Active connections

My server has been suspended by my ISP, for the last 2 weeks, I have had bandwidth issues, with as much as 200gb of traffic daily,

The techs all have a different theory as to where the traffic is coming from, but they can't give me an answer nor they say can they fix it, they say it is up to me.

I suggested to them that they allow me enough access to work out how to back up and restore the site, once done, they reset the account as if new, so I can start with a fresh slate, my concern is that I may back up and restore whatever is causing the open connections.

This is the quote from them

"Guy, We have suspended your account. It appears your site has been compromised we found 65535 active connections to your site which was causing our server to become unresponsive. I apologize for this inconvenience but we cannot un-suspend your account until you provide us with information as to what you will do to remedy this issue. Thanks

Sincerely,
James P.
Jumpline, Inc. Support Team"

How can I fix this?

We need Zen Cart Version & a full list of modules installed. How many products are in your store?

It could be a hack, mail relay or phishing exploit etc as well, so the more technical info you can give the easier it is for any of us to tell you what is going on.

https://www.australiancaching.com is ver 1.3.8 (as with 2 test stores)
https://www.nacaching.com is the latest version, uploaded 2 weeks ago.

full list of modules, I have dozens, and I have saved a bunch to the hard drive, and of those not all are used, I wouldn't know where to start

Qdixon:

We need Zen Cart Version & a full list of modules installed. How many products are in your store?

It could be a hack, mail relay or phishing exploit etc as well, so the more technical info you can give the easier it is for any of us to tell you what is going on.

In other words what 3rd party mods are running...all of them that you installed separate from Zen Cart

Modules I am certain of
Additional images
Admin Store name
Ask with sidebox
Back up sy site
Back up SQL
Bulk Attributes
Canada Post desktop
Canada Post
Cart Upsell
Cart contents
Cross sell
dangling carrot
discount 1.11
enhanced who's onl line
HTML Area Image Manager (never got this going)
log in spruceup
better2.1
cart upsell
save for later
news box manager
SMS on sale
snapshot
stock qty report
stock on hand
tree menu (never got going)
X sell sidebox

Qdixon:

We need Zen Cart Version & a full list of modules installed. How many products are in your store?

It could be a hack, mail relay or phishing exploit etc as well, so the more technical info you can give the easier it is for any of us to tell you what is going on.

You have massive dns issues. At times your website will not resolve at all when I ping your domain and ip address, I do a nslookup and you have no authoritative server.

Either the company that hosts your domain is having troubles or the dns server it is running on is having issues or it is mis-configured.

As for the list that you have supplied, can you install an out of the box version of Zen Cart in a sub directory with the test products. We will see if the slowness happens with the "test" store.

That being said, I am 100% positive that you ALSO have dns issues.

I am not sure what DNS issues are, but I can tell you this, they have allowed me FTP access, I am deleting the old version of teststore 2
anything else I used when "playing" with the store when I first set it up.

https://www.nacaching.com was uploaded after the problems started, I was hoping to get all the products "copied/pasted" into the new store so I could have most of the work done if I had to delete the old.

when I use the database back up, do you know where it saves the file?

Qdixon:

You have massive dns issues. At times your website will not resolve at all when I ping your domain and ip address, I do a nslookup and you have no authoritative server.

Either the company that hosts your domain is having troubles or the dns server it is running on is having issues or it is mis-configured.

You will need to work with your hosting company with the dns issues. feel free to tell them what I said.

As for installing a version of Zen Cart for testing purposes, please follow the instructions included in the docs folder of the files.

To where your database file is saved, you will need to ask your host that.

If you make your own database backup using phpMyAdmin, that backup is wherever you download the file to as part of the steps in doing the backup: https://www.zen-cart.com/tutorials/index.php?article=103
If you're using the "Backup MySQL" addon, then it puts the backup into your /admin/backups/ folder.

I am downloading the old version store (australiancaching)

I am not too concerned with the add ons etc, but want to back up my products, descriptions, customer and sales details (there are only 6 odd sales) plus e-mails.
Anything else you may suggest.

Is there an easy fix for this?

At this stage I do not have access to my database, as they have yet to give me htp access, but once I assure them I am well on the way to fixing it, I am certain they will allow me access.

I have a feeling that the new version with security updaetes should resolve it.

Guy

QUOTE=Qdixon;890840]You will need to work with your hosting company with the dns issues. feel free to tell them what I said.

As for installing a version of Zen Cart for testing purposes, please follow the instructions included in the docs folder of the files.

To where your database file is saved, you will need to ask your host that.[/QUOTE]

You will need a full backup of your files and to clean the issues and you will need to follow the "recovering from hacks" guideline of course. Now you will need to upgrade to 1.3.9c anyway. If you have a backup of your files before the "incident" that would be better otherwise you will need to do a lot of comparing. In the worst case scenario it is to rebuild your store using 1.3.9c and use the same database.

Lets just assume it is a hack so that your hosting company will release your files to you to clean. Even though your account was suspended, it does not affect your DNS settings...those will still need to be straightened out.

As for your database, simply tell them you need a backup to rectify. I am sure they will provide one to you if you ask.

I found it as I was backing up "store" folder, I saw it flash by.

Once I install the new version, then I assume one of the first add ons I upload will be back up my database, then use the restore.

What will the database back up give me?

I assume all my product details, e-mails etc.

I also assume that I just have to mainly work on the store appearance, such as header etc.

Guy

DrByte:

If you make your own database backup using phpMyAdmin, that backup is wherever you download the file to as part of the steps in doing the backup: https://www.zen-cart.com/tutorials/index.php?article=103
If you're using the "Backup MySQL" addon, then it puts the backup into your /admin/backups/ folder.

They have enabled http access now, is there anything you can now check for that you couldn't before?

Guy

Qdixon:

You have massive dns issues. At times your website will not resolve at all when I ping your domain and ip address, I do a nslookup and you have no authoritative server.

Either the company that hosts your domain is having troubles or the dns server it is running on is having issues or it is mis-configured.

I have restored the database using your add on,
but there is no change,
I would have thought that the fresh install with the latest cart, and a restored database would at least bring back my customers etc, but nothing shows up in admin???

Guy

DrByte:

If you make your own database backup using phpMyAdmin, that backup is wherever you download the file to as part of the steps in doing the backup: https://www.zen-cart.com/tutorials/index.php?article=103
If you're using the "Backup MySQL" addon, then it puts the backup into your /admin/backups/ folder.

Disregard, fixed.

Australian Caching:

I have restored the database using your add on,
but there is no change,
I would have thought that the fresh install with the latest cart, and a restored database would at least bring back my customers etc, but nothing shows up in admin???

Guy

QDixon and DrByte
Thank you for your assistance on this.

My concerns about losing months of work were unfounded, the store was deleted and restored in a matter of hours.