How to avoid hacking issues in web hosting?

worldview · #1 (**permalink**) 25-05-11, 09:22 AM

I'm currently very frustrated as my site hosted with Web Hosting UK windows server is constantly being hacked/defaced by Turkish and Indian hackers. It has happened several times this month and I loose business, reputation and search engine rankings every time it happens. Currently the site has been down for 13 hours and previously this month it was down for more than 24 hours.

Therefore I would like to know what other customers in my situation have done to solve this hacking problem, which has been confirmed to be a problem of the server - not my site in particular. The server is simply too vulnerable to security issues.

What are possible long-term solutions?
Have you changed to another hosting company or have you changed server and what are the possibilities and experience? Did it solve the problem?

The current server with constant problems is with the DotNetPanel (DNP) controlpanel. Would is help to change to a server with another control panel, and what potential issues will I face if I do so? I hope for some feedback to avoid future frustration with my current Windows Hosting solution.

websud · #2 (**permalink**) 25-05-11, 08:41 PM

Hello Henrik,

We do agree that you have been facing continuous hacking with the websites hosted on Dot Net Panel server.The hacking took place due to weak permissions on an account. The scripts uploaded under the hacked account were changing permissions of other accounts, which created multiple and continuous issues.

Hacking was stopped, but, later on the accounts which were already in suspended state, got hacked again as the scripts were active under other account.

We have moved most of our client accounts on secured Plesk Shared Server. Do let us know if you want us to migrate your account from Dot Net Panel server to Plesk Control Panel.

worldview · #3 (**permalink**) 26-05-11, 12:25 AM

I requested a move to a Plesk based Cloud Server already this afternoon but I received no reply to my request.

Now the site is down again - all default.aspx files seems to have been deleted.

This is turning into a joke - my site is constantly down. I really don't understand how you can provide such an unprofessional service. You did not even have a backup when it was needed this afternoon.

websud · #4 (**permalink**) 26-05-11, 12:51 AM

Quote:

I requested a move to a Plesk based Cloud Server already this afternoon but I received no reply to my request.

Now the site is down again - all default.aspx files seems to have been deleted.

Can you please let us know the ticket ID on which the request for moving sites on Plesk Control Panel server was made.

All default.aspx files have been fixed.

worldview · #5 (**permalink**) 28-05-11, 11:08 AM

@websud

Sorry, for some reason I have not received e-mail notice that this tread was updated.

The ticket-id is: #QRC-432-90956

Your support have since copied my files/database and I have made changes in the web.config file, but I still can't get the site to work in Plesk Site Preview.

Please also see this post:

Link: Server hacked for more than 24 hours

I would also appreciate a reply to my Plesk-oriented concerns. Several options in Plesk on the Cloud Server returns "Operation failed".

Thanks.