Account Suspended?

[DFAlpha]

What a wonderful way to start the day...

I get this message from support...

Hi,

Your account "gamingexcellence.com" hosted on Poseidon Server is doing some bulk mailing which is putting a lot of strain on the server and crashing it. Please check the vendor for the security patches/upgrades to your installed scripts/applications. Your domain has also exceeded the allowed number of emails per hour. We had no choice but to temporarily suspend the account to stabilize the server. Please open a support ticket if you need further assistance.

...

The problem here is we don't have ANY mailing scripts on the server, so I have no idea what they are talking about.

As we're a pretty high traffic site, you can imagine why I'm a bit pissed off about it, they could have just deleted or locked whatever 'suspect' script it is, but as far as I know I have no clue why we got this message from them today.

Another great day in the making...
-S

[the_ancient]

What a wonderful way to start the day...

I get this message from support...

Hi,

Your account "gamingexcellence.com" hosted on Poseidon Server is doing some bulk mailing which is putting a lot of strain on the server and crashing it. Please check the vendor for the security patches/upgrades to your installed scripts/applications. Your domain has also exceeded the allowed number of emails per hour. We had no choice but to temporarily suspend the account to stabilize the server. Please open a support ticket if you need further assistance.

...

The problem here is we don't have ANY mailing scripts on the server, so I have no idea what they are talking about.

As we're a pretty high traffic site, you can imagine why I'm a bit pissed off about it, they could have just deleted or locked whatever 'suspect' script it is, but as far as I know I have no clue why we got this message from them today.

Another great day in the making...
-S

it is far far easy to hit the "suspend site" button WHM than it is to track down a run away php script....

It is YOUR job to make sure YOUR site is running properly, not jags.

Do you have any Mailing lists? User Email Forums? Auto Generated Mailings of any type( user signup's, subsciptions, etc)...

These Scripts could cause it, or a Hacker could have exploited one of them, causing it.

[DFAlpha]

No forums, no mailing lists, we don't do any mailing from the server whatsoever.

[DFAlpha]

In fact, right now there is no user forms on the system to my knowledge.

[the_ancient]

Do you think Jag is in Error?


Personally, I would more more concerned that someone somwhow gain access to my account and was somehow sending mails under my name, which could cause more problems than a simple suspended account.

[DFAlpha]

I don't know what to think - and yes that is a concern of mine. But I'd like to be given the opportunity to investigate, nobody knows the files under the account better then I do.

-S

[Vin DSL]

In fact, right now there is no user forms on the system to my knowledge.

You don't require members to register?

No provisions for feedback?

No 'recommend this site'?

No contact page?

Nothing

[DFAlpha]

You don't require members to register?

No provisions for feedback?

No 'recommend this site'?

No contact page?

Nothing

Nothing :/ We're working on that sort of stuff for the future, but it's a high-traffic content-push site.

Now that I've got access to FTP, there are a few old scripts lying around that could be the problem, I'm deleting everything that is not used right now. I've also changed every account password in the system.

[Vin DSL]

Now that I've got access to FTP, there are a few old scripts lying around that could be the problem, I'm deleting everything that is not used right now. I've also changed every account password in the system.

Pour over your logs too!

[excalibur]

No provisions for feedback?
No 'recommend this site'?
No contact page?
Nothing

Vin, for the same reason, my site (3 domains) is disabled. I audited my site, did found some malicious scripts and reinstalled the main site. It´s still disabled, however, one hour ago I received a bounced email. Gremlins?

[Gwaihir]

Or a mail server that's slow to bounce?