domVPS - Budget and high-end virtual servers!

[top sniper]

? they send to me email as they are now on attack -_-"

and they stopped my vps

Someone told me domVPS is closing forever due to attacks.

As per the last email sent out, stating our closure of domVPS,

We are currently in a discussion with another VPS provider about being able to provide a rescue deal migrating customers backups to their systems.

We have backups of all containers from the start of this week, before any issues started happening.

Further details will follow as ideas are discussed.

Kind regards,

domVPS

[Cameron]

Hello,

We are no longer closing domVPS, all orders will be processed as normal!

[top sniper]

Dear Administrators:

One or more ssh (IP port 22) break-in attempts occurred from your

system/network, occurring at the times shown (US Eastern Time), from

the IP address in the "Subject:" line of this message, as indicated in

the log entries below. Please note that the length of the log will

never be more than two minutes, as automated scripts on our security

servers detect such attacks and terminate them within a two-minute

timeframe. Such attacks are often detected and defeated in as few as

one or two attempts.

To be short and specific, the attack originated from the IP address in

this message's subject line and was mounted against one of our

Internet access addresses: 173.54.34.43

Note that these were not port scans - THEY WERE ACTUAL ATTACKS. The

information in the log below should allow you to track down and punish

the offender.

Please deal with this offender, who is unlawfully using your network

for abusive purposes.

If you are operating from a two-letter national domain ("CN", "KR",

"RO", "IN", "RU", etc.) and you need further information, please note

that some such domains are blocked by our anti-spam systems (due to

spam volume originating in those and other countries) and may not

reach me at my address below. In this case, feel free to write me at

"[email protected]".

Many thanks,

Steven Roth

System Administrator

The East End Group, Inc.

[email protected]

=====< Log Entries and "whois" of Offender IP Address Follow >=====

Oct 10 21:25:53 eastend sshd[9151]: Did not receive identification string from

178.238.227.166

Oct 10 21:30:40 eastend sshd[9419]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:40 eastend sshd[9419]: Invalid user root as1qw2AS!QW@ from

178.238.227.166

Oct 10 21:30:40 eastend sshd[9419]: Failed none for invalid user root as1qw2AS!QW@

from 178.238.227.166 port 39834 ssh2

Oct 10 21:30:41 eastend sshd[9420]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:42 eastend sshd[9421]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:42 eastend sshd[9421]: Invalid user from 178.238.227.166

Oct 10 21:30:42 eastend sshd[9421]: Failed none for invalid user from

178.238.227.166 port 40838 ssh2

Oct 10 21:30:42 eastend sshd[9423]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:43 eastend sshd[9424]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:43 eastend sshd[9424]: Invalid user from 178.238.227.166

Oct 10 21:30:43 eastend sshd[9424]: Failed none for invalid user from

178.238.227.166 port 40946 ssh2

Oct 10 21:30:43 eastend sshd[9425]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:44 eastend sshd[9426]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:44 eastend sshd[9426]: Invalid user from 178.238.227.166

Oct 10 21:30:44 eastend sshd[9426]: Failed none for invalid user from

178.238.227.166 port 41056 ssh2

Oct 10 21:30:44 eastend sshd[9427]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:46 eastend sshd[9428]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:46 eastend sshd[9428]: Invalid user from 178.238.227.166

Oct 10 21:30:46 eastend sshd[9428]: pam_unix(sshd:auth): authentication failure;

logname= uid=0 euid=0 tty=ssh ruser= rhost=178.238.227.166

Oct 10 21:30:48 eastend sshd[9428]: Failed password for invalid user from

178.238.227.166 port 41947 ssh2

Oct 10 21:30:48 eastend sshd[9429]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:49 eastend sshd[9430]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:49 eastend sshd[9430]: Invalid user from 178.238.227.166

Oct 10 21:30:49 eastend sshd[9430]: Failed none for invalid user from

178.238.227.166 port 43004 ssh2

Oct 10 21:30:49 eastend sshd[9431]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:50 eastend sshd[9432]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:50 eastend sshd[9432]: Invalid user from 178.238.227.166

Oct 10 21:30:51 eastend sshd[9432]: Failed none for invalid user from

178.238.227.166 port 43128 ssh2

Oct 10 21:30:51 eastend sshd[9433]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:52 eastend sshd[9434]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:52 eastend sshd[9434]: Invalid user from 178.238.227.166

Oct 10 21:30:52 eastend sshd[9434]: Failed none for invalid user from

178.238.227.166 port 43248 ssh2

Oct 10 21:30:52 eastend sshd[9435]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:53 eastend sshd[9436]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:53 eastend sshd[9436]: Invalid user from 178.238.227.166

Oct 10 21:30:53 eastend sshd[9436]: Failed none for invalid user from

178.238.227.166 port 44138 ssh2

Oct 10 21:30:53 eastend sshd[9437]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:54 eastend sshd[9438]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:54 eastend sshd[9438]: Invalid user from 178.238.227.166

Oct 10 21:30:54 eastend sshd[9438]: Failed none for invalid user from

178.238.227.166 port 44243 ssh2

Oct 10 21:30:55 eastend sshd[9439]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:56 eastend sshd[9440]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:56 eastend sshd[9440]: Invalid user from 178.238.227.166

Oct 10 21:30:56 eastend sshd[9440]: Failed none for invalid user from

178.238.227.166 port 44317 ssh2

Oct 10 21:30:56 eastend sshd[9441]: Received disconnect from 178.238.227.166: 11:

Bye Bye

If you have any other queries, don't hesitate to contact us!

Kind regards,

Cameron Banfield

Director of domVPS

[top sniper]

Dear Administrators:

One or more ssh (IP port 22) break-in attempts occurred from your

system/network, occurring at the times shown (US Eastern Time), from

the IP address in the "Subject:" line of this message, as indicated in

the log entries below. Please note that the length of the log will

never be more than two minutes, as automated scripts on our security

servers detect such attacks and terminate them within a two-minute

timeframe. Such attacks are often detected and defeated in as few as

one or two attempts.

To be short and specific, the attack originated from the IP address in

this message's subject line and was mounted against one of our

Internet access addresses: 173.54.34.43

Note that these were not port scans - THEY WERE ACTUAL ATTACKS. The

information in the log below should allow you to track down and punish

the offender.

Please deal with this offender, who is unlawfully using your network

for abusive purposes.

If you are operating from a two-letter national domain ("CN", "KR",

"RO", "IN", "RU", etc.) and you need further information, please note

that some such domains are blocked by our anti-spam systems (due to

spam volume originating in those and other countries) and may not

reach me at my address below. In this case, feel free to write me at

"[email protected]".

Many thanks,

Steven Roth

System Administrator

The East End Group, Inc.

[email protected]

=====< Log Entries and "whois" of Offender IP Address Follow >=====

Oct 10 21:25:53 eastend sshd[9151]: Did not receive identification string from

178.238.227.166

Oct 10 21:30:40 eastend sshd[9419]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:40 eastend sshd[9419]: Invalid user root as1qw2AS!QW@ from

178.238.227.166

Oct 10 21:30:40 eastend sshd[9419]: Failed none for invalid user root as1qw2AS!QW@

from 178.238.227.166 port 39834 ssh2

Oct 10 21:30:41 eastend sshd[9420]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:42 eastend sshd[9421]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:42 eastend sshd[9421]: Invalid user from 178.238.227.166

Oct 10 21:30:42 eastend sshd[9421]: Failed none for invalid user from

178.238.227.166 port 40838 ssh2

Oct 10 21:30:42 eastend sshd[9423]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:43 eastend sshd[9424]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:43 eastend sshd[9424]: Invalid user from 178.238.227.166

Oct 10 21:30:43 eastend sshd[9424]: Failed none for invalid user from

178.238.227.166 port 40946 ssh2

Oct 10 21:30:43 eastend sshd[9425]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:44 eastend sshd[9426]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:44 eastend sshd[9426]: Invalid user from 178.238.227.166

Oct 10 21:30:44 eastend sshd[9426]: Failed none for invalid user from

178.238.227.166 port 41056 ssh2

Oct 10 21:30:44 eastend sshd[9427]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:46 eastend sshd[9428]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:46 eastend sshd[9428]: Invalid user from 178.238.227.166

Oct 10 21:30:46 eastend sshd[9428]: pam_unix(sshd:auth): authentication failure;

logname= uid=0 euid=0 tty=ssh ruser= rhost=178.238.227.166

Oct 10 21:30:48 eastend sshd[9428]: Failed password for invalid user from

178.238.227.166 port 41947 ssh2

Oct 10 21:30:48 eastend sshd[9429]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:49 eastend sshd[9430]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:49 eastend sshd[9430]: Invalid user from 178.238.227.166

Oct 10 21:30:49 eastend sshd[9430]: Failed none for invalid user from

178.238.227.166 port 43004 ssh2

Oct 10 21:30:49 eastend sshd[9431]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:50 eastend sshd[9432]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:50 eastend sshd[9432]: Invalid user from 178.238.227.166

Oct 10 21:30:51 eastend sshd[9432]: Failed none for invalid user from

178.238.227.166 port 43128 ssh2

Oct 10 21:30:51 eastend sshd[9433]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:52 eastend sshd[9434]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:52 eastend sshd[9434]: Invalid user from 178.238.227.166

Oct 10 21:30:52 eastend sshd[9434]: Failed none for invalid user from

178.238.227.166 port 43248 ssh2

Oct 10 21:30:52 eastend sshd[9435]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:53 eastend sshd[9436]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:53 eastend sshd[9436]: Invalid user from 178.238.227.166

Oct 10 21:30:53 eastend sshd[9436]: Failed none for invalid user from

178.238.227.166 port 44138 ssh2

Oct 10 21:30:53 eastend sshd[9437]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:54 eastend sshd[9438]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:54 eastend sshd[9438]: Invalid user from 178.238.227.166

Oct 10 21:30:54 eastend sshd[9438]: Failed none for invalid user from

178.238.227.166 port 44243 ssh2

Oct 10 21:30:55 eastend sshd[9439]: Received disconnect from 178.238.227.166: 11:

Bye Bye

Oct 10 21:30:56 eastend sshd[9440]: reverse mapping checking getaddrinfo for

hosted-by.domvps.com [178.238.227.166] failed - POSSIBLE BREAK-IN ATTEMPT!

Oct 10 21:30:56 eastend sshd[9440]: Invalid user from 178.238.227.166

Oct 10 21:30:56 eastend sshd[9440]: Failed none for invalid user from

178.238.227.166 port 44317 ssh2

Oct 10 21:30:56 eastend sshd[9441]: Received disconnect from 178.238.227.166: 11:

Bye Bye

If you have any other queries, don't hesitate to contact us!

Kind regards,

Cameron Banfield

Director of domVPS

[top sniper]

so my account now is Suspended

* Thread Title of the message is :*** 78.238.227.166: Your IP address being used to attempt ssh break-in to our network ***

and the ip 78.238.227.166 Is French ip and im Bahraini

[Cameron]

so my account now is Suspended

* Thread Title of the message is :*** 78.238.227.166: Your IP address being used to attempt ssh break-in to our network ***

and the ip 78.238.227.166 Is French ip and im Bahraini

Hello,

Sorry for the confusion. The email was about your VPS, however we missed the 1 from the begging of the IP in the subject line. However, this issue has been resolved by support ticket.

[3NAD]

Good luck =/

Edited November 19, 2012 by Guest

[Cameron]

We have recently launched a new node!

Located in Texas, United states, this runs the latest hardware, Intel Xeon E5-2620 @ 2GHz with a massive 32GB of DDR3 RAM. Hardware RAID10 with 4x1TB drives.

Running on a 1Gbit port with IPv6 support coming soon.

Test IP to ping: 192.211.51.130

Just select United States from the Location drop down upon ordering to have your VPS located on this great node!

As usual, any questions? Feel free to ask!

Kind regards,

domVPS

[Cameron]

Hello!

We are currently running two epic offers from our Munich, Germany location.

VPS Features

- Dedicated resources

- Fast and reliable hardware & network

- SolusVM

- Instant setup

- Zero overselling

- rDNS

- TUN/TAP & PPP

512MB Plan - £2.87 ($4.50) - OpenVZ

512MB Dedicated RAM

1GB Burst RAM

1 CPU Core @ 3.20GHz

30GB RAID Disk space

500GB Bandwidth monthly

1 IPv4 Address

IPv6 soon, 10 when available. More on request.

Click here to order this VPS at only $4.50/mo.

1GB Plan - £4.14 ($5.99) - OpenVZ

1GB Dedicated RAM

2GB Burst RAM

2 CPU Cores @ 3.20GHz

60GB RAID Disk space

1TB Bandwidth monthly

1 IPv4 Address

IPv6 soon, 10 when available. More on request.

Click here to order this VPS at only $5.99/mo.

If you have any queries feel free to contact support and a staff member will be happy to assist you!

[Cameron]

http://domvps.com

Just wanted to let you all know of our new OpenVZ series - domVZ!

Order for 6 months or a year? Receive either 10% or 20% off!

Now providing VPS' from as little as £12 a year, here are the plans we have to offer:

domVZ 128 - £12 a year

128MB RAM

256MB Burst RAM

10GB HDD

1CPU core

500GB traffic

1IPv4

10IPv6 (Only at supported locations)

domVZ 256 - £3.20

256MB RAM

512MB Burst RAM

20GB HDD

2CPU core

1TB traffic

1IPv4

20IPv6 (Only at supported locations)

domVZ 512 - £4.80

512MB RAM

1GB Burst RAM

30GB HDD

2CPU core

2TB traffic

1IPv4

30IPv6 (Only at supported locations)

domVZ 1024 - £5.00

1GB RAM

2GB Burst RAM

30GB HDD

3CPU core

3TB traffic

1IPv4

40IPv6 (Only at supported locations)

domVZ 2048 - £10.00

2GB RAM

4GB Burst RAM

50GB HDD

4CPU core

4TB traffic

1IPv4

50IPv6 (Only at supported locations)

We have servers in:

Germany, Frankfurt and Munich

the Netherlands, Amsterdam and Capelle aan den IJssel

United States, Seattle

United Kingdom, Gosport

For further information, please see our website!

http://domvps.com

[Dany Alex]

VPS's have protection system?