Kayla

This thread is a timeline of events or upgrades for Pass61.

__________________

Kayla

A phishing scam email was being sent from Pass61 due to an exploit of WebCal.. I had to disable each instance of send_reminders.php on the server since many of them were being accessed. Please upgrade WebCal ASAP.

__________________

Kayla

Some issues have crept up on Pass61 in the past week, we have found a few issues - high Apache connections which suggested a dos attack, and some scripts which were looping. You can find details in this thread: Figured out why Pass 61 is going berserk?

We have been monitoring the server closely and can assure you we are keeping the server running as smoothly as possible.

__________________

Kayla

Pass61 is being fixed tonight. I have suspended one very resource-intensive account which is a portal type site - but then noticed it belonged to a reseller with about 198 accounts. Granted many are only placeholders, but this client needs a dedicated by now. (198 is more accounts than we even put on our own shared servers.) I apologize for any frustration with this server during the past week - it will now be resolved.

__________________

Kayla

Pass61 had another burp about 30 minutes ago, the load went up to about 20. I restarted MySQL and the load dropped back down - this is all definitely due to MySQL and PHP. The previous plan is still underway.

__________________

Kayla

We are moving a few accounts from this server this evening which have grown immensely; during this time we are monitoring as closely as possible. Thank you for your patience.

__________________

Kayla

Filtering out some other random usage that should not be happening on this server.



Site pictured at the top has an old install of Joomla which I believe is compromised by hackers, there is no other obvious reason for the spike in CPU for this site and it's definitely suspicious.

The second site is spiking horribly due to the karma script, which I guess at first glance is some kind of spam prevention.

These two issues have been solved now - still looking for more.

__________________

Kayla

We have temporarily turned off AWstats while moving high usage sites off of Pass61. This is because AWstats can be very resource intensive and is updating stats for an extreme number of files - some stats which may never even be viewed by some account owners.

So at this time I would like to remind you of even better stats programs available that you can install on your domains, which reveal even more information.

http://getclicky.com - Web based, you do not have to install anything, just put a Java Script on your pages that you wish to track. It's the best and with a free trial for 30 days (enough time to straighten out Pass61)
http://haveamint.com - Is not free but is much like Clicky with hundreds of plugins. Does of course require install but takes only 10 minutes or less.

__________________

Emmanuel

I want to apologize for the continued issues on pass61, it is unacceptable and an apology isn't enough to fix the issues nor account for the inconveniences caused.

This is what we are going to do tonight at 10PM EST Jan 31 2007

We are going to be moving everyone on this server to a brand new server with:

8 CPUS (yes 8, current server has 4 cpus)
6GB ram (current server has 4GB ram)
1.4T Size drives (current is 362G)

This will be resolved for sure, we can not have this server be unstable anymore.

Keep in mind downtime will be at least between 8-10 hours to complete the transition, please alert your clients.
We appreciate your loyalty and business, we will make this right for you all.

__________________
Emmanuel :: Surpass Hosting Network Admin
http://www.SurpassHosting.com