Ahsaniqbalkmc 0 Report post Posted December 14, 2011 This is strange. I have been 2 years with Xisto and this never happened to me. My website is down and it appears that the entire server is not functioning. When I try to go to my website "http://www.mananatomy.com/;, I get the following error: ERROR The requested URL could not be retrieved While trying to retrieve the URL: http://www.mananatomy.com/ The following error was encountered: Connection to 208.87.243.146 Failed The system returned: (110) Connection timed out The remote host or network may be down. Please try the request again. Your cache administrator is webmaster. When I try to connect to the server through FTP, it says "Connection timed out, could not connect to server".And finally when I try to launch the cpanel, I get the following page: The connection has timed out The server at mananatomy.com is taking too long to respond. The site could be temporarily unavailable or too busy. Try again in a few moments. If you are unable to load any pages, check your computer's network connection. If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web. I am not used to this stuff. I never happened to me before. And because it never happened before, I am worried that there might be something wrong with my website and not the entire server. I have posted a support ticket but I want public opinions of what has happened. Share this post Link to post Share on other sites
yordan 10 Report post Posted December 14, 2011 Your site works, I can open it from here, I see your Body Systems page.So, the problem is not at server side.Did you try it from another computer, in some quite different place, in order to see if it's a firewall or a blacklist blocking?Or maybe it's a quite temporary issue, which is now fixed? Please keep us informed. Share this post Link to post Share on other sites
Ahsaniqbalkmc 0 Report post Posted December 15, 2011 Oh! I am so sorry Xisto.I tried to go to the website through a proxy and it worked. The website is up. That is good news for me but the bad news is that I haven't been able to configure what the problem is. I tried different browser but I am getting the same error. This is really strange. Never happened before to me.Before this strange thing happened, I was editing some stuff in the cpanel. I deleted an unused subdomain. Changed the password, visited some stats, changed the primary email,. But none of these seem to be the cause of this issue. Then what is this? Please @yordan help me on this.My website was attacked today by someone who threw some phishy links on it. I received an email from FraudWatch saying that there were some phishy links on the website I manage. I visited the server, found the phishy links and then deleted them. When I was exploring the cpanel, I also discovered that there was an ftp acocunt that I didn't create so it had definitely something to do with the phishy links. I deleted that Ftp account.. But immediately after deleting nothing strange happened so there is no reason to think that deleting the phisy links or deleting the phisy account caused this problem.@yordan please help me on this. Share this post Link to post Share on other sites
yordan 10 Report post Posted December 15, 2011 So, the good point is that your site is up and running.Open a ticket at Xisto - Support. Probably during the attack, your IP has been banned in order to protect your accounts. So open a ticket explaining the problem (your site is up but you cannot reach it from your PC) and they will fix that.Also keep in mind that this problem often occurs if you mistype your passwords during ftp sessions.Please keep us informed.RegardsYordan Share this post Link to post Share on other sites
Ahsaniqbalkmc 0 Report post Posted December 15, 2011 I have opened a new support ticket and written to Xisto - Support about this matter. I hope that the issue will be resolved until tomorrow.Meanwhile I am accessing my website through a proxy and the procedure really su*ks. The speed is as slow as hell. Though I have been granted the access I needed to make sure that all my directories have "755" permission.The ticket I opened for phishing attack was answered by Xisto - Support today. They said that the most common cause of such injections is a loose permission of directories on server. They said that all directories should be 755 unless specifically required. I have found two directories in my website root which were 777 and I think there were the cause of the injection. I personally don't know how these 777 directories can be used to inject malicious stuff to server, but I hope the vulnerability has been fixed because this stuff drove me nuts. The only issue that now remains is that I cannot access my website. I hope this will aslo be fixed soon and I will be on my way to develop my website further. Share this post Link to post Share on other sites
yordan 10 Report post Posted December 15, 2011 Usually the submitted tickets are solved rather fast. Wait a reasonable (let's say tomorrow) and add a comment to your ticket, giving your current IP address. Share this post Link to post Share on other sites
Ahsaniqbalkmc 0 Report post Posted December 15, 2011 Oh I forgot to mention my IP address in the ticket I submitted. I am now going to add a comment to the ticket indicating my IP address.Thanks @yordan for reminding it to me. Share this post Link to post Share on other sites
Ahsaniqbalkmc 0 Report post Posted December 16, 2011 I have received reply from Xisto - Support member. He confirmed that my ip was added to the firewall and now they have removed the ip. So I am able to visit my website again. Share this post Link to post Share on other sites
yordan 10 Report post Posted December 16, 2011 Good news, problem is solved. Thanks Xisto team.Finally, the problem was a network administration problem (at server side). That's why I moved your topic here, where it's place most probably is.RegardsYordan Share this post Link to post Share on other sites
