Justhost hack! Website hacked once again!
May 21
We have been hosting with Justhost for sometime, so far the experience is ok. A good cPanel hosting with good price and that is what we think about Justhost hosting. Unfortunately, recently our website had been hacked in again, and site planted with downloader virus. This is not the first time we encounter this, and we view it as high severity.
When we visited our website today, our computer antivirus detected a virus downloader that attacking Firefox web browser. Fortunately, the virus gets detected and clean away. The virus definition is “JS/Downloader.Agent”. The question is how this virus gets into our web space. Definitely, there is some vulnerability on the hosting server. We already have strong password for cPanel, FTP and WordPress login.
For today, we think Justhost sucks a lot. Unsecure server is bad for any website, not to mention ecommerce website that carry out online commerce world wide. You don’t want to prompt your customer with virus downloader alert and ask them to clean it.
We already clean our hosting space once again; deleting everything from our web files folder, hopefully remove the virus infection. And now, we are managed to clean it, and website back to normal without the downloader.
We are hoping for secure web hosting services, and Justhost need to improve on this. For twice our Justhost website gets hacked in and this is annoying. Justhost sucks? Yes it is!
Go to Justhost and view their services here!
Justhost hack! Website hacked once again!,
Twitter
RSS
YouTube
Justhost.com

I agree
Jul 31, 2010 @ 01:37:05
I am inclined to agree as of now. I have been with JustHost for some time and have been recently hacked 3 times within the past few months. I, as well, use extremely strong passwords and know that the security breach is not on my end.
Nathan
Aug 04, 2010 @ 05:14:01
DAMN!! I’ve started reselling on just host. 4 sites hacked…. now reading this i’m expecting a large headache!
Alex
Aug 06, 2010 @ 21:05:30
me too, all my websites got hacked..
Ken
Aug 18, 2010 @ 23:09:02
I had my site DNS results on search engines hacked today. Justhost.com said that its $69.95 for a secure SSL site. They said a shared secure site doesn’t work. Then said it did work.
This is pissing off my customers. If they don’t respond quickly with details and a corrective action plan I have to go elsewhere.
What makes me upset is that the justhost.com site says my site comes with SSL .
So justhost.com please get to correcting my issue asap
Ken
Aug 18, 2010 @ 23:20:48
My site DNS is hijacked. The technician acts like this is the first time he’s ever heard of such a thing. I said Google my company name and click a link.
The reply is that he does not submit websites to search engines. Clearly this is not the question I posed.
Then I cannot get access to the site. Asked for a password refresh and it took over an hour. The user ID and password do not work. I even cut and paste twice.
odd that you cannot get a new password instantly and get on with solving issues.
If I don’t get a good reply I’m just packing up and going to another host like Godaddy.com with secure at low cost. Not another $69.95 like this guys. LOL I am not!
K
Aug 19, 2010 @ 00:10:20
I recommend going to another host. These guys just said we fixed it and wait 2-3 WEEKS! Forget that.
I’m switching over to Godaddy.com I think. Good price and secure.
Andrea
Aug 21, 2010 @ 10:41:08
My jushost account was also hacked…
I have lots of client domain in there and now I will have to change everything…
Basher
Aug 28, 2010 @ 20:52:53
Yep.. I’ve NEVER had my sites hacked on other cPanel host, but since I’ve been at JustHost it’s happened twice in 2 months!! I’m tired of it.. I’ll be moving my sites asap!! Don’t use JustHost.. you will be hacked!
Basher
Aug 28, 2010 @ 21:23:08
Follow up from JustHost.com tech. All my files have CORRECT file permissions and I have strong passwords.. yet they still say its my fault ?!?! Terrible.. here’s the reply from the tech:
–
Victor: To prevent the hacking attempts
Victor: suggest you to change the password of your email accounts, control panel, mysql databases, etc., Also if you have turned on the anonymous ftp, then please turn it off.
Victor: Also please make sure that you assign the correct permissions to your files/folders, so nobody can access/edit them other than you.
Victor: You need to upgrade all the applications you are using on your website to the latest version.
Victor: Is there anything else I can help you with?
Victor: Shall I proceed to close this chat session, if there is nothing to discuss?
Victor: You are most welcome!!
Victor: Thank you for visiting Hosting Support. Should you have any queries or require any further information, please do not hesitate to contact us.
Victor: Have a nice day!! Good Bye.
–
Yes Good Bye, JustHost.. you will not be missed!
Steve
Sep 06, 2010 @ 07:39:42
All my websites of Just Host Reseller account was hacked today. They were restored and re-hacked. They are too slow to respond and it seem that they don’t know what is going on.
JustHost SUCKS Big Time.
-V-
Nov 15, 2010 @ 10:09:03
Poor support from Godaddy, they would not even help me reset my own password, becuase they didnt think I was who I said I was. Anyway, I switched to Justhost months ago, and everything was fine, until I had a customer update his own site. Everything went to hell from there.
I traced the attacker to this pirate site : nhihuyen.cc subdomain sv3.nhihuyen.cc
It appears the attacker did not vandelize anything, but did block all access to my admin accounts, and even to my use account on justhost.
I personlly feel the pirate site is constanly looking for a new host to store the pirated DVDs but the domain is registered with tucows.com
-
Experts say the attackers are entering wordpress sites through the plugins, I beleive the plug used in this case is one called ad manager.
-
Should I stay with justhost? I will for now, being I do not belive it was the fault of justhost at all.
-V-
Nov 18, 2010 @ 21:48:45
UPDATE. The hacker actually used a Password Collector which was hidden in a file I downloaded from a file sharing site, Just Host was in NO WAY at fault.
Anonymous
Jan 19, 2011 @ 08:02:22
This is a warning for people not to waste their time by using the Just Host hosting company. Your website, if hosted by JustHost, has a very high chance of being hacked due to very poor server security. I myself have had my website hacked 3 times in a number of days. I use very strong passwords and know that the infection is not created my end. Having strong user passwords will do nothing to prevent your site from being hacked if you are with JustHost.
Save yourself a lot of time and in the long run money by using another company. You have been warned.
Favorite Domains
Feb 08, 2011 @ 20:02:15
My sites are also hacked again. This is second time it happens.
I got reseller and VPS hosting and they are doing ok without problems.
I think justhost got serious security problems.
Graham
Feb 12, 2011 @ 15:02:16
Hi, I too have had my site hacked whilst i’ve been on Just Host. I know its not my end as i was the last person to log into my account. There seems to be a running theme with all the comments, which is their servers are not that secure. I run a computer sales and repairs company so I know a lot about computers but little about web server security. Has anyone used ipage as a web server? I’ve been reading about it and it seems pretty good.
Sam
Feb 14, 2011 @ 17:05:52
Keep Away from Justhost my websites been hacked time and time again.
Justhost server security very open, I can go to any control panel I want .
Thank god I have moved my sites some where aus and I’m happy again
Keep Away from Justhost, Keep Away from Justhost, Keep Away from Justhost, Keep Away from Justhost.
presasportiva
Mar 07, 2011 @ 14:02:38
Oh my God, i was thinking that is only my problem, but now i realize that JUST HOST sucks so deeply !
To anyone who wants to use their service, think twice ! That’s a wasting of money, and of course a nervous problem too.
Happy spring to everyone. Greetings from Moldova.
MC
Mar 15, 2011 @ 12:03:53
We have a JustHost reseller account. One of our client accounts has just been hacked with the r57 exploit. JustHost support are taking an age to reply and I have no idea how to get rid of it (or even what it does). This is on latest version WordPress site with pretty vanilla JustHost install. The passwords are very strong so I don’t think it was a password crack. Judging by the comments above I am worried that Justhost are an insecure host. A bummer as otherwise their offering seem very good.
Rick
Mar 16, 2011 @ 12:08:50
JustHost is not responsible for hacker attacks.
Its probible lack of security on your website, as anyone with common sense will tell you, The hosting company is simply a host for your files. Its up to you to keep your site secure.
Its like blaming the a cell phone service provider for the poor performance of the brand of phone, like samsung. And vise versa, blaming a High quality phone like Nokia, for poor service from the provider. Each is not responsible for the others performance.
Tommy (Admin)
Mar 16, 2011 @ 23:20:32
There are two type of hacking, first is the most commont that hack from website over the internet (taking the largest percentage) and the second type is hack within the server either from infected sites or via direct hacking to the server.
IMHO.. Both good website & good server is require to prevent further hacking problems.
MC
Mar 17, 2011 @ 05:41:24
There is nothing clever installed in the web space, just a simple web site based on WordPress (latest version), with latest version of some very common plugins and the ubiquitous NextGen gallery. We have run this site on our own servers for over a year with no problems. It does seem a mite suspicious that within a fortnight of moving it to JustHost it gets hacked.
And Rick, I don’t think security issues are a simple or black and white as you make out. Justhost Review is more correct. If I were to run a simple html (i.e. plain text) web site with no scripts and the home page was hacked (not via password sniffing) then it’s pretty certain that the host is not supplying the required level of security. If it were an Windows based server (which I am more conversant with) and the host did not install the OS security updates released with alarming frequency by Microsoft then any resultant web site hacks would definitely be down to the host.
The hack we suffered from may have been automated but seemed to use a r57 shell script that (at the least) changed the home page (and style sheet). The new home page stated we’d been hacked by Seif Jelidi – who’s (assuming he’s a person) boasting page
JustHost’s (rather slow in coming) response to our support query was:
“Your login info can be taken from your browser’s cache by some virus, then credentials to access your hosting account can be delivered and used by somebody else. So, I advise you to check your and your customer’s PC with help of some good anti-virus software and then change the login info to access any area of your account. Also, it is strongly recommended for you to check all the software used for your sites (applications, plugins, modules, themes etc.) it should be always up to date and fully patched (secure)”
John Admin
Jun 19, 2011 @ 07:57:11
February and March was months with massive hack attack, and we have received quit some numbers of users complaining their websites being hacked in.
Three months went passed and we haven’t received any new hack report so far, and we can’t find new hacking report in most online source too, this clearly indicating the justhost servers are right now back to safe and secure environment.
Tim
Jun 24, 2011 @ 15:51:12
Unfortunately I use JustHost. They were fine until two weeks ago when all my web sites, email and ftp went on the blink. At first I did not get a proper answer but finally they said it was a DDoS attack, that took over 24 hours to fix. Now, it has all gone wrong again and I read disturbing reports of a massive security (twitter.com/#!/ContraHax).
They say this is not true but I have had so many excuses I really do not believe them. Definitely going to swap. Anyone have any suggestions?
Rick F
Jun 28, 2011 @ 09:52:30
Yup I’ve just been hacked on all my sites with just hosts. phoned their support and they have no interest at all, tried to insinuate that I was to blame for their poor security.
No longer will I tell people to use them
ol
Jul 24, 2011 @ 09:36:13
My site is hacked too – just noticed
Gary
Aug 01, 2011 @ 11:34:33
YOUR ALL NUTS
Justhost provide security on their own end of the server. Are you all to stupid to know this? You should be providing your own security on your own end of the server. Sitelock or similar sites provide just that.
Get a life and stop moaning about your own errors!!!
Bhanu Singhai
Aug 06, 2011 @ 02:36:35
Today All my website are hacked
cem
Aug 18, 2011 @ 12:07:05
all of my sites are hacked on justhost.
Unimpressed
Aug 22, 2011 @ 05:23:10
I have had 14 attacks in two weeks. Theme files locked down to 444, strong passwords, all wordpress plugins and wordpress up to date. No problems for 2 years, then hacked to death!
Carlos
Sep 15, 2011 @ 07:46:08
My site has been hacked twice in just 3 weeks! An intruder allocated phishing links and sent thousands of emails with my domain…
My account was suspended the first time by justhost without letting me know, and now my website is just down since yesterday, and I do not receive a reasonable explanation from justhost…
Mad
Oct 04, 2011 @ 20:52:40
Our site has been hacked three times in the last six weeks. Every time I change the passwords and update the wp theme. This is a phishing attack. They create unique sites under our domain. We’ve done a complete scan of the only PC that has access to the Cpanel and found no virus. At this point I don’t know how to stop it or if we can stop it. I’ve not found the solution…yet.
LOLO
Oct 17, 2011 @ 15:08:13
my justhost site were hacked 3 time in 3 weeks by some dude from pakistan. I called they have real remedy for the problem.