Again, given how JaguarPC is an image-based VPS host -- as is everybody else these days -- such a hack would be widespread. We've not seen that so far.

Are you on Virtuozzo or SolusVM?
Virtuozzo

OR - it has become normal to just keep fixing the broken stuff. A lot of people are just like me - they ASSUME - that they are in good hands.

I had serious doubts about the image from the beginning when I started locating all of the huge log files and truncated files, and the fact that PLESK and Cpanel were setup simultaneously on the server. They said that is not possible - you do not have a Plesk license they said - BUT IT WAS.

The fact that they were saying server files had wrong permissions and it was impossible to setup even basic services had me concerned from the beginning.

And dumping images created from previously used containers and replicating them is absolutely no way to manage VPS servers. The fact that you would even suggest that is a normal practice gives me an upset stomach.

Initially Cpanel support told me they would not support the server and that the machine needed to be erased and freshly installed because Plesk was installed.


Last edited by Acapuclo Kevin; 10-18-2011 at 05:10 PM.
  #12  
Old 10-18-2011, 05:07 PM
IonVM IonVM is offline
Disabled
 
Join Date: Apr 2011
Location: Los Angeles, CA
Posts: 37
Maybe I just don't fully get the ip part of this but there is nothing we can do about outside sites redirecting or using your content. And with a vps the ips you get are just yours, its not possible for others to use them.

If this is saying your vps was just hacked and you need it reset or assistance from us to help clear it thats where L3 can help, L1 wouldnt be loggin in to servers and trying to fix exploits.

If you were delivered a vps that was unusable from the start that would be a serious concern. Was this linux or windows? A plesk image would not and could not show up in a linux system from our templates, we dont offer it. A cpanel one could not show up in a windows system, again its not supported and we dont offer it. Very curious to see just what is going on with this on, it just sounds bizarre.

  #13  
Old 10-18-2011, 05:07 PM
Hsunami Hsunami is offline
Web Hosting Master
 
Join Date: Jan 2010
Location: NJ
Posts: 1,768
Wait, so your VPS was delivered to you with cPanel and Plesk installed at the same time? Something is definitely not right here. In any case, have you let the JaguarPC representative know your ticket number(s) so they can look into your issue?

  #14  
Old 10-18-2011, 05:14 PM
masood masood is offline
Junior Guru Wannabe
 
Join Date: Jan 2007
Posts: 38
Quote:
Originally Posted by Acapuclo Kevin View Post
I asked JAG to fix this issue two weeks ago.. Managed VPS means - I am not the one that should be the expert. I reported that I was getting Root messages of people trying to login to SSH from Taiwan, Russia, China and other places.

I reported that several domains were pointed at my IP addresses.
I reported the very large, very old log files on the server.

I have had issues with the MySql server, FTP server, server file permissions and just about every process that should not be an issue.

This is stuff that is supposed to be taken care of before they dump you in some hacked container.

I am getting angrier by the minute.
When you reported these issues were they taken care of or are they still pending? Did you find out what caused those issues in the first place?

__________________
Managed solutions provider since 1998 - Serving Dallas, Atlanta, LA, and United Kingdom (UK)
JaguarPC.com - Managed Hybrid Servers | Managed VPS Hosting | Dedicated Servers
Resellerzoom.com - Reseller specialist | Cpanel Reseller hosting | Failover cPanel Hosting


  #15  
Old 10-18-2011, 05:23 PM
Acapuclo Kevin Acapuclo Kevin is offline
Junior Guru Wannabe
 
Join Date: Sep 2011
Posts: 41
Quote:
Originally Posted by WickedFactor View Post
Wait, so your VPS was delivered to you with cPanel and Plesk installed at the same time? Something is definitely not right here. In any case, have you let the JaguarPC representative know your ticket number(s) so they can look into your issue?
Yes. They know all of this from the beginning. I even gave them the Email from Cpanel support saying they would not support the server because Plesk was installed simultaneously with Cpanel.

The IP Addresses were not mine. They resolved to Donortec.org in Australia. Infosearchweb.com, sacommunity.info, sacommunity.gov.au, matchit.org,matchit.org.au and my Google weblinks all have infosearchweb.com addresses now.

AND - they all tracked back to Planet Domain. And the gimpy little squat Australian sent me an Email saying - we were Jaguar PC clients with your IP addresses - Oops.

The more I think about this the more pissed off I get.


Last edited by Acapuclo Kevin; 10-18-2011 at 05:26 PM.
Closed Thread

Similar Threads
Thread Thread Starter Forum Replies Last Post
ukhosts - screwed up my domain matt2kjones Domain Names 7 05-12-2004 02:27 AM
Im screwed....Got screwed by a good hosting company to... Z400Central Web Hosting 79 10-19-2003 10:10 AM
Jaguar's Domain Service BloodThirsty Domain Names 2 02-17-2002 03:01 AM

Related posts from TheWhir.com
Title Type Date Posted
UK Police Continue Crackdown on Pirated Content with Torrentz.eu Domain Name Suspension Web Hosting News 2014-05-26 12:30:38
Web Hosting Sales and Promos Roundup - February 7, 2014 Web Hosting News 2014-05-23 15:42:29
Nigeria Internet Registration Association Offers Free ccTLDs to Encourage .ng Domain Adoption Web Hosting News 2014-01-02 14:46:24
Office 365 Integrates GoDaddy Domain Name Registration Web Hosting News 2013-10-09 13:18:05
123-reg Launches Domain Reselling Service on Global Domain Marketplace Web Hosting News 2013-06-19 14:48:10


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes
Postbit Selector

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Forum Jump
Login:
Log in with your username and password
Username:
Password:



Forgot Password?
Advertisement:
Web Hosting News:



 

X

Welcome to WebHostingTalk.com

Create your username to jump into the discussion!

WebHostingTalk.com is the largest, most influentual web hosting community on the Internet. Join us by filling in the form below.


(4 digit year)

Already a member?