[Answered] Tommy Server Down??

Spaceium · August 7, 2018

I suspect that the attack is coming from this address, please use caution, and do not click on it as it is unsecured. lilo.merchantsuniveral.com or http://he.net/%22 or https://stress.wtf/

and a possible IP, 89.238.139.52

ziad87 · August 7, 2018

http://he.net is the datacenter provider they use.

As for http://stress.wtf, it is possible but I'm not sure.

Edit: Also, was it null routed or is it still live?

cpsrvd seems to be working again, but maybe you could restart apache from WHM?

Edited August 7, 2018 by ziad87

wolstech · August 7, 2018

It's null routed right now. Also, if you see the block on the monitor where Ricky was being slow, that was due to network congestion on our switch (Ricky wasn't targeted, Tommy was).

Spaceium · August 7, 2018

Is Tommy currently shutdown?

abhi16 · August 8, 2018

Is the server down again????? They may be the one who wants to see free hosting down to increase their publicity for premium hosting..

The site is showing forbidden now....

Tommy site is displaying this:

ziad87 · August 8, 2018

Huh. The /cgi-sys/defaultwebpage.cgi isnt automatically redirected but instead to Rax Software.

Edit: What happened to your load gifs? It says [down] but its clearly up.

Edit 2: Also, the ssl certificate is invalid, and its apparently for rax2.heliohost.org

https://rax2.heliohost.org

The same cert is on https://tommy.heliohost.org/

Edited August 8, 2018 by ziad87

wolstech · August 8, 2018

Rax software / rax2 is my account. Not harmful, it just looks strange with my IP hosting the main server domain. The forbidden errors are related too (accounts that were pointed to my ip for offloading may show this since they're not allowed to be hosted there.)

Krydos moved a bunch of things to my dedicated ip to mitigate the ddos and keep services like cpanel available during the attack. The side effect of that is that certain pages now have no idea what to show and are showing one of my websites instead because it's supposed to be a dedicated ip. That should go away when Krydos finishes whatever he's doing.

man95 · August 8, 2018

Yes, I have same problem. I just want to download some video from YouTube from my website (http://muhamm10.heliohost.org/yt.py), but itu give me error 403, so I try to log on, but error in cPanel

Failed to save cache file “/home1/muhamm10/.cpanel/nvdata.cache” because of an error: (XID 5yv65v) The system failed to create the file “/home1/muhamm10/.cpanel/nvdata.cache.tmp.58699420” with permissions “0640” (as EUID: 3415, EGID: 3415) because of the following error: Input/output error at /usr/local/cpanel/Cpanel/NVData.pm line 119.

at /usr/local/cpanel/Cpanel/NVData.pm line 119.

Cpanel::NVData::__ANON__(Cpanel::Exception::IO::FileCreateError=HASH(0x4a82da8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/Try/Tiny.pm line 122

Try::Tiny::try(CODE(0x297ee70), Try::Tiny::Catch=REF(0x4932138)) called at /usr/local/cpanel/Cpanel/NVData.pm line 121

Cpanel::NVData::_savecache() called at /usr/local/cpanel/Cpanel/NVData.pm line 233

Cpanel::NVData::_loadcache(1) called at /usr/local/cpanel/Cpanel/NVData.pm line 257

Cpanel::NVData::_get("xmaingroupsorder") called at /usr/local/cpanel/Cpanel/API/NVData.pm line 18

Cpanel::API::NVData::get(Cpanel::Args=HASH(0x4a8a618), Cpanel::Result=HASH(0x4aaef80)) called at /usr/local/cpanel/Cpanel/API.pm line 287

Cpanel::API::__ANON__() called at /usr/local/cpanel/Cpanel/API.pm line 359

eval {...} called at /usr/local/cpanel/Cpanel/API.pm line 359

Cpanel::API::_eval_guard(Cpanel::Result=HASH(0x4aaef80), CODE(0x4a8a3f0)) called at /usr/local/cpanel/Cpanel/API.pm line 287

Cpanel::API::_run_module_function(Cpanel::Args=HASH(0x4a8a618), Cpanel::Result=HASH(0x4aaef80), "NVData", "get") called at /usr/local/cpanel/Cpanel/API.pm line 142

Cpanel::API::execute("NVData", "get", HASH(0x4a8c278)) called at /usr/local/cpanel/Cpanel/Template/Plugin/CPDefault.pm line 60

Cpanel::Template::Plugin::CPDefault::_execute_or_die("NVData", "get", HASH(0x4a8c278)) called at /usr/local/cpanel/base/frontend/paper_lantern/_assets/get_application_from_available_applications_macro.html.tt line 2

eval {...} called at /usr/local/cpanel/base/frontend/paper_lantern/_assets/get_application_from_available_applications_macro.html.tt line 2

eval {...} called at /usr/local/cpanel/base/frontend/paper_lantern/_assets/get_application_from_available_applications_macro.html.tt line 6

Template::Provider::__ANON__(Template::Context=HASH(0x48393b8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Document.pm line 163

eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Document.pm line 161

Template::Document::process(Template::Document=HASH(0x4a89c58), Template::Context=HASH(0x48393b8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Context.pm line 351

eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Context.pm line 321

Template::Context::process(Template::Context=HASH(0x48393b8), "_assets/get_application_from_available_applications_macro.htm"...) called at /usr/local/cpanel/base/frontend/paper_lantern/home/index.tt line 21

eval {...} called at /usr/local/cpanel/base/frontend/paper_lantern/home/index.tt line 7

Template::Document::__ANON__(Template::Context=HASH(0x48393b8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Document.pm line 163

eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Document.pm line 161

Template::Document::process(Template::Document=HASH(0x4936460), Template::Context=HASH(0x48393b8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Context.pm line 351

eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Context.pm line 321

Template::Context::process(Template::Context=HASH(0x48393b8), "home/index.tt", undef, "localize me!") called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Context.pm line 409

Template::Context::include(Template::Context=HASH(0x48393b8), "home/index.tt") called at /usr/local/cpanel/base/frontend/paper_lantern/index.auto.tmpl line 364

eval {...} called at /usr/local/cpanel/base/frontend/paper_lantern/index.auto.tmpl line 7

Template::Document::__ANON__(Template::Context=HASH(0x48393b8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Document.pm line 163

eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Document.pm line 161

Template::Document::process(Template::Document=HASH(0x4a7c1b8), Template::Context=HASH(0x48393b8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Context.pm line 351

eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Context.pm line 321

Template::Context::process(Template::Context=HASH(0x48393b8), Template::Document=HASH(0x4a7c1b8)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Service.pm line 94

eval {...} called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template/Service.pm line 91

Template::Service::process(Template::Service=HASH(0x48390a0), "/usr/local/cpanel/base/frontend/paper_lantern/index.auto.tmpl", HASH(0x3d25930)) called at /usr/local/cpanel/3rdparty/perl/524/lib64/perl5/cpanel_lib/x86_64-linux-64int/Template.pm line 66

Template::process(Template=HASH(0x4871bc8), "/usr/local/cpanel/base/frontend/paper_lantern/index.auto.tmpl", HASH(0x3d25930), SCALAR(0x28e4208)) called at /usr/local/cpanel/Cpanel/Template.pm line 457

Cpanel::Template::process_template("cpanel", HASH(0x3d25930), HASH(0x2866dc0)) called at cpanel.pl line 1248

cpanel::cpanel::cptt_exectag("/usr/local/cpanel/base/frontend/paper_lantern/index.auto.tmpl", 1) called at cpanel.pl line 5226

cpanel::cpanel::run_standard_mode() called at cpanel.pl line 874

cpanel::cpanel::script("cpanel::cpanel", "./frontend/paper_lantern/index.html") called at cpanel.pl line 304

Failed to mkdir(/home1/muhamm10/.cpanel): Input/output error at /usr/local/cpanel/Cpanel/CachedCommand/Utils.pm line 56.

at /usr/local/cpanel/Cpanel/CachedCommand/Utils.pm line 56.

Cpanel::CachedCommand::Utils::_get_datastore_dir() called at /usr/local/cpanel/Cpanel/CachedCommand/Utils.pm line 32

Cpanel::CachedCommand::Utils::_get_datastore_filename("AVAILABLE_APPLICATIONS_CACHE_en_paper_lantern") called at /usr/local/cpanel/Cpanel/DynamicUI/App.pm line 105

Cpanel::DynamicUI::App::get_available_applications("nvarglist", 1, "arglist", "") called at /usr/local/cpanel/Cpanel/API/Branding.pm line 180

Cpanel::API::Branding::get_available_applications(Cpanel::Args=HASH(0x4a82850), Cpanel::Result=HASH(0x4a8c098)) called at /usr/local/cpanel/Cpanel/API.pm line 287

Cpanel::API::__ANON__() called at /usr/local/cpanel/Cpanel/API.pm line 359

eval {...} called at /usr/local/cpanel/Cpanel/API.pm line 359

Cpanel::API::_eval_guard(Cpanel::Result=HASH(0x4a8c098), CODE(0x4a8a390)) called at /usr/local/cpanel/Cpanel/API.pm line 287

Cpanel::API::_run_module_function(Cpanel::Args=HASH(0x4a82850), Cpanel::Result=HASH(0x4a8c098), "Branding", "get_available_applications") called at /usr/local/cpanel/Cpanel/API.pm line 142

Cpanel::API::execute("Branding", "get_available_applications", HASH(0x4a8c2a8)) called at /usr/local/cpanel/Cpanel/Template/Plugin/CPDefault.pm line 60

Cpanel::Template::Plugin::CPDefault::_execute_or_die("Branding", "get_available_applications", HASH(0x4a8c2a8)) called at /usr/local/cpanel/base/frontend/paper_lantern/_assets/get_application_from_available_applications_macro.html.tt line 2