Cirtex down again

Portal Home > Knowledgebase > Articles Database > Cirtex down again

Posted by Stan Marsh, 10-09-2008, 04:54 AM
ns31/32.cirtexhosting.com down for extended period now. My friend who has a domain hosted there reports downtime of 2+ days. I can confirm it's down at the moment of writing though. If 2+ days is true - I cannot even imagine HOW this is possible, even in the worst case scenario of extended DDOS or ANY of the hardware fault (whatever this is, as customers totally lack of information). Cirtex, care to explain? Thank you.
Posted by sosmuthu, 10-09-2008, 05:00 AM
True..Now the site is up but it was down for past 10hrs or so. The Scratchy server is extrmely unreliable hack attempts,downtime etc...I dont know how Webhostingstuff shows the outage as only 21 mins.It must have been 21hrs..!
Posted by Cirtex, 10-09-2008, 01:14 PM
Hi, We're having problems with one of our server due to some hardware issues and we're still trying to troubleshoot/diagnose to find out the cause. Really apologize to all those on this server experiencing issue and we'll get things up asap! Please visit our forums to keep up to date. Cheers
Posted by JRSEOMarketing, 10-09-2008, 01:17 PM
I have a domain with Cirtex and I can confirm its been down at least 24 hours now. Thanks for the update Cirtex, and let's hope this gets fixed soon. I'm just glad a customer of mine who hosts with you is on another server which is up. Only a personal site I have (although I make money on advertising) is down
Posted by Stan Marsh, 10-09-2008, 03:09 PM
This is what my friend received from Cirtex support: So, either your support is writing BS to customers or you have been hacked and trying to hide this fact here with explanations like 'We're having problems with one of our server due to some hardware issues'. Please let your customers know what really happening with that server. Thank you.
Posted by Cirtex, 10-09-2008, 03:32 PM
Hi, The server is back online and it was a hardware issue, but it seems like the cause can be related to the injection in which the INDEX FILES of many accounts on the server were replaced. We're still investigating the cause but it seems like it was caused by a single customers account's insecure/outdated scripts. No accounts or server root is compromised except index/homepage replacement. We're working on resolving this and also tightening kernel and other security. Again sorry for the inconvenience.
Posted by Stan Marsh, 10-10-2008, 01:59 AM
It looks like the backups are *still* not restored and my friend's homepage is still displaying the following: http://www.imagebam.com/image/2073b815384277 Now, we are checking how much time it will take for you to cope with 1 usual server hack (24+ hours so far that I can confirm) and then make our own conclusions. My personal opinion this shouldn't have taken more than 10-15 *minutes* to be fixed, completely.
Posted by Cirtex, 10-10-2008, 03:13 PM
Hi, We're working to help all clients but the only files affected are the INDEX Files and no clients is compromised in this server, this was a simple script kiddie exploit rant on an insecure script ran by a particular customer. We;re working on securing more of this particular server. Thank you