Results 26 to 50 of 2642
-
06-07-2009, 02:11 PM #26Web Hosting Master
- Join Date
- Jun 2005
- Posts
- 2,752
It is ocurring at different A2B2's DCs at the same time ...
I'm sure all Web files were wiped from my VPS because I have http content monitored each 1 minute from 4 NOCs and the Web server started giving 404 error messages for any request yet BIND is running ok (data in memory).0
-
06-07-2009, 02:13 PM #27Newbie
- Join Date
- Sep 2008
- Posts
- 10
This is really bad! I have many of my sites there, hope none of the data is deleted.
Last edited by Games master; 06-07-2009 at 02:17 PM.
0
-
06-07-2009, 02:14 PM #28Web Hosting Master
- Join Date
- Oct 2008
- Posts
- 2,253
0
-
06-07-2009, 02:18 PM #29WHT Addict
- Join Date
- Mar 2006
- Posts
- 134
My vps is still up & everything seems to be normal
0
-
06-07-2009, 02:18 PM #30Web Hosting Master
- Join Date
- Mar 2009
- Posts
- 569
More information in this thread:
http://www.webhostingtalk.com/showthread.php?t=8671000
-
06-07-2009, 02:19 PM #31Web Hosting Master
- Join Date
- Oct 2007
- Location
- United States
- Posts
- 1,182
Our HyperVM infrastructure was hacked about a month ago and files were deleted as well on ALL servers. But LXLabssaid there was nothing wrong with their HyperVM. May have just been coincidence....
0
-
06-07-2009, 02:20 PM #32Web Hosting Master
- Join Date
- Oct 2007
- Location
- United States
- Posts
- 1,182
But is fsckvps.com hosted on a VPS? I would think they would have their main website on their own dedicated server to eliminate chances of client data from being compromised. This could be a network issue or billing issue.
0
-
06-07-2009, 02:21 PM #33WHT Addict
- Join Date
- Mar 2006
- Posts
- 134
Just checked and my vps is still online, everything seems normall.
0
-
06-07-2009, 02:22 PM #34Web Hosting Master
- Join Date
- Oct 2008
- Posts
- 2,253
0
-
06-07-2009, 02:27 PM #35Junior Guru
- Join Date
- Jan 2005
- Location
- Belgrade
- Posts
- 182
Folks - we are trying to get things under control. At the moment we are reviewing and working on our main server (it is a dedicated box most certainly) directly at DC
0
-
06-07-2009, 02:27 PM #36Web Hosting Master
- Join Date
- Mar 2009
- Posts
- 569
There is a strong possibility of hack as exploits are documented on internet. i won't post the link though. still here a little scoop
Timeline :
05/21/2009 - sent initial email to vendor with a link to a private
resource for viewing various kloxo
vulnerability info
05/23/2009 - received the following: "Thanks for the info. I will
review this and let you know." (no signature)
05/30/2009 - sent an email asking if there were any updates
06/01/2009 - received the following: "Sorry for the delay. I am
currently looking into this, and will reply in a couple
of hours time." (no signature)
06/04/2009 - nothing heard from vendor, and the private resource
containing the vulnerability info still does not appear to have been accessed
2 weeks have passed since the initial notification. Vendor appears
uninterested.0
-
06-07-2009, 02:28 PM #37Web Hosting Master
- Join Date
- Jun 2005
- Posts
- 2,752
I don't think the root password has been changed. Probably the password file was deleted.
Take a look trying to connect via SSH (Tunnelier):
15:25:36.036 Starting a new SSH2 session.
15:25:36.036 Connecting to SSH2 server xxx.xxx.xxx:22.
15:25:36.036 Connected.
15:25:36.036 Starting first key exchange.
15:25:36.036 Server version string: SSH-2.0-OpenSSH_4.3p2 Debian-9
15:25:36.036 Server disconnected without sending a disconnect message.0
-
06-07-2009, 02:33 PM #38Web Hosting Master
- Join Date
- Jun 2005
- Posts
- 2,752
0
-
06-07-2009, 02:38 PM #39Web Hosting Master
- Join Date
- Oct 2008
- Posts
- 2,253
0
-
06-07-2009, 02:38 PM #40Web Hosting Master
- Join Date
- Oct 2007
- Location
- United States
- Posts
- 1,182
Did the hackers by chance delete the /boot partitions? And did they attack the HyperVM master server first? (IF this is a hacking issue, if not then nevermind)
Just curious if this is the same method that was used on us back in May 12th...0
-
06-07-2009, 02:42 PM #41Web Hosting Master
- Join Date
- Jul 2002
- Location
- Manchester, UK
- Posts
- 779
I can confirm on my VPS there is no /bin, /usr or /root directories, and I think a couple of others. Luckily the /home directory is still intact. I was only able to find this out by using TAB to auto-complete on "/".
I certainly hope my home directory stays intact as I have not got it backed up...0
-
06-07-2009, 02:44 PM #42Junior Guru Wannabe
- Join Date
- Nov 2005
- Posts
- 60
My VAServ VPS is technically up, but SSH is timing out and webmail/http are showing 404 errors. It looks like everything is completely gone.
Oddly enough the support portal (support.vaserv.com) won't even name resolve. Weird...0
-
06-07-2009, 02:45 PM #43Web Hosting Master
- Join Date
- Oct 2008
- Posts
- 2,253
this is one reason why people need to learn to back up there data lol
0
-
06-07-2009, 02:46 PM #44Web Hosting Master
- Join Date
- Jun 2005
- Posts
- 2,752
0
-
06-07-2009, 02:48 PM #45Newbie
- Join Date
- Mar 2009
- Posts
- 23
I also have 404 errors on my all site at vaserv.com (a2b2)
But, I have a daily backup at my other Windows VPS. Great.0
-
06-07-2009, 02:49 PM #46Web Hosting Master
- Join Date
- Oct 2007
- Location
- United States
- Posts
- 1,182
0
-
06-07-2009, 02:49 PM #47Web Hosting Guru
- Join Date
- Mar 2003
- Location
- Chicago
- Posts
- 285
[root@www /root]# cd /
[root@www /]# echo *
dev proc sys
Everything else appears gone. This looks bad:
http://securityreason.com/wlb_show/WLB-20090600160
-
06-07-2009, 02:49 PM #48WHT Addict
- Join Date
- Jan 2004
- Posts
- 114
Hmm I'm a bit surprised they dont have some sort of system / site up in place to notify clients of issues, when something like this happens! As well as how they plan to resolve it etc...
0
-
06-07-2009, 02:50 PM #49Newbie
- Join Date
- Apr 2008
- Posts
- 26
Here down.
0
-
06-07-2009, 02:51 PM #50New Member
- Join Date
- Nov 2003
- Posts
- 0
0