Today several personal accounts
suffered a hack attempt, focused on the exploit
of FTP. The attacker/s used FTP details to
access accounts and upload a malicious iframe
that in turn linked to an external site
hosting the following
file:
We
took immediate steps to identify and block the
source of the attack.
The file was
removed and standard index pages restored. We
believe accounts were affected for no more
than five hours.
At this time we are
urging all affected users to update their
passwords. Affected users will have been
notified as well. We believe only FTP
passwords were affected, but for added security
it is advisable to update all your site
passwords if similar. To update your FTP
password:
Login to
DOMAIN/siteadmin Select DOMAIN Select
setup Enter a new password, update and log
out.
We are also making an urgent review
of the software presently in use on various
servers. We would also like to take the
opportunity to remind all users to ensure they
have adequate and upto date local backups of
important site data. Personal hosting
accounts are not backed by a guaranteed backup
option as standard. For information on our own
backup services please
see:
http://www.34sp.com/servicesbackuphosting
colossus.34sp.com posted on
09:55 20/02/2007 (GMT)
Server: colossus.34sp.com
Outage type: Unplanned
Updated: 10:11 2007
20/02/07 (GMT)
Status: - Resolved
We are currently looking into an
issue affecting this
server
---
This issues was
resolved around 10minutes ago.
server2 reseller posted on
01:35 30/01/2007 (GMT)
Server: server2 reseller
Outage type: Unplanned
Updated: 13:12 2007
30/01/07 (GMT)
Status: - Resolved
This issue was resolved around
30minutes ago - all sites on server2 should now
be back online.
Anyone with any
outstanding issues on this please let us
know.
---- 4.00am
We still have
an engineer on site looking at this server. At
present they are trying the disks in a spare
server.
2.30am
We now have an
engineer on site looking at the
system.
1.58am
A further attempt
is being made to power cycle the
system.
1.33am
Server2 has been
power cycled. We are presently waiting for the
machine to return to the network level
carr.34sp.com posted on
05:49 30/01/2007 (GMT)
Server: carr.34sp.com
Outage type: Unplanned
Updated: 08:54 2007
30/01/07 (GMT)
Status: - Resolved
This server is now back
online.
---- carr.34sp.com has
experienced a failure and is offline. We are
looking into the cause of this.
mother.34sp.com posted on
00:45 25/01/2007 (GMT)
Server: mother.34sp.com
Outage type: Unplanned
Updated: 01:35 2007
30/01/07 (GMT)
Status: - Resolved
Update at 18:00:
Webmail
access was restored around 4.30pm today, if
anyone still has issues with this please do let
us know.
phpcgi 4 and phpcgi 4+mbstring
are now up to the normal setup, the php5cgi
binaries will be available again soon.
At
present mail from before the failure is lost. We
are looking to have the disks examined to see if
we can retrieve any mails from
them.
-----
Update at
12:23:
Webmail is still unavailable
and Plesks technical support are working on
fixing this issue for us at
present.
Users with php-cgi will need to
visit http://scripts.34sp.com/phpcgi and
reinstall the feature.
This is an
emergency version which lacks some extra
features but is the base php install and will
allow your gallery or cms etc to function again.
We will produce a full featured version again
once the emergency situation is
resolved.
--------------
Update
at 10:32:
As you will be aware
websites are now back online and email is
available via pop3/imap only (no webmail) We
are working to get the webmail working at this
time.
SFTP is also not available at this
time.
Clients using php-cgi will find it
currently does not work. This is because it was
compiled for the old server and we are currently
recompiling this for you at this time. We will
update you on how to apply the new version as
soon as we can.
Users having issues with
being asked to download the index page can
comment out or remove the following line form
.htaccess
AddType
text/x-server-parsed-html .html .cgi
The
above line is no longer valid as the server now
runs Apache
2
--------------
Update at
21:10:
All backup data has now been
restored and most services are back
online.
An update email will go out to
all affected users shortly.
Update at
16:04:
At this time there are still
200 accounts to be imported using the plesk
importing system. Sadly this speeds up and slows
down depending on each account it hits making it
hard to estimate timescales.
It is
currently taking 1 hour average per 100 accounts
so 2 hours from 4.04pm uk time is the current
ETA.
Please understand all times quoted
are Estimated Times for Arrival as such these
are subject to
change.
--------------
Update
at 14:18:
The backup is now on the
new server and we are currently rebuilding users
accounts sadly the plesk restore tools are very
slow as such this process based on current time
scales could take up to 2 hours to fully enable
this server.
Again we apologise for the
inconvenience this has caused and thank you for
your continued support on this
matter.
--------------
Update
at 12:27:
We are now in the final
stages of the backup to the new server which
will be online as soon as is possible.
We
thank you for your
patience.
--------------
Update
at 09:48:
We are currently
transferring all data from our maintenance
backup to a new server. We hope to have this
server fully operational later this
morning.
--------------
00:45
On
24/01/07 our datacentre facility experienced a
severe failure of air cooling systems. The
failure affected the entire facility and
multiple ISP‘s were severely affected. On site
engineers worked to correct the failure at once
and cooling systems were restored by mid
afternoon.
Initial efforts focused
around restoring the machine by on site
engineers. As this failed an attempt to restore
the server disks on to a spare system was
undertook. This effort also failed.
As a
result a new server is now being brought online.
We hope to restore maintenance backups to this
server in due course.
Intermittent issues posted
on 09:50 24/01/2007 (GMT)
Server:
Outage type: Unplanned
Updated: 00:44 2007
25/01/07 (GMT)
Status: - Resolved
Update at 21:20
The
reseller 2 server is back online. A faulty PSU
was confirmed and
replaced.
mother.34sp.com is still being
attended to.
Update at 20:35
All servers bar two are now back
online and services running
fine.
mother.34sp.com is presently
offline and failing to reboot. We have an
engineer onsite attempting to access the server
disks.
reseller server2 is also offline
due to a suspected PSU failure. This is
presently being replaced.
Update at 17:35
Temperatures are now much better.
Most systems are back online with only a handful
remaining to be checked by our engineer on
site.
We thank you for your patience
during this inconvenience.
Update at
15:55:
The ambient temperature is now
reported at 35C and our engineer is now
restarting all affected machines at the data
centre. The temperature is reported to be
dropping 2C every 5 minutes. A large fan has now
been positioned in the room to further speed up
airflow.
Again we thank you for your
patience in this
matter.
--------------
Update
at 14:15:
The Aircon is running as
planned in the data centre but at the moment the
ambient temperature is still an issue. As such
the servers are still overheating. All efforts
are being made by the data centre to resume the
correct temperature for our servers to
run.
At this time services are still
randomly affected and again we thank you for
your patience in this
matter.
--------------
Update
at 11:40:
The temperatures in the
data centre are currently running at about 45C
this is meant to be 20C and as such the servers
are still overheating.
It will take a few
hours for the aircon to take full effect at
which point services should
stabilise.
Again we apologise for any
inconvenience caused.
We will keep you
updated on this situation.
You do not
need to call our support line regarding
this. --------------
Update at
10:13:
Interxion can confirmed that 2
chillers have been restarted. Temperatures are
expected to normalised over the next few
hours. A chiller technician and Interxion
engineers continue to investigate the issue.
You do not need to call our support line
regarding
this.
--------------
We have
just received an official notice from our
datacenter. Many ISPs and hosts who also have
servers in this data centre are currently being
affected as a result of this
issue.
Interxion Data centre: The air
conditioning system is temporarily down in all
areas of the London Data Centre London, United
Kingdom. Our engineers are currently
investigating the problem. Updates will
follow. We have been made aware of various
issues on many of our servers regarding
connectivity.
All of our servers are
functioning fine however as a result of the
above some are overheating causing a loss of
service.
We apologise for any
inconvenience caused.
You do not need to
call our support line regarding this.
colossus.34sp.com posted on
08:03 22/01/2007 (GMT)
Server: colossus.34sp.com
Outage type: Unplanned
Updated: 08:03 2007
22/01/07 (GMT)
Status: - Resolved
An issue affecting the
availability of the colossus server is currently
being looked into.
----
Colossus
server is now back online.
orac.34sp.com posted on
17:11 15/01/2007 (GMT)
Server: orac.34sp.com
Outage type: Unplanned
Updated: 13:22 2007
16/01/07 (GMT)
Status: - Resolved
The earlier issues affected
webmail sending receiving and email in general.
There is no need to mail support regarding this.
All emails will be delivered when they are
reached.
Apologies for any inconvenience
caused.
An issue with this server is
currently being looked into - we hope to have
services back online shortly.
carr.34sp.com posted on
07:29 15/01/2007 (GMT)
Server: carr.34sp.com
Outage type: Unplanned
Updated: 07:37 2007
15/01/07 (GMT)
Status: - Resolved
An issue with the carr.34sp.com
server is currently being looked
into.
----
This server is now back
online.
queeg.34sp.com posted on
15:44 13/01/2007 (GMT)
Server: queeg.34sp.com
Outage type: Unplanned
Updated: 15:44 2007
13/01/07 (GMT)
Status: - Resolved
The queeg.34SP.com server was
rebooted a short while ago due to some issues,
this was resolved around 10minutes ago
- Resolved