Hi Bob,

Thanks for the detailed info. I have seen some incursions into a few sites at Godaddy, but the main hacks have been sites hosting at Network Solutions. Those have been hammered, by what appears somewhat different methods. Some have had the DNN site folder itself accessed (along with sub-folders) and the parent folders accessed as well. And going by the dates, they have been up to it for a couple of months. In fact, there where accesses yesterday -- one access wrote over 8,000 new folders to a site.

On Network Solutions it's much tougher to get the folder permissions changed. You have to put in a tech support ticket and wait. And of course, even if making the folders read / view only stops the intrusion, my clients (or me for that matter) can't make updates and revisions to the site. Also, any DNN scheduled events that involve writing to the hosting space (like clearing caches and such) will fail.

I would go in and arrange to have all of the files / folders "locked" but if that doesn't stop the intruders (they might actually using some other method to access the hosting space) then that might cause the attacks to the site(s) to escalate.

I think it's about time to retire from the web development business :-(

Jim