Win19 cl2 is seeing some packetloss.

Discussion in 'HSphere Cluster 2' started by Ashish, Feb 25, 2016.

  1. Ashish

    Ashish Super Moderator Staff Member

    Win19 cl2 is seeing some packet loss. It seems there is a network attack on one of them making some network slowness to the rest of servers, we are tracing it down
  2. Ashish

    Ashish Super Moderator Staff Member

    CL2 - Win19 is up now, there may be moments of packet loss as we test on other machine but it is not for long duration.
  3. Stephen

    Stephen US Operations Staff Member

    Win19 has been good for some hours but just as we got win39 stabilized, Win19 is losing packets again. This is not related to win39 cl1 incident at this time. Being checked.
  4. Stephen

    Stephen US Operations Staff Member

    As soon as the shared IP of win19 is live, attacks return. Having a much harder time finding the target site here on this one, complex situation being the shared IP address.
  5. Stephen

    Stephen US Operations Staff Member

    at the moment I am going to leave it with some packetloss while I continue searching through logs.
  6. Stephen

    Stephen US Operations Staff Member

    Rebooting Win19 now after some changes, it may take a little while to come up, as it is applying some updates with it as well.
  7. Stephen

    Stephen US Operations Staff Member

    So what we are seeing here is a lot of outdated Wordpress installs being abused, scanned, hacked, files injected, being used to scan other networks sometimes, and continual brute force attempts. These requests are coming on several domains and as we get them blocked, and the wordpress files removed, the packetloss gets better.

    There's still an occassional time of packetloss as it finds a new wordpress old install and abuses it, but overall it is much more stable.

Share This Page

JodoHost - 26,000 hosting end-users in 100 countries
Plesk Web Hosting
VPS Hosting
H-Sphere Web Hosting
Other Services