Web15 frequent problems

Discussion in 'H-Sphere Reseller Hosting' started by bro, Apr 9, 2013.

  1. Stephen

    Stephen US Operations Staff Member

    If you feel you need to remove it, do so, but no the attacks are actually renewing a bit in the last days. Been seeing them hitting windows servers very aggressively now as well with a few others apps targeted as well
  2. cdog

    cdog Perch

    We need to get support to remove the fix, correct? I'm happy to leave things as they are for a little while and fortunately we don't have any customers running wp on windows servers. I did see something about returning 444 error that seemed reasonable effective and confused the bots back on the wht forum
  3. tanmaya

    tanmaya APAC Operations Staff Member

    Yes, or you can do on your own.
  4. Stephen

    Stephen US Operations Staff Member

    the returning non 404 was a more specific issue to nginx which had issues with the 404 handling, we were not returning 404 errors with the block in place, but 403.
  5. 2366

    2366 Guppy

    Web15 appears to still have some problems, despite the announcement earlier today. I'm currently getting a 502 error.
  6. abhishek

    abhishek Administrator Staff Member

    It has already been taken care instantly.
  7. 2366

    2366 Guppy

    Well, ever since the trouble from this afternoon, I have been unable to connect to the website from any AT&T connection. I have tried AT&T mobile, AT&T DSL, and an AT&T T1 connection. All failed to connect and give a 502 error. Before this afternoon, things were working just fine.

    edit: I get the same 502 error when I try to access the File Explorer from within the control panel. I can access the control panel itself just fine.
  8. bro

    bro Perch

  9. Stephen

    Stephen US Operations Staff Member

    That listing is these wordpress hacks, ones that were able to brute force due to weak passwords before we for the login pages to stop loading to prevent the abuse/sql issues, have also been noted now to upload all sort sof things, and PHP bounces are a main item on the list. We've been working on clearing up anything seen doing this, on every server.
    AT&T is the worst buse dept to work with in getting info, they give nothing just block, never tell you anything so it is like flying blind in what they are blocking for, in the past it wasn't this cbl, but who knows. We will get working with them on resolving.
  10. Bunchadogs

    Bunchadogs Perch

    Looks like Web15 is either having issues or blocked universally as it seems to be down all over now, not just AT&T. Charter and Sprint here, as well as monitoring:

    Collection Time Location Availability Status DNS Connection Time Response Time Size Reason
    April 24, 2013 8:07:30 AM CDT
    Virginia [​IMG] 613 0 0 - 0 Read time out.
    Texas [​IMG] 0 0 0 - - Unable to connect to the service or the connection was interrupted
  11. Bunchadogs

    Bunchadogs Perch

    Glad to see Web15 is back up!

    It is definitely blocked by AT&T again...same traceroute as before
  12. 2366

    2366 Guppy

    Any updates?
  13. Stephen

    Stephen US Operations Staff Member

    We are providing them info that the infection on domain was cleaned that was making some spam and abuse.

    I will mention that one quick way to 'solve' this issue is to put a free cloudflare account on it, it will also help some some of the larger wordpress exploits and other CMS exploits but not by any means all of them. I mention this only because another client mentioned, and we have used for JH site in the paste not entirely without problem (we used paid account for it), but overall quite ok. We removed our site from it when they had all their routes down for over an hour a month or so back.
  14. 2366

    2366 Guppy

    And now the server is down completely, not just with AT&T.

    I set up an account with Cloudflare, which helps, but it doesn't always help when the server is down completely. I'm sorry, but this is starting to get ridiculous.

    Are there any updates besides "we are providing information to AT&T?"
  15. Bunchadogs

    Bunchadogs Perch

    This looks to be server related - the same thing happened on Wednesday.....

    The last time I checked AT&T it was also down, so it looks like multiple issues.

    This is my monitor report (it's on a 10 minute interval, I don't know how the durations are really calculated or how accurate they are):
    Date Downtime Duration
    Apr 25, 2013 10:30 AM CDT 17 Mins 25 Secs
    Apr 24, 2013 8:07 AM CDT 55 Mins 14 Secs
    Apr 23, 2013 2:07 PM CDT 45 Mins 34 Secs
    Apr 21, 2013 12:33 AM CDT 36 Mins 35 Secs
  16. Bunchadogs

    Bunchadogs Perch

    Hey - AT&T looks like they've opened it back up!

    Hooray!
    Now if only I could get MelbourneIT to unlock one of my client's domains....I can't get them up on Cloudflare!
  17. Stephen

    Stephen US Operations Staff Member

    ok good to know it is confirmed we were told they had in a reply but did not have confirmation till this :)

    There was an outage of about 5 minutes today, due to an abusive script which has been removed already now.

Share This Page

JodoHost - 26,000 hosting end-users in 100 countries
Plesk Web Hosting
VPS Hosting
H-Sphere Web Hosting
Other Services