Page 2 of 106 FirstFirst 123451252102 ... LastLast
Results 26 to 50 of 2642
  1. #26
    Join Date
    Jun 2005
    Posts
    2,752
    Quote Originally Posted by darkeden View Post
    i couldive sworn that the fsckvps guy said that there hypvervm was updated fully in another thread, which if it was hacked then someones not telling the truth
    It is ocurring at different A2B2's DCs at the same time ...

    I'm sure all Web files were wiped from my VPS because I have http content monitored each 1 minute from 4 NOCs and the Web server started giving 404 error messages for any request yet BIND is running ok (data in memory).
      0 Not allowed!

  2. #27
    This is really bad! I have many of my sites there, hope none of the data is deleted.
    Last edited by Games master; 06-07-2009 at 02:17 PM.
      0 Not allowed!

  3. #28
    Join Date
    Oct 2008
    Posts
    2,253
    Quote Originally Posted by dotHostel View Post
    It is ocurring at different A2B2's DCs at the same time ...

    I'm sure all Web files were wiped from my VPS because I have http content monitored each 1 minute from 4 NOCs and the Web server started giving 404 error messages for any request yet BIND is running ok (data in memory).
    so if they where hacked one of the admins lied about having hypervm up to date? I remember installing eaccelerator and then my apache broke so im not losing much
      0 Not allowed!

  4. #29
    Join Date
    Mar 2006
    Posts
    134
    My vps is still up & everything seems to be normal
      0 Not allowed!

  5. #30
      0 Not allowed!

  6. #31
    Join Date
    Oct 2007
    Location
    United States
    Posts
    1,182
    Our HyperVM infrastructure was hacked about a month ago and files were deleted as well on ALL servers. But LXLabssaid there was nothing wrong with their HyperVM. May have just been coincidence....
      0 Not allowed!

  7. #32
    Join Date
    Oct 2007
    Location
    United States
    Posts
    1,182
    But is fsckvps.com hosted on a VPS? I would think they would have their main website on their own dedicated server to eliminate chances of client data from being compromised. This could be a network issue or billing issue.
      0 Not allowed!

  8. #33
    Join Date
    Mar 2006
    Posts
    134
    Just checked and my vps is still online, everything seems normall.
      0 Not allowed!

  9. #34
    Join Date
    Oct 2008
    Posts
    2,253
    Quote Originally Posted by Speedy059 View Post
    But is fsckvps.com hosted on a VPS? I would think they would have their main website on their own dedicated server to eliminate chances of client data from being compromised. This could be a network issue or billing issue.
    well if a2b2 cheavps and fsckvps is down maybe its a datacenter issue? i mean i know its possible but what are the chances of over 5 thousand vps clients getting hacked at the same time
      0 Not allowed!

  10. #35
    Join Date
    Jan 2005
    Location
    Belgrade
    Posts
    182
    Folks - we are trying to get things under control. At the moment we are reviewing and working on our main server (it is a dedicated box most certainly) directly at DC
      0 Not allowed!

  11. #36
    There is a strong possibility of hack as exploits are documented on internet. i won't post the link though. still here a little scoop



    Timeline :

    05/21/2009 - sent initial email to vendor with a link to a private
    resource for viewing various kloxo
    vulnerability info

    05/23/2009 - received the following: "Thanks for the info. I will
    review this and let you know." (no signature)

    05/30/2009 - sent an email asking if there were any updates

    06/01/2009 - received the following: "Sorry for the delay. I am
    currently looking into this, and will reply in a couple
    of hours time." (no signature)

    06/04/2009 - nothing heard from vendor, and the private resource
    containing the vulnerability info still does not appear to have been accessed

    2 weeks have passed since the initial notification. Vendor appears
    uninterested.
    LxLabs was given advance warning on 21May itself.
      0 Not allowed!

  12. #37
    Join Date
    Jun 2005
    Posts
    2,752
    Quote Originally Posted by atbnet View Post
    I just tried now and I can't even connect to SSH. I tried to use the web login since I use Cpanel DNS only and it keeps saying wrong password which would mean the root password has been changed.
    I don't think the root password has been changed. Probably the password file was deleted.

    Take a look trying to connect via SSH (Tunnelier):

    15:25:36.036 Starting a new SSH2 session.
    15:25:36.036 Connecting to SSH2 server xxx.xxx.xxx:22.
    15:25:36.036 Connected.
    15:25:36.036 Starting first key exchange.
    15:25:36.036 Server version string: SSH-2.0-OpenSSH_4.3p2 Debian-9
    15:25:36.036 Server disconnected without sending a disconnect message.
      0 Not allowed!

  13. #38
    Join Date
    Jun 2005
    Posts
    2,752
    Quote Originally Posted by darkeden View Post
    well if a2b2 cheavps and fsckvps is down maybe its a datacenter issue? i mean i know its possible but what are the chances of over 5 thousand vps clients getting hacked at the same time
    Darkeden, my VPS is RUNNING yet the files were deleted. It is not a server, data center or network issue.
      0 Not allowed!

  14. #39
    Join Date
    Oct 2008
    Posts
    2,253
    Quote Originally Posted by dotHostel View Post
    Darkeden, my VPS is RUNNING yet the files were deleted. It is not a server, data center or network issue.
    some people cannot connect to there servers though. I still have my data but my ping is out of control trying to connect to it
      0 Not allowed!

  15. #40
    Join Date
    Oct 2007
    Location
    United States
    Posts
    1,182
    Did the hackers by chance delete the /boot partitions? And did they attack the HyperVM master server first? (IF this is a hacking issue, if not then nevermind)

    Just curious if this is the same method that was used on us back in May 12th...
      0 Not allowed!

  16. #41
    Join Date
    Jul 2002
    Location
    Manchester, UK
    Posts
    779
    I can confirm on my VPS there is no /bin, /usr or /root directories, and I think a couple of others. Luckily the /home directory is still intact. I was only able to find this out by using TAB to auto-complete on "/".

    I certainly hope my home directory stays intact as I have not got it backed up...
      0 Not allowed!

  17. #42
    Join Date
    Nov 2005
    Posts
    60
    My VAServ VPS is technically up, but SSH is timing out and webmail/http are showing 404 errors. It looks like everything is completely gone.

    Oddly enough the support portal (support.vaserv.com) won't even name resolve. Weird...
      0 Not allowed!

  18. #43
    Join Date
    Oct 2008
    Posts
    2,253
    this is one reason why people need to learn to back up there data lol
      0 Not allowed!

  19. #44
    Join Date
    Jun 2005
    Posts
    2,752
    Quote Originally Posted by darkeden View Post
    this is one reason why people need to learn to back up there data lol
    This is one reason to use dedicated servers.
      0 Not allowed!

  20. #45
    I also have 404 errors on my all site at vaserv.com (a2b2)

    But, I have a daily backup at my other Windows VPS. Great.
      0 Not allowed!

  21. #46
    Join Date
    Oct 2007
    Location
    United States
    Posts
    1,182
    Quote Originally Posted by dotHostel View Post
    This is one reason to use dedicated servers.
    What makes a dedicated server so much more safer than a VPS? If someone gains access to the node, they have access just like they would with any other dedicated server.
      0 Not allowed!

  22. #47
    Join Date
    Mar 2003
    Location
    Chicago
    Posts
    285
    [root@www /root]# cd /
    [root@www /]# echo *
    dev proc sys

    Everything else appears gone. This looks bad:
    http://securityreason.com/wlb_show/WLB-2009060016
      0 Not allowed!

  23. #48
    Hmm I'm a bit surprised they dont have some sort of system / site up in place to notify clients of issues, when something like this happens! As well as how they plan to resolve it etc...
      0 Not allowed!

  24. #49
    Here down.
      0 Not allowed!

  25. #50
    Quote Originally Posted by Vlada View Post
    Folks - we are trying to get things under control. At the moment we are reviewing and working on our main server (it is a dedicated box most certainly) directly at DC
    Is there any update or can you driect us to where there will be, it looks like my VPS has just gone the same way, 404 errors, ssh failing and FTP not accepting passwords.

    Thanks,

    Matt
      0 Not allowed!

Page 2 of 106 FirstFirst 123451252102 ... LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •