Ultra (72.29.74.3) : Shared

**Kayla** · August 6th, 2004, 3:57 AM

This thread is a timeline for all events occuring to the server Ultra.

Each time this server has an issue it will be posted here.

If you cannot access your site, and there is no announcement here, the reason for it is not caused by this server or our network. You must email support

surpasshosting.com to find the root of your problem.

Thank you.

**Kayla** · January 29th, 2005, 2:47 AM

Today Ultra has had intermittent slowdowns, a site was found that was receiving too many http connections, so many that it was similar to a mini DDOS against the server with similar side effects. The site had to be suspended for now, pending a move to a semi-dedicated or dedicated server.

**Kayla** · February 17th, 2005, 4:52 PM

If you noticed any issue with Ultra today, a user with shell access was deliberately running scripts trying to get in other servers off network. Their account has been suspended permanently.

**Kayla** · March 14th, 2005, 8:27 AM

Please read the information below carefully if you are located on this server.

The old IP is 66.195.124.226

The new IP is 72.29.74.3

VERY IMPORTANT STEP:

If you do not get to complete this step, your site will not go down, but we would appreciate it if you make the change (as explained here in Extra Notes: http://www.surmunity.com/showthread.php?t=12285).

Please update your domain's DNS to the following:

ns623.dizinc.com
ns624.dizinc.com

Any domain you host on this server, whether it is parked or add-on, please change the DNS of that domain to the DNS above.

If you registered the domain with us you can make this change at
http://www.surpassdomains.com

Otherwise, you need to make this change at the site where you registered the
domain.

If you go to your site and you see a cPanel page that reads "No website configured at this address" that means your local computer
is trying to load your site on the old IP. Simply restart your PC, modem or router so it can release it from cache.

P.S. If you are using an SSL or have a static IP email e

surpasshosting.com with your domain name so we can assign you a new static IP and make sure your SSL is working correctly.

**Kayla** · March 19th, 2005, 10:38 AM

If any domain (on the server, parked or add-on) points to these DNS:

ns100.dizinc.com
ns101.dizinc.com

You *MUST* change them at this time.

These are the new DNS:
ns623.dizinc.com
ns624.dizinc.com

Refer to announcement:
Important : Read if you use ns100.dizinc.com and ns101.dizinc.com as DNS

**Kayla** · June 28th, 2005, 1:23 AM

ns100.dizinc.com
ns101.dizinc.com

Those DNS are officially being removed from this server tonight.

You must make the necessary changes that were requested in March if you have not already done so.

**Emmanuel** · January 21st, 2006, 8:28 PM

ultra will have a 2 hour downtime window between
6am and 8am Sunday Jan 22 2006 EST. We will be doing
some movement of racks within the datacenter. We
picked this time which has shown to be the least
traffic on the server. We apologize for any inconvenience.

**Kayla** · March 3rd, 2006, 9:27 PM

This server will have phpsuexec enabled on April 30.

More information is available here:
[Big Changes] PHPsuexec to be implemented on new servers

If you have any questions regarding this change, please post in the Site Maintenance board:
http://www.surmunity.com/site-maintenance/

We will keep track of the most common issues and problems that come up in order to help other users in the future, so your input is appreciated.

**Kayla** · March 8th, 2006, 5:47 PM

If you use any of the following scripts:

FA-PHPHosting
PHPClique
PHPCalendar
PHPCurrently
PHPFanBase
PHPQuotes

Please disable them immediately or use the fix specified below. There are serious exploits going around the net right now and have been for the past few months. All of these scripts are made by http://codegrrl.com/ and have a ridiculously easy hole in them:
"

include($logout_page);
"
This allows an attacker to include whatever code they wish into the php file and run the commands.
To avoid getting your site defaced, we recommend you either remove the protection.php file asap, or edit it and remove that line above.

August 6th, 2004, 3:57 AM	#1 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	Ultra (72.29.74.3) : Shared This thread is a timeline for all events occuring to the server Ultra. Each time this server has an issue it will be posted here. If you cannot access your site, and there is no announcement here, the reason for it is not caused by this server or our network. You must email supportsurpasshosting.com to find the root of your problem. Thank you.

January 29th, 2005, 2:47 AM	#2 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	Today Ultra has had intermittent slowdowns, a site was found that was receiving too many http connections, so many that it was similar to a mini DDOS against the server with similar side effects. The site had to be suspended for now, pending a move to a semi-dedicated or dedicated server. __________________ Follow Surpass on Twitter and Facebook Check out interesting finds on the Surpass Blog .... it's coming.

February 17th, 2005, 4:52 PM	#3 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	If you noticed any issue with Ultra today, a user with shell access was deliberately running scripts trying to get in other servers off network. Their account has been suspended permanently. __________________ Follow Surpass on Twitter and Facebook Check out interesting finds on the Surpass Blog .... it's coming.

March 14th, 2005, 8:27 AM	#4 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	Please read the information below carefully if you are located on this server. The old IP is 66.195.124.226 The new IP is 72.29.74.3 VERY IMPORTANT STEP: If you do not get to complete this step, your site will not go down, but we would appreciate it if you make the change (as explained here in Extra Notes: http://www.surmunity.com/showthread.php?t=12285). Please update your domain's DNS to the following: ns623.dizinc.com ns624.dizinc.com Any domain you host on this server, whether it is parked or add-on, please change the DNS of that domain to the DNS above. If you registered the domain with us you can make this change at http://www.surpassdomains.com Otherwise, you need to make this change at the site where you registered the domain. If you go to your site and you see a cPanel page that reads "No website configured at this address" that means your local computer is trying to load your site on the old IP. Simply restart your PC, modem or router so it can release it from cache. P.S. If you are using an SSL or have a static IP email esurpasshosting.com with your domain name so we can assign you a new static IP and make sure your SSL is working correctly.

June 28th, 2005, 1:23 AM	#6 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	ns100.dizinc.com ns101.dizinc.com Those DNS are officially being removed from this server tonight. You must make the necessary changes that were requested in March if you have not already done so. __________________ Follow Surpass on Twitter and Facebook Check out interesting finds on the Surpass Blog .... it's coming.

March 19th, 2005, 10:38 AM	#5 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	If any domain (on the server, parked or add-on) points to these DNS: ns100.dizinc.com ns101.dizinc.com You MUST change them at this time. These are the new DNS: ns623.dizinc.com ns624.dizinc.com Refer to announcement: Important : Read if you use ns100.dizinc.com and ns101.dizinc.com as DNS

January 21st, 2006, 8:28 PM	#7 (permalink)
Emmanuel CTO, Surpass Hosting Super #1 Joined in Apr 2003 Lives in Florida 1,811 posts Gave thanks: 10 Thanked 131 times	ultra will have a 2 hour downtime window between 6am and 8am Sunday Jan 22 2006 EST. We will be doing some movement of racks within the datacenter. We picked this time which has shown to be the least traffic on the server. We apologize for any inconvenience. __________________ Emmanuel :: Surpass Hosting Network Admin http://www.SurpassHosting.com

March 3rd, 2006, 9:27 PM	#8 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	This server will have phpsuexec enabled on April 30. More information is available here: [Big Changes] PHPsuexec to be implemented on new servers If you have any questions regarding this change, please post in the Site Maintenance board: http://www.surmunity.com/site-maintenance/ We will keep track of the most common issues and problems that come up in order to help other users in the future, so your input is appreciated. __________________ Follow Surpass on Twitter and Facebook Check out interesting finds on the Surpass Blog .... it's coming.

March 8th, 2006, 5:47 PM	#9 (permalink)
Kayla Searcher Surpass Staff Joined in May 2003 Lives in Orlando 24,509 posts Gave thanks: 936 Thanked 787 times	If you use any of the following scripts: FA-PHPHosting PHPClique PHPCalendar PHPCurrently PHPFanBase PHPQuotes Please disable them immediately or use the fix specified below. There are serious exploits going around the net right now and have been for the past few months. All of these scripts are made by http://codegrrl.com/ and have a ridiculously easy hole in them: " include($logout_page); " This allows an attacker to include whatever code they wish into the php file and run the commands. To avoid getting your site defaced, we recommend you either remove the protection.php file asap, or edit it and remove that line above. __________________ Follow Surpass on Twitter and Facebook Check out interesting finds on the Surpass Blog .... it's coming.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Rate This Thread
Rate This Thread: