arg i hate dealing with lieing hosting companies
 

I host with a company called lelahosting.com
i have a dedicated box with em

well yesterday my box is "hacked" and evidently the script was running for well over 12+ hours and sence i paid for it to be managed ... i think tha tis kinda fucked up

but get this .. they put the blame on me ... i said okay whatever

then i make a post on netpoond about all this as that is the main board they focus on ... well some other customer steps up and is having the same issue as me ... same thing happend to him


what are the ODDS of two clients from the same hosting company getting hacked and both being on dedicaed box's and having the same thing happen to them?


i could understand if it was some virtual shit but we both had or own dedicated box


to me it soundslike the hosting compnay fucked up and they are now scrambling


:(

I'm sorry hun you should move over to Webair.

:)

actually the odds are not that bad, would be interesting to know if it was the same hack.

i am ...either oc3networks or webair

it is sounding like the same thing :(

i just dont see how a managed server that i am paying extra for them to manage can be under attack for 12+ hours running a script deleting shit from the server and writing crap data over


i just dont get it

there was a drama on that board a few months ago about them.

Mike will hook you up any time.


:)

odds are great ... the hackers start scanning of ports on an IP range , then targets the vulnerable ones ....

Sorry for your problems, but this is something to expect, so you have to try to prevent it ...

precisely

Can't go wrong with OC3. Great company!

happy to help if i can

Chris,

Hit me up I will hook you up on a great box! and offcourse amazing price... :thumbsup

Chris, you should work out a refund with them if you are not satisfied.

Doesnt Lela resell in Webairs facilties?

whats mike's icq

LOL they wont even answer me on icq

I'm sorry that such thing happened. Please contact us if you will decide to change your hosting company.

.......... good question i know they resell

This sounds more like you have a VPS rather then a dedicated box

20458616



:)

it better not be VPS lol i am under the impression i have a dedicated machine

It sounds shitty, and since you are a managed customer that should have happened. We all know that getting hacked is just a part of this business. Since you were a managed customer they should have been providing you backs of your data at least nightly, and should have restored the box, repaired the security hole and that is that. Like 4 hours worth of work.

I would switch companies right away. My hosting company offers great prices on managed boxes. But if you don't go with me, go with omeone just get away from those guys!

Good Luck!!!

JoeW

Chris please feel free to contact me if decide to look for a new host. We can work out a plan that will best meet your needs. Thanks.

http://www.pix8.net/pro/pic/9954iTJcP/356930.jpg


Hackers suck, but we have alot of experience with them.
Let us host you and I will get you a nice firewall and tripwire and etc...

OK.. let's just make sure we keep this conversation REAL. With practically every host backups are optional regardless of whether or not you are managed or unmanaged. "backs of your data at least nightly"...? How much hosting do you do that you back up nightly? By experience most clients that do choose to have backups are more likely to have weekly or monthly incremental full backups with the possibility of key data like databases and configurations backed up daily. Suggesting that it is 4 hours of work is plain silly, you don't know if he had 10 gigs of data or 500 gigs of data to be restored or combed through.

Listen, I'm not saying that this is a good host or a bad host - sometimes bad things happen at good hosts and of course bad things are prone to happen at bad hosts. But, if we're trying to have an intellectual conversation about this situation, let's keep the comments educated and unbiased for at least his sake so he can learn from it.

Depending on the complexity of the compromise, it's also not fair to suggest that completely redoing the box and finding all of the exploit(s) and potential problems is something that is quickly done unless you are simply doing a fresh install and restoring known good data over-top.

That's my :2 cents:

Brad

Well your :2 cents: are under evaluated ...

Your post is to the point ... and accurate.

I have clients that have no backup drives. They didn't want to pay for it, so it is their responsability in case of hacking or hardware failure ...

I supplied them with a script for nightly DB backups ( emailed to them ).

If a client wants more protection, he can install ( or pay to get installed ) a firewall. Also, he can spoof the ports that are normally used by the hackers ...

If it's managed then your websites should be sheltered from the root of the server so only that one account can be hacked. if the whole server is hacked then it might be a flaw in there configuration.

Did you have root access?

We try not to give this out with dedicated boxes, the difference based on having the root password of who has issues and who doesn't is night and day.

A really good hosting...
 

Hi!

If u are fed up with the lier hosting componies, I recommend for u the Servage..
About a month ago my friend told me about it, and i am absolulty satisfied with them..:thumbsup
I mean they give huge monthly transfer, webspace for a fare price, free stats, MySql, php and adult webmaster support...
If u want to know more about it, check my signature...:pimp

Regards,

I love dedicated specs for the price of a cheap virtual ( 9.99 / month )....

Makes me go ... hummmm... why do clients host with me .... ?????

Did you read the terms of me buying your signature? You signed that contract...It means that you have to switch to OC3 because I told you they rock...:1orglaugh

Hahaha yeah.
You get what you pay for :thumbsup

Anyway Chris, if you need any help working your server security up feel free to hit me up, even if you dont come with us.
It sucks to see other people hard work going to the trash.

Hosting companies never have anything happen that is thier fault. There is always someone else to blame for everything.

To tho point and Well said Brad :thumbsup

Wow, this is an awesome thread - the hosting vultures jump out, the uneducated run their mouth and the OP really has only 1 helpful post...

The reality of managed hosting is that the customer is still responsible for ensuring their 3rd party software (forums, trade scripts, etc.) are secure. Keeping the hosting company's end of the bargain is easy - only a really piss poor host wouldn't be able to keep up with patches.

My experience with clients is that they upload and forget it. As long as it functions they don't care. So when patches come out, they are never applied and their site becomes insecure. Can you honestly blame the hosting company in that scenario? No hosting company can keep up with every 3rd party software release...

I feel bad for Chris, but... he should have had backups in place... I always recommend clients backup their data, especially if it has value (sentimental or monetary), often. I can't see why anyone WOULDN'T back up often. Bandwidth is very cheap and backup services are quite affordable.

Chris, you could always have the drive sent off to a data recovery place. They usually aren't cheap, but we've done this for clients in the past and had a couple success stories (and a couple non success stories... but the good shops don't charge when they don't recover data).

Good luck.

Brad telling it like it is, yet again. :)

Could not have said it better myself. Long time no talk, hope business is well. One of the few folks in this industry I would have absolutely no problem with recommending.

-Phil

he is not lieing either.. :thumbsup

Sebastian

Thank you for the kind comments Phil, Milan and Directfiesta!

Wishing all of the good hosts tremendous success :)

Cheers

Brad

Hosting...
 

I have just recommended that hosting because it is really good...that's all!

another note, stay the fuck away from idealbandwidth.com

see sig for a great, honest host :thumbsup

Should have had backups ;-)

Check us out some time. http://www.bytefortress.com/datavault_pro.html

Sorry to hear about your problems with them!

you've been around for how long...why are you hosting with some off brand host..you should know better

update: NO SOFTWARE WAS AT FAULT FOR THE HACK.

they are blaming it on a weak root password

and well it wasnt really that weak but could of been better.

That sounds questionable and also managed dedicated servers should include daily back ups.

Something is off about all this. The security of the box is part of being managed and a week root password should of been requested to of been changed or a password fail with block tool to protect brute force attempts.

If you want to try something else let ms know. http://www.dwhs.com

Sorry to hear about your problems with them! Use strong root passwords with lower and upper case letters, numbers and punctuation symbols.

Sounds like a swindle.

:disgust

Why not limit SSH access based on IP ranges? That way you are much more secure....

Sorry to hear about it.

I hope you didn't lose alot of data.

Lol so many clueless hosts. Like it matters is it dedicated or not, managed or not. That's not something that prevents it from getting hacked. Like it matters if you have firewall or not. I've yet to see a hosting company that takes security seriously.

You have to check out ATCIHOSTING They offer a free month with all virtual plans and have very competitive prices. Their dedicated servers are also high in quality. These guys won't be screwing you over anytime soon. :)

The support is some of the best in the business too. If you need any scripts installed or help with anything they are available on ICQ almost 24/7.

They can also customize your hosting plan to whatever suits your needs, from both dedicated and virtual servers.

Available payment methods are: Epassporte, Paypal, Credit Cards, Wire Transfers, Checks and Moneybookers.

I highly recommend ATCIHOSTING from my own personal experience. :thumbsup