My server with Softlayer was hacked after being 5 Days under attack.
Do you guys have any suggestion about secure data centers
Any hosting we can depand on them when we face a problem?
I have a community web site with high traffic. The site is similar to facebook, meaning we send a notification for every action (new messages, poke, ....).
I was wondering what solution would you suggest for mail server? For now I have a powerful server with postfix that sends around 12000 emails per day (using the php mail function at every action).
Is there a better solution? Should i get another server and relay to 2 servers?
Is there any tools to check if the server is able to handle all emails or if I need another server.
i would like to know if you can suggest me a good datacenter to buy and colocate servers.
I need EU bandwidth, possibly Germany or Notherlands.
Do you have any suggestions?
I could only find 1 "big" provider on the offers section.
I am "simply" looking to run a Joomla! community site with an estimated 250 - 500 and then eventually up to 1,000 users onine at one time. The main attraction will be the user forums and profiles. I don't plan on having any videos or anything like that, but I will install a mambot that will integrate Google Video, etc.
I am trying to pick a VPS provider and from what I have read so far, I have kind of narrowed it down to a few places:
Spry.com
vpslink.com
knownhost.com
mediatemple.net
From reading alot so far, I would imagine I would need at least 256-512MB of RAM. Plesk sounds like a good control panel since I won't be reselling any of the space. Webmin sounds too hands on, and I know a little bit, but not a lot. The backup option that comes with Spry.com sounds tempting, but VPSLink has attractive price points. Mediatemple.net also gives you 1TB of bandwidth, a very attractive option.
I am "simply" looking to run a Joomla! community site with an estimated 250 -
As long as the site can run MySQL, I am happy. Joomla!, statistics software (any suggestions) and WordPress and that is about it as far as applications.
Any suggestions on what plans or who I should go with? My budget is about $t50 a month.
I'm running Windows Server 2003 and I use Symantec End Point Protection v11. I'm not satisfied with it nor am I confident it is the best virus protection software.
What do you suggest for the best protection of a Windows 2003 server?
Based on todays equipement I know a person can spend Thousands on a good server, I'm looking to build my own and just want some advice on which way to go.
I'm thinking of just building the server pc in one case and the hard drive setup will be in a seperate case with the following:
3ware 9690SA-8E controller
Mass-Storage 8x by A-Tech Fabrication for a case
8 - SATA2 SEAGATE 1TB (7200rpm) 32MB on the controller as RAID
Can anyone give advice on what would be a good setup if you were running 1 single server for local businesses. I don't want to hear just pay for a provider as I've heard that one before now I'm looking to know what hardware setup you would run I like to play and learn. Even though sometimes the headache playing isn't as much fun as we sometimes may have hoped.
What are m/b and processor options for running a server?
What is min. amount of ram a person should run using linux and cpanel?
Should linux be on a max. amount of space for root and server files on a seperate mnt?
What connection up/down would be min. for usage of about 5gig/month?
I recently moved my site from a shared hosting plan at $5 a month to a VPS at JaguarPC. I took advantage of one of the offers here at Web Host Talk. My setup has cPanel with 320MB of RAM. I have another site running the same software (Joomla, vBulletin) with cPanel and only 256MB of RAM at KnownHost.
I've had zero problems with Knownhost and the site is snappy. The site hosted at JaguarPC continues to have all kinds of problems. Running a number of sites, I don't always get to check in on my sites unless I know of a problem. I'm sorry I didn't pay more attention to this site, because it was having all types of PHP memory issues. When I first contacted JaguarPC, they said they boosted the memory in Apache. The issues remained, so I contacted them again. They recommended more RAM. Now, I checked on my KnownHost site and that's running on 256MB. I figured that maybe JaguarPC didn't allocate enough RAM when they set up the VPS. They confirmed 320MB. Not wanting to change hosts, I asked them to poke around a bit more, considering what I know about KnownHost and my success there.
I received this response:
have checked and you are running named service on your server. named caches dns data and this can also consume a lot of memory, sometimes over a 100 MB may be consumed by this service.
In addition to cPanel and named which are most memory consuming applications running on your server, there are other applications like apache web server and the php scripts running on the server also consume some memory.
It is highly recommended that you upgrade the RAM on your VPS significantly to avoid such problems which may cause disruption of service. You can find a list of RAM and other VPS addons in the following link.
Instead of helping me resolve the problem, they simply keep asking me to get more RAM.
For SEO purposes, I like to keep my sites on different hosts. Can anyone recommend a VPS?
I was certainly unaware that "named service" had such an impact on my VPS. If that's the case, is there any harm in not having this? SEO or otherwise?
i am setting up a new server and am not sure what some of this is,i have just copies part of the page. Its a bit messed up but it will do.
What does Business Continuance Insurance
What does Host Ping and TCP Service Monitoring
24x7x365 NOC Monitoring, Notification, and Response
McAfee Host Intrusion Protection w/Reporting
10Mbps Hardware Firewall
Most explain themselves, but for the firewall ive already got mcaffec total protection does that have a fire wall and are any of these worth using.
Item Option Monthly Setup ...
Hi, I am looking for a windows VPS provider. Ideally with servers in the USA. I am currently TRYING to register with cheapvps.co.uk, but until now I have been unsuccessful. I registered 9 days ago, and they have not yet been able to provision it yet at cheapvps. Every time I send a message asking about my server I get a reply from Paul or Russ with a one-liner like "I'll have someone look at it", "I've asked them to fix it" "It takes 24 hours" "etc", always one lines, not a single explanation.
I will give them some more time, cause honestly I hope they get to set up the server and give me the great service I have read so many people in this forum rave about, but right now I am starting to look for alternatives just in case cheapvps cannot handle my request (a standard config from the options they offer). As I said hopefully its just a perfect storm once in a lifetime type of situation which I unluckily had to go through....but I have not received any explanations yet...just one liners.
My online store is almost ready to publish and Im trying to work my head around this SSL thing.
So through reading on here Ive determined that only the cart or PII areas need to be secured, not the entire site.
My host provided a free SSL cert but I discovered that it is a domain verification SSL only and there is no "clickable seal" or business verification. Verification is important however Im not sure I need an EV cert (nor that I can afford it).
Im looking for business verification, clickable seal, 128/256, 2048bit, free reissue.
Does anyone have any suggestions for a SSL cert and what I might need? There was someone in the ads forum offering a GlobalSign OrganizationalSSL cert for $100yr. Does this seem like a good deal? There isnt a lot of feedback about GlobalSign on the net.
my server is being ddosed and the network utilisation is at 40% of 1gpbs
i asked to softlayer to check and they said my programs/services is taking that much bandwidth
any1 can help me?
if my server is under dos attack wat can i do?
because the bandwidth used is about 50gb/hr
we've been with Softlayer for a little over a year. The service has been good but their support has been a nightmare for us. There was a time that we were under a dos attack and they refused to do anything about it which is what forced us to switch.
But that's not the reason I'm here. My billing ends on the 12th, their terms require you cancel the server 3 days before billing ends. I pay manually each month by pay pal. I tried to cancel the server today, what I assumed was 3 days before the 12th and they told me I couldn't do it. That I had to pay for another full month. So I told them I just won't pay and they threatened me with a late fee. Is there anything legally these people can actually do to me if I don't pay? All they have is my contact information, I don't think they could submit to collections over that without my social security number.
who knows one?
View 12 Replies View RelatedI'm getting a server at softlayer, and I am curious, do I need to setup any sort of security on the box like a firewall?
Or is the default install safe enough?
My employer has decided to let me move thier sites to a new hosting company. I can finally get rid of 1and1.
I have just over 50 domains with about 25 that had sites. I was paying $30 a month for hosting on a shared Linux server for these sites. The sites are small and can be put on another shared plan.
One thing I do need is PHP to MS SQL. 1and1 did not support MS SQL from PHP. I also would like to pay no more than what I was paying. The only good thing I can say is that I have had 100% uptime with 1and1.
I am shopping for a new web host. I'm interested in finding one that has reasonable rates, can spend about $150/year. I want to be able to host DNN sites in addition to regular ASP.Net sites.
View 5 Replies View RelatedToday 3 of my shared webhosting servers with them were disconnected.
After investigation in their portal I find out that 3 days ago + 1 hour 3 tickets were created about "your server hosted malware" and now those tickets were auto-processed with 3 servers disconnection in result.
Very strange that I receive "ticket updates" emails today (when disconnection happens) but not recieve "ticket created" emails.
My contact email domain has 2 MXs and widely used and I have no complains for not-delivered emails before.
Currently I'm waiting feedback for my phone call and answers in those tickets asking them to connect back my servers for me to take necessary steps.
But this is very strange approach - to auto-disconnect 3 servers at once only because I didn't receive their 1 email per ticket.
The server was going down every week or so since Christmas when I bought it. I re-imaged it, still going down. 3 times in fact this week. The logs say nothing out of the ordinary. I'm sure it just has to be hardware fault, but thier customer support takes ages to answer, are useless, pass you around drom department to department, and are not allowed to make outgoing calls! I'm halfway through a 12 month contract I bet it even says the uptime is not guarenteed as it's my root server....
Anyway, can anyone recommend (yes I've googled but want something specific) a good company with a good record that do plesk, because I've got used to it! Or any suggestions how to ditch 1and1 or get them to change the actual server?
We have several different websites, and trying to spread them out to different datacenters and companies to find a good fit (after a fire at one datacenter had us down for days).
We first had HostGator (semi-dedicated account when they had those) and our main problem initially was them shutting the site down when it used too many resources and them putting up a contact billing message for our customers at the peak of an email campaign that sparked the high resource usage. After that heated frustration, we got on a dedicated account with them and haven't really had any/many problems since. So can't complain too much there other than wishing we got the dedicated first and for them to have used a more diplomatic way of transferring us to a higher account level when needed than the message most customers saw during the transition.
When The Planet had that fire that knocked servers down for days, we were effected with our HostGator server. Not that it's to be expected again, but wanted to get a different dedicated server for our other sites to have some options in case of disaster and having multiple servers/companies to move things around if needed.
So we then got a dedicated server with Lunarpages. I was not unhappy with their customer support response as they've been fairly prompt IMO (at least compared to some other comments I've read around since) but we seem to have never-ending troubles at first with SSL installation (self-install and then them installing) and then general domain DNS, resolving and configuration problems. We call them literally every day as it goes down every day (server up but site not resolving) and they get it back up and then it goes down again for whatever reasons yet to be determined apparently. Not sure if different techs doing something different each time, or server being hacked, or what. It's running essentially the same stuff I believe that's working on the other dedicated server but with different graphics mostly.
So the inability to get that figured out has us searching for a new dedicated server. Otherwise, I think we'd be happy there if it just stayed working. Here's what we have/require:
- Multiple domains each with own SSL certificate.
- php and mysql needed with highly-customized oscommerce scripts running on each domain that use a lot of queries and resources.
- cpanel or something similar preferred for admin.
- About 1000 visitors on each domain per day.
- Need some tech support for resolving problems when they come up or would just buy/manage server ourselves.
- Budgeted for a step above the low-end dedicated server level for many companies, but not over $300 a month looking at the market.
We are looking at a couple different hosting companies but haven't used any of them previously. Would still like to try another company for the other server before putting both on HostGator but having bad luck so far. We are considering:
- InMotion (advanced dedicated server account). I've communicated with sales/support and seem incredibly responsive as all comments I've read, but not a ton out there on them.
- Fused Network
- SteadFast Networks
- Gigenet
- LiquidWeb
Probably in that order from initial research, but hard to know what to believe sometimes. Sometimes you have to just find out for yourself, but hoping for suggestions in regards to the best bet to try next for our situation. Already have read some helpful information from others about some of the hosts previously here, but sometimes things change over time (as it seems like with Lunarpages then and now). Hopefully our experiences with HostGator (both positive and negative) and Lunarpages helps others out too.
I see that Peachy Dandy offers hosting for adult content. But I was also wondering if anyone has any other hosts that they would recommend.
View 9 Replies View RelatedI know there are a few threads that are somewhat similar, so I apologize from that aspect, but since I am still not sure of the best option, I thought I would post my exact requirements and hopefully get some good advice.
We need a Windowss dedicated server, probably in the 8 core/8gig RAM variety for a rather intensive Asp.net/MS SQL site. It is a corporate site that is expected to see heavy usage with fairly heavy DB/reportng related web pages.
The majority of people accessing the site will be connecting from Europe.
We will have little, if any, need for management support of Windows or IIS, we are primarily looking for reliable hardware, with quick hardware repair when failures come, and in a redundant DC to avoid downtime (hardware or internet pipe).
The price difference between rackspace and the others does not concern us, so price while a consideration, is towards the bottom of our list of priorities.
As our users are in Europe, a European DC would probably be ideal, but that is one question I have. How much difference will performance/latency be with an American DC vs. European DC for our European users.
English speaking (native language, preferably) support is a must.
A High powered machine (minimum would be 8 cores x 2ghz + 8 gig ram) is a must (possibly two servers -- possibly a router based load balancing of the two servers).
Fast, reliable/redundant internet pipe. We need a DC that will not be unreliable, wether it is from internet outages due to lack of redundancy, or speed fluctuations due to overselling the bandwidth.
So, basically, I have two main questions, I suppose.
First, since the majority of my users will be in Europe, should I only consider a European DC? How much difference will my European users see/feel if we are in a US DC? What difference does it make if the DC is on the East cost, then say Texas?
Second, with price not being a primary consideration, and needing little or no managed support (besides hardware support), just high power machines in a HIGHLY reliable DC, which are the best companies to go with?
As described in the title I need a paid monitoring service which provides sms alerts and tells SoftLayer immediately so they can investigate the issue and make what needed to bring the server online.
I like hyperspin.com service but it looks there is no way to send SoftLayer an automated notification because there is a need to open a ticket.
I can't be attendant at my office 24 hours so I need this service which alerts me with sms about the fail and simultaneously tells my provider so my server will not be down for a long time.
SOme one has claimed that he has penetrated my server and has gathered some kind of information via shell access, I have disabled the possible ways of shell access for the users via twaek settings, and php.ini
- How I can check he has made any backdoor for himself or not?
and I have made a trojan check via Scan for Trojan Horses in WHM, and it has found about 200 possible trojans.
- How I can remove them?
217.67.250.41 - - [18/May/2009:15:36:08 +0100] "GET /w00tw00t.at.ISC.SANS.DFind HTTP/1.1" 400 226 "-" "-"
What is mean ? Sorry for ask a fast answer. I have change my domain's IP to protect someone can run dangerous script...
My dedicated server was rather slow. Upon checking, I had a new cron job, (deleted now) made by apache, pinting to the following IRC bot.
[root@server50040 tmp]# cd .LiveZone/
[root@server50040 .LiveZone]# ls -al
total 384
drwxr-xr-x 10 apache apache 4096 Dec 21 12:17 .
drwxrwxrwt 3 root root 4096 Dec 21 12:15 ..
-rwxr-xr-x 1 apache apache 320 Dec 9 2004 config
-rw------- 1 apache apache 1002 Dec 9 2004 config.h
-rw-rw-r-- 1 apache apache 55 Dec 20 22:55 cron.d
-rwxr-xr-x 1 apache apache 347 Dec 9 2004 ****
drwxr-xr-x 2 apache apache 12288 May 31 2002 help
-rwxr-xr-x 1 apache apache 210216 Dec 9 2004 httpd
drwxr-xr-x 2 apache apache 4096 Jan 12 2002 lang
-rw------- 1 apache apache 492 Dec 21 12:17 livezone
-rw-rw-r-- 1 apache apache 19 Dec 20 22:55 livezone.dir
-rw------- 1 apache apache 492 Dec 21 12:09 livezone.old
drwxr-xr-x 2 apache apache 4096 Dec 21 12:10 log
-rw-r--r-- 1 apache apache 2137 Sep 26 2003 Makefile
-rw-r--r-- 1 apache apache 731 Dec 9 2004 makefile.out
-rwxr-xr-x 1 apache apache 15090 Dec 9 2004 makesalt
drwxr-xr-x 3 apache apache 4096 Jul 30 2000 menuconf
drwxr-xr-x 2 apache apache 4096 Jul 17 2000 motd
-rwxr-xr-x 1 apache apache 14306 Nov 13 2003 proc
-rw------- 1 apache apache 6 Dec 21 12:10 psybnc.pid
-rw-r--r-- 1 apache apache 10780 Dec 9 2004 README
-rwxr-xr-x 1 apache apache 68 Jun 4 2004 run
drwxr-xr-x 2 apache apache 4096 Dec 9 2004 scripts
drwxr-xr-x 2 apache apache 4096 Dec 9 2004 src
-rw------- 1 apache apache 3901 Jan 12 2002 targets.mak
drwxr-xr-x 2 apache apache 4096 Dec 9 2004 tools
-rwxr--r-- 1 apache apache 21516 Sep 25 2002 xh
-rwxrw-r-- 1 apache apache 194 Dec 20 22:55 y2kupdate
My server was hacked some time ago. I've changed passwords and scanned system for viruses, but found nothing.
Now, I'm looking into the log file /var/log/messages and I have few questions:
1. There are a lot of messages like: Apr 2 02:53:09 host
sshd(pam_unix)[29398]: authentication failure; logname= uid=0 euid=0 tty=ssh
ruser= rhost=203.196.151.235
Do these messages mean that hacker trying to enter the server under root?
2. There are messages like these:
Apr 2 03:56:10 host clamd[4678]: stream 1255: Worm.SomeFool.P.2 FOUND
Apr 2 10:46:10 host clamd[4678]: stream 2008: Worm.Bagle.pwd-eml FOUND
What does this mean? Virus on my server or something else?
3. Also, I can see a lot of messages like this one:
Apr 2 09:38:40 host clamd[4678]: stream 1111: Email.Phishing.RB-524 FOUND
Does someone read my emails?
My server just got hacked i just bought it!!
and they was going to charge me anouther $35 to reset the password how stupid...
in the end we got it done free
My server was hacked night before last and here is the log
Oct 28 10:30:47 server1 [19705]: connection from "173.45.118.58"
Oct 28 10:30:47 server1 [19705]: User root's local password accepted.
Oct 28 10:30:47 server1 [19705]: Password authentication for user root accepted.
Oct 28 10:30:47 server1 [19705]: User root, coming from 3a.76.2d.[url], authenticated.
I found a process /usr/sbin/httpd was running by nobody, then I did a trace in WHM and found this. Is my server hacked ?
send(4, "@206113irc10quakenet3org1"..., 34, MSG_NOSIGNAL) = 34
poll([{fd=4, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(4, FIONREAD, [162]) = 0
recvfrom(4, "@2062012001103irc10quakenet3org1"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), sin_addr=inet_addr("72.36.191.2")}, [16]) = 162
close(4) = 0
socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 4
ioctl(4, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbffb3718) = -1 EINVAL (Invalid argument)
_llseek(4, 0, 0xbffb3770, SEEK_CUR) = -1 ESPIPE (Illegal seek)
ioctl(4, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbffb3718) = -1 EINVAL (Invalid argument)
_llseek(4, 0, 0xbffb3770, SEEK_CUR) = -1 ESPIPE (Illegal seek)
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0
connect(4, {sa_family=AF_INET, sin_port=htons(6665), sin_addr=inet_addr("83.140.172.210")}, 16) = -1 ETIMEDOUT (Connection timed out)
close(4) = 0
open("/etc/protocols", O_RDONLY) = 4
fcntl64(4, F_GETFD) = 0
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0
My websites worked very well some days ago. I've touched nothing on my server since then and now every website I have on it is down!
I have a VPS and have root access.
When I restart my apache web server, my websites are working for about 3 seconds! Then it doesn't work any longer!
I've talked to my host but they may find the error if their technicians look at my server but this will cost!
I have a dedicated server on a web host. I have 3 domains hosted on the same server. One of the domains was apparently hacked and a rogue script was installed that was using the exim service to send out spam. At least that's what I thought was going on.
When I contacted tech support at the web host they confirmed that the emails were being sent through my server and told me that there was no way for them to tell me what script was doing it or where it was located in the domain files. At this point I had them stop the exim service on my server so I knew no more spam would be sent out until I could get this web space cleaned up.
I backed up all of my files and the database from that domain and wiped out every file in the domain space by having the web host delete everything from their end. Then I created a new web space for the domain. I didn't load any programs or files whatsoever. Just the bare minimum to support the domain. Then I created the email accounts.
During this process I made sure that I changed every password on the domain. I didn't even use the same login names except for the email accounts. The email account passwords were also new.
As soon as I had the email accounts turned on there was more spam. What I find curious is that I have several email accounts on this domain but it's only one that all of this spam is being sent through. I don't know enough about the mechanics to know if this really is being sent through my server or if someone is just plugging in my email address in the spam.
I have not done anything with the other two domains on the server. Is it possible that even though these are saying they are from the fresh domain space they could be from a script on one of the others? ..............