Worms, Routers Raise Downtime Concerns

r

Worms, Routers Raise Downtime Concerns
r

r

r

Karen Snider, theWHIR.com
r

r

r

April 1, 2004 — (WEB HOST INDUSTRY
r

REVIEW) — Worm attacks, router troubles and other difficulties tore a
r

path of downtime through the hosting community in the last week,
r

flooding hosting forums with hosts, resellers and customers scrambling
r

for information on how to get their sites back up.
r

r

Texas-based C I Host (cihost.com) drew a lot of online attention when it was hit by the Witty worm. Not sure what was happening, customers posted on forums like WebHosting Talk (webhostingtalk.com) and SitePoint (sitepoint.com) forums asking if others were being affected. Indeed, they were. Some reported outages of 36 hours, while others said they were down for almost a week.
r

r

C I Host CEO Chris Faulkner addressed the
r

issue by posting a note on WebHosting Talk, explaining that C I Host
r

was attacked March 20, but that all of its customers’ data had been
r

saved. Faulkner said his goal was to have all shared hosting Windows
r

clients – with the exception of seven servers that were fully destroyed
r

- up and running my March 25.
r

r

“The last ‘magic 7,’” he wrote, “will be
r

back online before Sunday March 28, 2004 at the very latest. Those
r

servers were so badly damaged, all new hardware had to be pulled from
r

inventory and built completely from scratch with Windows OS reloaded,
r

IMail and every piece of software individually installed by hand and
r

then pulling the 120-200GB of client data from tape backup for each
r

server.”
r

r

The attack kept C I Host staff working
r

around the clock. “Contingency plans were ready and we switched to our
r

recovery mode,” Faulkner told theWHIR. “We have heard that other
r

hosting companies have not fared as well, so we are extremely
r

encouraged that we made out so well. All of this should be helpful
r

information for future attacks… and we all know that, unfortunately,
r

these attacks are one facet of the Internet.”
r

r

C I Host has since upgraded security and server back-up safeguards.
r

r

Customers of other hosts, including as
r

EV1 Servers, Server Matrix and CrystalTech, also hit the forums last
r

week, desperate to find out why their sites were down.
r

r

“I am not sure if anyone else knows it
r

yet, but there has been a major router problem in the East Coast and
r

Europe. It (has) been going on for the last 10 hours or so,” one user wrote on WebHosting Talk.
r

r

Forum users tried to sort out who was being affected and eventually determined that the source of the problem was AboveNet.
r

r

AboveNet spokesman Joe Ramsey confirmed
r

an outage on March 25, but reports that it only lasted five or ten
r

minutes. The outage, which happened while AboveNet was performing “a
r

routine equipment upgrade,” compromised connectivity between the US and
r

Europe. AboveNet has since suspended equipment upgrades and is
r

reviewing its testing procedures to ensure a similar outage does not
r

happen again, an AboveNet spokesperson said.
r

r

While those customers, at least, were able to find out what the source of their woes were, Dot5 (dot5hosting) customers are still wondering why
r

their sites have not been functioning properly. “I’ve noticed in the
r

past month or so that the server (NS41) my site is hosted on has been
r

down occasionally for a few minutes to a couple of hours,” a
r

webhostingtalk thread starter wrote.
r

r

Dot5 customers have been complaining on
r

the forums for weeks about their services. Many said that Dot5
r

responded to their concerns by saying it is in the process of upgrading
r

its servers. Confusion lingers as Dot5 customers speculate on whether
r

Dot5 has been purchased by iPowerWeb (ipowerweb.com),
r

which certainly appears to have some affiliation with Dot5. The
r

dot5hosting.com site includes photographs and information showing that
r

Dot5 is using iPowerWeb’s data center.
r

r

Dot5′s customer service phone numbers do
r

not appear to be working, and iPowerWeb has refused to confirm whether
r

it has purchased Dot5.
r

r

Problems with iPowerWeb came up in a more humorous light in another thread.
r

r

“I sent in a message to tech support
r

about my site being down for over 2 hours on the 15th of March,” the
r

thread starter wrote. “This was the fourth time my site had been down
r

in 10 days for an extended period of time… Nothing was ever done and
r

I finally cancelled the account and switched hosts. So remember… it’s
r

now been hosted somewhere else for almost 2 weeks.” The user claims
r

that iPowerWeb responded with a message indicating that his site was
r

working and that there is no downtime.
r

r

“Of course it’s working fine,” the user wrote. “You aren’t hosting it!”
r

r

r