|
|
Discussion Notes
Support Staff Response
Dear Sir/Madam,
Regarding your hosting account XXXX.com:
The XXX.com web site has been found to be compromised which is a violation of section 3 "Your Obligations" of Go Daddy's Web Hosting and Virtual Dedicated Hosting Service Agreement.
The relevant passage of this agreement has been provided below:
"You may not use Go Daddy's servers and Your web site as a source, intermediary, reply to address, or destination address for mail bombs, Internet packet flooding, packet corruption, denial of service, or other abusive activities. Server hacking or other perpetration of security breaches is prohibited and Go Daddy reserves the right to remove sites containing information about hacking or links to such information."
Go Daddy's "Web Hosting and Virtual Dedicated Hosting Service Agreement" is located at the following URL: https://www.godaddy.com/agreements/showdoc.aspx?pageid=HOSTING_SA
This situation has resulted in a potential security threat to Go Daddy's network and the security we provide to other customers. It appears that this abusive action may have been the result of your server becoming compromised and ultimately exploited by a third party. Upon detection of this problem Go Daddy's Security Operations Center requested that Go Daddy's Advanced Hosting Team alert you of this action in the hope that you can resolve the issue.
*** IMPORTANT ***
Due to the serious nature of this malicious action, your site is scheduled to be suspended if you do not take immediate action. This suspension will take place on January 15th, 2012 and will occur if either a repeat occurrence of the abuse is, at any time, detected OR you fail to reply to this message.
****************
Go Daddy's security team has collected the following information to assist you in troubleshooting this issue:
Your Shared hosting account was compromised on or before Jan.8,2011 through DeDeCMS vulnerability. We found and deleted multipe backdoors and scanning software. We advise you to update your panel software.
This matter can be closed by simply responding to this notice with the following:
1. A statement that you have reviewed and agree to abide by the terms of the "Web Hosting and Virtual Dedicated Hosting Service Agreement," and
2. A statement that you have removed any malicious content residing on your web site, and
3. A statement that you agree to secure your web site in such a way as to ensure that there is not a re-occurrence of this issue in the future.
After we receive your reply with these statements we consider the matter resolved and continue to monitor the situation. (We reserve the right to suspend the site again if a repeat occurrence of this security violation is discovered.)
If you require clarification in regards to this notice, Go Daddy's Advanced Hosting Support team, can be reached via telephone at 480-505-8871 or via email at networkviolations@godaddy.com.
If you have questions about this matter, you may contact us by replying to this email or by calling 480-505-8871.
We appreciate your cooperation in this matter.
Hosting Support Team
|
|