 |
·About·
|
RSS:
 |
mods |
view: topics text |
|
1and1 - open discussion forum. Share information with other users.
If this forum gets busy please nominate it for an upgrade to a fully-fledged forum by contacting the mods listed in the header. | Latest reviews for 1and1: |
|
 | | AVOID 1AND1 THIS COMPANY HAS THE WORST CUSTOMER SERVICE. I CANT STRESS HOW BAD THIS COMPANY IS. JUST YESTERDAY THEY DELETED MY DEDICATED SERVER, YES, THE DELETED MY DEDICATED SERVER AND THEY HAD THE DECENCY TO SAY THAT THEY DONT KNOW WHY IT HAPPENED AND HOW IT HAPPENED AND THAT THEY DONT HAVE A BACKUP.......... | |
| | | 1and1 have no security at all! I had around 10000 entries in my logwatch report this morning showing a brute force break in attempt from a server within 1and1's network.
I sent them an email with the relevant log entries requesting they investigate. I got no response so after several hours I called them. The forst man I spoke to told me the security department was closed and he couldn't help. That's right, 1and1's security department closes for the weekend!
I called again to give them a second chance and the next man I spoke to, Josep, was at least a little bit proactive and asked me for the IP address in question. He looked it up and advised me that they are aware of the activity on that server and that the server, as a result, is scheduled for termination on the 3rd of July. That's a week away! They are aware the server is either compromised or is administered by hackers yet they are doing nothing for a week! Since there is no site hosted on the server and they have already made the decision to terminate it, it seems most likely it is actually administered by hackers.
The most worrying thing is that if these hackers have gone to the expense of renting a dedicated server they are probably monetizing the hacking, possibly though credit card fraud, phishing or some other type of profit making hacking and still 1and1 have chosen to do nothing despite the fact that they are aware.
As a result I have submitted my logs to every major DNS blackhole list in the world. I am also a sync user of DenyHost and have manually updated my deny list to reflect every IP in the hands of 1and1 so come tomorrow morning at least 70,000 servers worldwide should be denying access to every 1and1 IP address.
For server admins this means yet another, huge, safe haven for hackers, for 1and1 customers it means you need some serious backup arrangements, there network security is flawed, if not non-existent. | |
|  | |
| |
|
·
·
Re: 1and1 have no security at all!