Re: [bitfolk] IMPORTANT: You need to renumber the IP address…

Top Page

Reply to this message
Author: G. Miliotis
Date:  
Subject: Re: [bitfolk] IMPORTANT: You need to renumber the IP address(es) of your BitFolk VPS
m
Reply-To: users@???
List-Id: Users of BitFolk hosting <users.lists.bitfolk.com>
List-Unsubscribe: <https://lists.bitfolk.com/mailman/options/users>,
    <mailto:users-request@lists.bitfolk.com?subject=unsubscribe>
List-Archive: <http://lists.bitfolk.com/lurker/list/users.html>
List-Post: <mailto:users@lists.bitfolk.com>
List-Help: <mailto:users-request@lists.bitfolk.com?subject=help>
List-Subscribe: <https://lists.bitfolk.com/mailman/listinfo/users>,
    <mailto:users-request@lists.bitfolk.com?subject=subscribe>
X-List-Received-Date: Sun, 29 Apr 2012 07:59:49 -0000



--===============1729081933==
Content-Type: multipart/signed; micalg=pgp-ripemd160;
    protocol="application/pgp-signature"; boundary="LpQ9ahxlCli8rRTG"
Content-Disposition: inline



--LpQ9ahxlCli8rRTG
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello,

ntp0.sfo.bitfolk.com [209.237.247.192] was removed from service
quite a while ago and yesterday was finally decommissioned. If you
you still have it in your NTP configuration (usually /etc/ntp.conf)
then you should remove it. It won't cause any real harm to leave it
there, it just won't do anything any more.

Recommended NTP servers can be found here:

    http://bitfolk.com/customer_information.html#toc_3_NTP___London__UK


which is probably what you already have.

Andy

--=20
http://bitfolk.com/ -- No-nonsense VPS hosting

--LpQ9ahxlCli8rRTG
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEAREDAAYFAk+c9PEACgkQIJm2TL8VSQtU3wCeNaPOGU56NE0BBUFcrXMe9Kuy
hGwAnj++ikPh7JNDJX5dvILpvJXrbjkC
=8is6
-----END PGP SIGNATURE-----

--LpQ9ahxlCli8rRTG--


--===============1729081933==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
announce mailing list
announce@???
https://lists.bitfolk.com/mailman/listinfo/announce

--===============1729081933==--



From announce-bounces+users=lists.bitfolk.com@??? Wed May 09 14:22:42 2012
Received: from localhost ([127.0.0.1] helo=bitfolk.com)
    by mail.bitfolk.com with esmtp (Exim 4.72) (envelope-from
    <announce-bounces+users=lists.bitfolk.com@???>)
    id 1SS7ms-0006ex-8C
    for users@???; Wed, 09 May 2012 14:22:42 +0000
Received: from andy by mail.bitfolk.com with local (Exim 4.72)
    (envelope-from <andy@???>) id 1SS7mo-0006dp-Ic
    for announce@???; Wed, 09 May 2012 14:22:38 +0000
Date: Wed, 9 May 2012 14:22:38 +0000
From: Andy Smith <andy@???>
To: announce@???
Message-ID: <20120509142238.GR12360@???>
MIME-Version: 1.0
OpenPGP: id=BF15490B; url=http://strugglers.net/~andy/pubkey.asc
X-URL: http://strugglers.net/wiki/User:Andy
User-Agent: Mutt/1.5.20 (2009-06-14)
X-Virus-Scanner: Scanned by ClamAV on mail.bitfolk.com at Wed,
    09 May 2012 14:22:38 +0000
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
    spamd1.lon.bitfolk.com
X-Spam-Level: 
X-Spam-ASN: 
X-Spam-Status: No, score=-0.0 required=5.0 tests=NO_RELAYS shortcircuit=no
    autolearn=disabled version=3.3.1
X-Spam-Report: * -0.0 NO_RELAYS Informational: message was not relayed via SMTP
X-BeenThere: announce@???
X-Mailman-Version: 2.1.13
Precedence: list
Content-Type: multipart/mixed; boundary="===============0495376293=="
Sender: announce-bounces+users=lists.bitfolk.com@???
Errors-To: announce-bounces+users=lists.bitfolk.com@???
X-Virus-Scanner: Scanned by ClamAV on mail.bitfolk.com at Wed,
    09 May 2012 14:22:42 +0000
X-SA-Exim-Connect-IP: 127.0.0.1
X-SA-Exim-Mail-From: announce-bounces+users=lists.bitfolk.com@???
X-SA-Exim-Scanned: No (on mail.bitfolk.com); SAEximRunCond expanded to false
Subject: [bitfolk] PHP-CGI exploit probes seen - please make sure your VPS
    is secured    against this
X-BeenThere: users@???
Reply-To: users@???
List-Id: Users of BitFolk hosting <users.lists.bitfolk.com>
List-Unsubscribe: <https://lists.bitfolk.com/mailman/options/users>,
    <mailto:users-request@lists.bitfolk.com?subject=unsubscribe>
List-Archive: <http://lists.bitfolk.com/lurker/list/users.html>
List-Post: <mailto:users@lists.bitfolk.com>
List-Help: <mailto:users-request@lists.bitfolk.com?subject=help>
List-Subscribe: <https://lists.bitfolk.com/mailman/listinfo/users>,
    <mailto:users-request@lists.bitfolk.com?subject=subscribe>
X-List-Received-Date: Wed, 09 May 2012 14:22:42 -0000



--===============0495376293==
Content-Type: multipart/signed; micalg=pgp-ripemd160;
    protocol="application/pgp-signature"; boundary="X1xGqyAVbSpAWs5A"
Content-Disposition: inline



--X1xGqyAVbSpAWs5A
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

As you may be aware a major security problem was recently found in PHP when
run in CGI mode. A customer has recently had their VPS compromised
and has discovered probes for this vulnerability as described here:

    http://blog.sucuri.net/2012/05/php-cgi-vulnerability-exploited-in-the-w=
ild.html


So, if you are running PHP in CGI mode you absolutely must secure it
against this.

Cheers,
Andy

--=20
http://bitfolk.com/ -- No-nonsense VPS hosting

--X1xGqyAVbSpAWs5A
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEAREDAAYFAk+qfa4ACgkQIJm2TL8VSQuJhQCcDEmoMJkMPV7agl7QQZA9D8O1
SzgAoLYM0CtNXYLTURWslRykWONBlgxv
=SrFn
-----END PGP SIGNATURE-----

--X1xGqyAVbSpAWs5A--


--===============0495376293==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
announce mailing list
announce@???
https://lists.bitfolk.com/mailman/listinfo/announce

--===============0495376293==--



From murray.crane@??? Wed May 09 14:56:50 2012
Received: from mail-ob0-f176.google.com ([209.85.214.176])
    by mail.bitfolk.com with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:16)
    (Exim 4.72) (envelope-from <murray.crane@???>)
    id 1SS8Jt-0008Uh-Tx
    for users@