Apache is functioning normally

[spinthew]

Hi all,

My site is gone, and replaced by "apache is functioning normally."

Could you please help? @Anna?

 

[garrettroyce]

Your account was suspended for malicious content, as a result you are seeing this placeholder page.

 

[spinthew]

What? There was no malicious content. It was a page for my business. Can I please get my site restored?

 

[garrettroyce]

Typically what happens is someone finds a way to get into your website and upload something. I don't see that you logged in when this happened, so I would guess that someone found a way to hack in. There's also a login from a blacklisted country in the last few months that was caught.

Additionally, your account hasn't been logged into since mid-December, so ultimately the account was suspended for not logging in for more than 30 days.

I will talk to the abuse team about the malicious software and see if the account is able to be recovered or if it's all in quarantine.

 

[spinthew]

Thanks @garrettroyce . Even if I could get an old copy of the site, I could clean it up myself.

 

[garrettroyce]

Thanks @garrettroyce . Even if I could get an old copy of the site, I could clean it up myself.

It looks like an illegal botnet is the cause; ironically, letting you download the illegal botnet software could possibly be illegal. I've tagged this thread and will reply once the abuse team has had time to look it over. If your account has a backup (generally accounts that don't get logged in to are deleted, but the server move gave people who shouldn't have backups, backups), and if your backup is safe for download, I will make sure you get it. The hacker could delete your files just to be a jerk and I have no way of seeing your files because I'm a volunteer, so I can't promise that anything will be able to be restored.

Please hold on and I will get back to you as soon as I am able.

 

[garrettroyce]

@spinthew I realized I had an incorrect filter set when I was reading the logs; that log entry was not for your account. Sorry, it pulls up some things based on info that can return false positives, and I didn't read it correctly.

Please be advised that your account was correctly deleted because it was suspended for inactivity after 30 days and then not re-activated. E-mail was not sent out about this occurrence, so as a courtesy your account will be restored this one time only. You must log in every 30 days when using x10Hosting free (but the other services do not have this restriction).

@Anna I messed up reading the log on this one and I think it falls in line with the recoveries we have been doing

 

[Anna]

@spinthew your account should now be good to go. Remember to always login every 30 days, I recommend much more frequently to ensure you get information as well as stay on the safe side.

Never rely on emails for a reminder to login, make it a habit instead.