Welcome to the new home of the Cumulus Support forum.

Latest Cumulus release v1.9.4 (build 1099) - Nov 28 2014
Latest Cumulus MX release - v3.0.0 build 3044 7 December 2018. See the Wiki for download

Site going down.

Talk about anything that doesn't fit elsewhere - PLEASE don't put Cumulus queries in here!
User avatar
steve
Cumulus Author
Posts: 26714
Joined: Mon 02 Jun 2008 6:49 pm
Weather Station: None
Operating System: None
Location: Vienne, France
Contact:

Re: Site going down.

Post by steve » Tue 09 Oct 2018 11:15 am

Just a quick post as I am trying to fix things. The server was blocked and it appears Hetzner were right all along, once they told me what the likely malware was, I was able to find it and remove it. Now looking at stopping it recurring. No idea how it got in but Wordpress is a likely candidate. As far as I know no Cumulus users are using Wordpress, so the fault is either with me, Mrs L, or our friends. Apologies.
Steve

User avatar
dazza1223
Posts: 428
Joined: Sun 25 Jan 2015 8:41 pm
Weather Station: Davis Vantage Vue
Operating System: raspberry pi 3 +
Location: worthing
Contact:

Re: Site going down.

Post by dazza1223 » Tue 09 Oct 2018 11:21 am

great work steve thank u and i was sooo pis off when i saw it went down
have fun and keep learning

dazza :D

User avatar
Mapantz
Posts: 525
Joined: Sat 17 Dec 2011 11:55 am
Weather Station: Davis Vantage Pro2
Operating System: Windows 10 x64 - A beast.
Location: Wareham, Dorset - UK
Contact:

Re: Site going down.

Post by Mapantz » Tue 09 Oct 2018 11:23 am

Ah the dreaded Wordpress!

I have seen thousands of bots trying to access Wordpress links on my site that simply don't exist.

Glad you've managed to resolve it though. :)
Image
Image

User avatar
steve
Cumulus Author
Posts: 26714
Joined: Mon 02 Jun 2008 6:49 pm
Weather Station: None
Operating System: None
Location: Vienne, France
Contact:

Re: Site going down.

Post by steve » Tue 09 Oct 2018 11:24 am

Hopefully I have prevented the malware from being activated now and have asked Hetzner to confirm that the server can stay up. They were actually very helpful once they had blocked the server.
Steve

dc1500
Posts: 232
Joined: Thu 04 Sep 2008 8:35 am
Weather Station: Watson W-8681 (Fine Offset type)
Operating System: Windows 10
Location: Laindon, S. Essex
Contact:

Re: Site going down.

Post by dc1500 » Tue 09 Oct 2018 11:35 am

I appeared to be down briefly this morning. I tried three sites on it and none functioned but back up now as at 12.30pm BST.
Image

RayProudfoot
Posts: 2632
Joined: Wed 06 May 2009 6:29 pm
Weather Station: Davis VP2 with Daytime FARS
Operating System: Windows XP SP3
Location: Cheadle Hulme, Cheshire, England
Contact:

Re: Site going down.

Post by RayProudfoot » Tue 09 Oct 2018 11:58 am

Very good news Steve and absolutely no apology required. Well done between you and Hetzner for finding the culprit. :clap:
Cheers,
Ray, Cheshire.

Image

archae86
Posts: 77
Joined: Sat 21 May 2011 4:46 pm
Weather Station: Davis Wireless Vantage Pro2
Operating System: Windows 7
Location: Albuquerque, NM, USA

Maybe it was pulled for an hour?

Post by archae86 » Tue 09 Oct 2018 1:18 pm

This morning my Cumulus tray icon was blinking, and the error light got me to check. The log showed a continuous set of FTP timeout errors from 3:10 a.m. through 4:46 a.m., but none in the 2.5 hours since.

Somehow I failed to spot the last page of posts in this thread before posting this one--I've edited out my speculations first placed in this post.

I'll add a new query to my fellow users. I've personally used FireFTP as my file transfer method for my Cumulus site maintenance for years (and used to use it for other purposes). That appears to have died. Do you have any suggestions forWindows environments of preferred tools?

-direct command line FTP?
-FileZilla?

Something else?

I had intended to make a backup copy of stuff on my site provided by Steve before the plug was pulled, and got behind the power curve when FireFTP failed to present itself to me.
My cumulus generated weather site is at http://pastoll.info/weather

User avatar
steve
Cumulus Author
Posts: 26714
Joined: Mon 02 Jun 2008 6:49 pm
Weather Station: None
Operating System: None
Location: Vienne, France
Contact:

Re: Site going down.

Post by steve » Tue 09 Oct 2018 2:59 pm

The bad news is that I haven't been able to find the source of the infection and it keeps reinstalling itself.

I have now blocked outgoing SMTP. This means that amongst other things, steve@sandaysoft.com will not work, and neither will forum registrations.

I have spent all day on this and now I am really really really pissed off.
Steve

RayProudfoot
Posts: 2632
Joined: Wed 06 May 2009 6:29 pm
Weather Station: Davis VP2 with Daytime FARS
Operating System: Windows XP SP3
Location: Cheadle Hulme, Cheshire, England
Contact:

Re: Site going down.

Post by RayProudfoot » Tue 09 Oct 2018 3:07 pm

These people who have nothing better to do than cause mayhem are a bloody disgrace. I feel for you Steve right in the middle of your holiday.

You may just have that Eureka moment and crack it. I hope the company are sympathetic to your plight and maybe offer some assistance.
Cheers,
Ray, Cheshire.

Image

User avatar
steve
Cumulus Author
Posts: 26714
Joined: Mon 02 Jun 2008 6:49 pm
Weather Station: None
Operating System: None
Location: Vienne, France
Contact:

Re: Site going down.

Post by steve » Tue 09 Oct 2018 4:49 pm

I think I may have found it. No recurrence for well over an hour.
Steve

RayProudfoot
Posts: 2632
Joined: Wed 06 May 2009 6:29 pm
Weather Station: Davis VP2 with Daytime FARS
Operating System: Windows XP SP3
Location: Cheadle Hulme, Cheshire, England
Contact:

Re: Site going down.

Post by RayProudfoot » Tue 09 Oct 2018 5:07 pm

steve wrote:I think I may have found it. No recurrence for well over an hour.
Good lad! I had every faith in you. :clap:
Cheers,
Ray, Cheshire.

Image

User avatar
steve
Cumulus Author
Posts: 26714
Joined: Mon 02 Jun 2008 6:49 pm
Weather Station: None
Operating System: None
Location: Vienne, France
Contact:

Re: Site going down.

Post by steve » Tue 09 Oct 2018 5:12 pm

If this hasn't sorted it, I'm calling in the big guns - Ken and Mark have both kindly offered to help.
Steve

M1DUL
Posts: 260
Joined: Wed 31 Dec 2008 1:56 pm
Weather Station: W-8681 Solar Weather Station
Operating System: Windows 10 Pro 64bit Build 10586
Location: Poole, Dorset UK
Contact:

Re: Site going down.

Post by M1DUL » Tue 09 Oct 2018 5:29 pm

I really do feel so sorry Steve for all the aggro you have suffered, especially while trying to enjoy your holiday.
Thank you so much for your wonderful work, how I wish I could help in some way.
There are sadly some evil people in this world.

dc1500
Posts: 232
Joined: Thu 04 Sep 2008 8:35 am
Weather Station: Watson W-8681 (Fine Offset type)
Operating System: Windows 10
Location: Laindon, S. Essex
Contact:

Re: Site going down.

Post by dc1500 » Tue 09 Oct 2018 5:49 pm

Just try and enjoy the rest of your holiday or Mrs L will be on your case ;) I will leave my query I have about something else till you get back !
Image

M1DUL
Posts: 260
Joined: Wed 31 Dec 2008 1:56 pm
Weather Station: W-8681 Solar Weather Station
Operating System: Windows 10 Pro 64bit Build 10586
Location: Poole, Dorset UK
Contact:

Re: Site going down.

Post by M1DUL » Tue 09 Oct 2018 6:12 pm

Well done Steve, fingers crossed, now enjoy the rest of your holiday.

Post Reply