SH72 (72.29.78.93) : Shared

**Kayla** · June 8th, 2005, 12:28 AM

This thread is a timeline for all events occuring to the server SH72.

Each time this server has an issue it will be posted here.

If you cannot access your site, and there is no announcement here, the reason for it is not caused by this server or our network. You must email support[at]surpasshosting.com to find the root of your problem.

Thank you.

**Kayla** · June 8th, 2005, 12:30 AM

During the past 72 hours there was some random spamming going on SH72. The culprit was an outsider of course, and they were using an old PHP Nuke install on a customer's website. This has been resolved.

The question is, why was someone using an old install of PHP Nuke on a brand new server in the first place. If anything, newer servers should have the newest installs of any program since the accounts are brand new. We usually have this problem on servers we've had online for a year or more, when outdated versions were originally installed (at the time they were new versions with security holes).

**Emmanuel** · August 1st, 2005, 1:47 AM

SH72 is being upgraded on Aug 2nd at 12:00 midnight EST. It should cause about 30 minutes or less of downtime.

**Emmanuel** · January 12th, 2006, 5:51 AM

sh72 will have a 2 hour downtime window between
6am and 8am Sunday Jan 15 2006 EST. We will be doing
some movedment of racks within the datacenter. We
picked this time which has shown to be the least
traffic on the server. We apologize for any inconvenience.

**Kayla** · March 8th, 2006, 5:18 PM

SH72 had an account hit that had a PHP Fan Base installed. We had to disable the directory and inform the client. The exploit was using about 47% server memory alone. This is why the server had problems today, due to this. We again urge you, if you have PHP Fan Base installed or any programs listed below, please check them and make the very needful changes.

If you use any of the following scripts:

FA-PHPHosting
PHPClique
PHPCalendar
PHPCurrently
PHPFanBase
PHPQuotes

Please disable them immediately or use the fix specified below. There are serious exploits going around the net right now and have been for the past few months. All of these scripts are made by http://codegrrl.com/ and have a ridiculously easy hole in them:
"

include($logout_page);
"
This allows an attacker to include whatever code they wish into the php file and run the commands.
To avoid getting your site defaced, we recommend you either remove the protection.php file asap, or edit it and remove that line above.

**Emmanuel** · August 29th, 2006, 5:09 PM

sh72 has been going down 2-3 times a day for short periods. We are working to try and isolate the issue. It is not very obvious yet. For now we will add more ram which will give us more ammo to battle it.

I apologize for the issues, rest assured we are working on it.

**Emmanuel** · September 4th, 2006, 9:07 PM

Due to the recent constant issues with sh72 we are reinstalling it into new hardrives and hardware to isolate the issue being the server. There will be downtime for about 8 hours to complete this overnight.

We appreciate your patience during these issues to really solve this once
and for all.

**Andy** · June 17th, 2008, 2:06 PM

Thursday night, June 19th we will be enabling PHP SuExec and upgrading PHP and MySQL to version 5 on sh72.surpasshosting.com.

There will be some minimum downtime past 12am EST.

June 8th, 2005, 12:28 AM	#1 (permalink)
Kayla tealeaf Surpass Staff Joined in May 2003 Lives in Orlando 24,047 posts Gave thanks: 908 Thanked 771 times	SH72 (72.29.78.93) : Shared This thread is a timeline for all events occuring to the server SH72. Each time this server has an issue it will be posted here. If you cannot access your site, and there is no announcement here, the reason for it is not caused by this server or our network. You must email support[at]surpasshosting.com to find the root of your problem. Thank you. __________________ Follow Surpass on Twitter, Facebook and FriendFeed Check out interesting finds on the Surpass Blog

June 8th, 2005, 12:30 AM	#2 (permalink)
Kayla tealeaf Surpass Staff Joined in May 2003 Lives in Orlando 24,047 posts Gave thanks: 908 Thanked 771 times	During the past 72 hours there was some random spamming going on SH72. The culprit was an outsider of course, and they were using an old PHP Nuke install on a customer's website. This has been resolved. The question is, why was someone using an old install of PHP Nuke on a brand new server in the first place. If anything, newer servers should have the newest installs of any program since the accounts are brand new. We usually have this problem on servers we've had online for a year or more, when outdated versions were originally installed (at the time they were new versions with security holes). __________________ Follow Surpass on Twitter, Facebook and FriendFeed Check out interesting finds on the Surpass Blog

August 1st, 2005, 1:47 AM	#3 (permalink)
Emmanuel CTO, Surpass Hosting Super #1 Joined in Apr 2003 Lives in Florida 1,798 posts Gave thanks: 9 Thanked 125 times	SH72 is being upgraded on Aug 2nd at 12:00 midnight EST. It should cause about 30 minutes or less of downtime. __________________ Emmanuel :: Surpass Hosting Network Admin http://www.SurpassHosting.com

January 12th, 2006, 5:51 AM	#4 (permalink)
Emmanuel CTO, Surpass Hosting Super #1 Joined in Apr 2003 Lives in Florida 1,798 posts Gave thanks: 9 Thanked 125 times	sh72 will have a 2 hour downtime window between 6am and 8am Sunday Jan 15 2006 EST. We will be doing some movedment of racks within the datacenter. We picked this time which has shown to be the least traffic on the server. We apologize for any inconvenience. __________________ Emmanuel :: Surpass Hosting Network Admin http://www.SurpassHosting.com

March 8th, 2006, 5:18 PM	#5 (permalink)
Kayla tealeaf Surpass Staff Joined in May 2003 Lives in Orlando 24,047 posts Gave thanks: 908 Thanked 771 times	SH72 had an account hit that had a PHP Fan Base installed. We had to disable the directory and inform the client. The exploit was using about 47% server memory alone. This is why the server had problems today, due to this. We again urge you, if you have PHP Fan Base installed or any programs listed below, please check them and make the very needful changes. If you use any of the following scripts: FA-PHPHosting PHPClique PHPCalendar PHPCurrently PHPFanBase PHPQuotes Please disable them immediately or use the fix specified below. There are serious exploits going around the net right now and have been for the past few months. All of these scripts are made by http://codegrrl.com/ and have a ridiculously easy hole in them: " include($logout_page); " This allows an attacker to include whatever code they wish into the php file and run the commands. To avoid getting your site defaced, we recommend you either remove the protection.php file asap, or edit it and remove that line above. __________________ Follow Surpass on Twitter, Facebook and FriendFeed Check out interesting finds on the Surpass Blog

August 29th, 2006, 5:09 PM	#6 (permalink)
Emmanuel CTO, Surpass Hosting Super #1 Joined in Apr 2003 Lives in Florida 1,798 posts Gave thanks: 9 Thanked 125 times	sh72 has been going down 2-3 times a day for short periods. We are working to try and isolate the issue. It is not very obvious yet. For now we will add more ram which will give us more ammo to battle it. I apologize for the issues, rest assured we are working on it. __________________ Emmanuel :: Surpass Hosting Network Admin http://www.SurpassHosting.com

September 4th, 2006, 9:07 PM	#7 (permalink)
Emmanuel CTO, Surpass Hosting Super #1 Joined in Apr 2003 Lives in Florida 1,798 posts Gave thanks: 9 Thanked 125 times	Due to the recent constant issues with sh72 we are reinstalling it into new hardrives and hardware to isolate the issue being the server. There will be downtime for about 8 hours to complete this overnight. We appreciate your patience during these issues to really solve this once and for all. __________________ Emmanuel :: Surpass Hosting Network Admin http://www.SurpassHosting.com

June 17th, 2008, 2:06 PM	#8 (permalink)
Andy Surpass Staff Comfy Contributor Joined in Aug 2007 Lives in Miami 159 posts Gave thanks: 0 Thanked 4 times	Thursday night, June 19th we will be enabling PHP SuExec and upgrading PHP and MySQL to version 5 on sh72.surpasshosting.com. There will be some minimum downtime past 12am EST.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread: