Datacentre response to credit card fraud
 

One of my hosts will be down 9 hours because of credit card fraud.

They turned the whole server off at the datacenter and there is now so much red tape to turn it back on

Only some special Policy Enforcement body who work 9 to 5 can authorize it being turned back on so they can then delete the offending account.

This sucks

I sent this to all parties concerned:


I appreciate this is a very serious thing that required immediate and effective action but was there really a need to suspend all accounts on the server? I have my own allocated IP’s. The offending account and/or IP alone could have been suspended. All my sites have now been down for a number of hours.

I can understand pulling the plug on the server as soon as it was reported but I can see this is now just red tape and out of everyone’s hands until Policy Enforcement can authorize it be turned back on. This is not fair on all the other law abiding users of the system. I hope better procedures can be developed for handing this type of situation in the future that to not need to penalize the innocent.

Which host?

Was it on a virtual server & not your fault?

I got sent the entire exchange between my host and the datacenter and they did not get a chance to terminate the offending account. The datacenter just pulled the plug on the entire server. So I do not blame my host who have been requesting it be turned back on so they can disable the offending account.

Yes it is a virtual host. I have one of the reseller accounts but I do not resell my space.

It is 100% NOT related to anything I do. I don’t process credit cards in anyway. Apparently it is actually someone that was trying to present themselves as PayPall and collect credit card information. The FBI have been notified.

I have multiple hosts so not all my sites are down.

That does suck, especially since you had nothing to do with it :(

I assume the virtual server is colocated at another place?

I knwo you said it wasn't you hosts fault, but I'd seriously consider a new host if that ever happened to me.

You'd think the smart thing to do would be to remove that offending person's domain(s) & leave the innocent alone.

This sorta reminds me of GoDaddy & their spam policies - guilty until proven innocent :(

The server is regarded as evidence, in the same way as a crime scene is.

It sucks.... I know. :(

Yep time for a new host;(

DD