Problems with Namesco?

I think they've been hacked, anyone else had any issues this morning?

Seems I've had code altered and a script injected into my website, thankfully I caught it fairly quickly as I'm working on it at the moment. Definately not my PC as the site's mirrored elsewhere and that copy is fine.

Their control panel was haywire yesterday as well.

Tried phoning them this morning, but there's 14 people in the queue and I'm not waiting that long, so I'm guessing I'm not the only one with issues!

Definately something going on.

Whenever I normally call them there's a maximum of 2-3 in the queue.

Tried phoning again a couple of times, first time it just rang without even getting into the queue, second time I was in position 20.

If you have anything hosted with them, go double check it now...

Well they've really and truly managed to screw up their Zeus server.

I've got contact forms using mail() that were working fine yesterday (and still work fine on other hosting) that now only work in FF and Chrome?!? Damn good job I log every contact to a database before it gets sent and if mail() doesn't work mark it as failed.

Still can't get through on the phone, 17 people in the queue a minute ago, sent a support ticket in but I'm not going to hold my breath waiting for an answer!

Network status page shows no problems, apart from this -

Please be advised that access to the File Manager tool located within the Namesco control panel is currently unavailable due to routine maintenance. Customers wishing to use the built in file Manager tool are advised to use FTP while this work is carried out. We will update this notice with further information in due course.

'routine maintenance' my bottom, they've either been hacked or someone has really screwed up somewhere.

Not something I expect from one of the more expensive hosting companies, took them too long to work out they had problems and way too long fixing it

Hate the Zeus control panel anyway, so time for a move I think.

/rant

If you are thinking of moving, have a look at NetHosted. They don't have phone support, but replies to tickets and posts in their forums are usually replied to in minutes! The most I have waited for a response is under 2 hours. This is 24/7 at its best.

I have an account with them for a few other sites that I host already (and incidently, where I test sites and everything works fine!), never had a problem and as you said, they always seem to be on the ball.

Trouble is, I've just done a major update to the site and it's serving a lot more data than it used to and I'm not totally sure of the bandwidth requirements, may have to leave it a month to see how things pan out before I choose another host. May go for a VPS on NetHosted, but not sure I'd want to go unmanaged and £20 for managed is a bit OTT imo.

We have a client who is suffering from the same issue.

It adds an encoded peice of javascript which injects a modified version of jquery onto your site from an external source. It adds this javascript just above the BODY tag on every html page you have in your file system.

I started by purging the malicious code from each page and resetting the FTP password. The site is a flat html site and has no php or cgi scripts.

However I setup some automatic monitoring to check for future changes and have just been alerted. The malicious code is back.

I think the linux hosting server we are on is being mistreated and as they have several, it isn't effecting all people, only those sharing the same machine.

I'm not sure how namesco runs their webservers, but it's worth checking to see if setting your file privs to 604 works

In reply to a post by Stalks:

I started by purging the malicious code from each page and resetting the FTP password. The site is a flat html site and has no php or cgi scripts.

However I setup some automatic monitoring to check for future changes and have just been alerted. The malicious code is back.

Sounds as if the server is compromised .

Thanks for the heads up.

Have just checked and everything seems fine, will keep a close eye on it.

Wish they'd just hold their hands up to it, noone there will admit to a problem. A few weeks back they cancelled all FTP access until passwords were changed, so I'm guessing they knew something dodgy had been going on.

If it hasn't been done already, change the FTP password.

Well, they've finally held their hands up to 'unauthorised content' appearing on peoples sites, only about a month late.

Not sure what the 'Serve360 Hosting' is (old hosting company they swallowed up?), never heard of it and certainly didn't sign up to it as we're on the Business+ hosting.

Their FTP is down at the moment as well, I think that's the final nail in the coffin for this bunch...

Edited by SamsonUK (Tue 21-Apr-09 11:00:09)